Access control inheritance

[Mathias Hjärtström <ma...@semcon.se>]

Hi there! I wonder if there is a way to make Subversion inherit the permissions set for access control in the svnaccessfile? Let me explain...

If I for some reason want to protect certain files or directories from any access by other users than the approved ones, I just make the necessary changes in the svnaccessfile. But if an approved user decides to branch or tag the tree using the lazy copy routine, anybody can access the protected files on the branches or tags, right? I then need to add separate access control statements for the same files and directories on the new branch and/or tag.

Isn't there any way to make Subversion inherit the access control permissions when making a lazy copy, kind of like following the links until the original file is found and inherit its permissions?

/M

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: Access control inheritance

[Max Bowsher <ma...@ukf.net>]

Mathias Hjärtström wrote:
> Hi there! I wonder if there is a way to make Subversion inherit the
> permissions set for access control in the svnaccessfile? Let me explain...
>
> If I for some reason want to protect certain files or directories from any
> access by other users than the approved ones, I just make the necessary
> changes in the svnaccessfile. But if an approved user decides to branch or
> tag the tree using the lazy copy routine, anybody can access the protected
> files on the branches or tags, right? I then need to add separate access
> control statements for the same files and directories on the new branch
> and/or tag.
>
> Isn't there any way to make Subversion inherit the access control 
> permissions
> when making a lazy copy, kind of like following the links until the 
> original
> file is found and inherit its permissions?

No. This is why we need in-repository ACLs, which are one of the major 
features on our roadmap.

Max.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org