You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Steve Cramer <St...@mssgroup.com> on 2004/11/04 22:45:32 UTC

Operational restrictions in svn?

Hello, all!
 
I'm planning to use Subversion as our source control solution, and I'd
like to limit authority to perform certain types of operations, such as
branch merges, branch creation, etc., to either a central sys admin or
to specific development team or tech leads.  Ideally, this would be
accomplished through some mechanism that would examine the specific
operation requested and compare it to an ACL or similar.  Looking
through the docs, it appears that there's no direct way to accomplish
this, however.
 
In the absence of this direct mechanism, limiting access to create
branches can be accomplished (to some degree) by limiting access to the
branches directory, while opening access underneath specific branch
directories to enable developers to actually develop on branches.  (This
is incomplete, though, as there's nothing preventing a developer from
executing an svn copy to target another directory to which they _do_
have write access.)
 
However, since a branch merge is an operation that modifies only the
working copy, and the actual repository-modifying action is a plain-old
commit, I haven't been able to come up with a workaround.
 
Has anybody else tried to implement these sorts of operational
restrictions with Subversion?  Any thoughts on possible solutions?
 
Thanks in advance!
 
cramer

Re: Operational restrictions in svn?

Posted by Ben Collins-Sussman <su...@collab.net>.
On Nov 4, 2004, at 4:45 PM, Steve Cramer wrote:
>
>  
> Has anybody else tried to implement these sorts of operational 
> restrictions with Subversion?  Any thoughts on possible solutions?
>

I have to admit, I don't quite understand the problem here.  You 
currently have the ability to control each user's ability to read or 
write any path in the repository.  Why do you need to control the 
specific client commands that users run?  Why does that matter, since 
the ultimate result of any command is a read or write to the 
repository?


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org