AuthzSVNAccessFile question

[Gerhard Gappmeier <ge...@ascolab.com>]

Hello

I've a question regarding the user access management using Apache
and the AuthzSVNAccessFile access.conf.

Given the following sample repos structure 'sample':
tags/
branches/
trunk/
trunk/a/
trunk/b/
trunk/c/

I want a user 'foo' to fully access the folder trunk/b/ but not to all 
other directories.
I've seen that the user also needs access to the trunk/ folder,
otherwise he cannot access the subfolder trunk/b/.

The problem is then he also has access to trunk/a and trunk/c due to the 
recursive configuration behavior.
I can switch off access to this folders explicitly by doing so:

[sample:/]
foo = r

[sample:/trunk/b]
foo = rw

[sample:/tags]
foo =

[sample:/branches]
foo =

[sample:/trunk/a]
foo =

[sample:/trunk/c]
foo =

But this is realy hard to maintain, especially when I'm adding new 
folders I've to keep the acces.conf uptodate.

Is there a better solution for doing that?

--
regards,
Gerhard


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: AuthzSVNAccessFile question

[Gerhard Gappmeier <ge...@ascolab.com>]

You are right,
it works now without parent folder access.

Probably I just had a typo when I tried it the first time.

Thx
>
> I am pretty confident that parent folder access is not required for 
> child folder access. You can simply give 'No Rights' to user at root, 
> and only give specific rights on specific folder irrespective of its 
> location. E.g. following works perfectly for me:
>
> [sample:/]
> foo=
>
> [sample:/trunk/b]
> foo= rw
>
> This way, I don't have to remove user's rights from every other sub 
> folder because "No Rights" are already dripping through from top to 
> bottom.
>
> Regards,
> Waqas Arshed
>
>
> ------------------------------------------------------------------------
> Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try 
> it now. 
> <http://us.rd.yahoo.com/evt=51733/*http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ%20> 


--
regards
Gerhard

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: AuthzSVNAccessFile question

[waqas Arshed <cs...@yahoo.com>]

<table cellspacing='0' cellpadding='0' border='0' ><tr><td style='font: inherit;'>--- On Tue, 5/13/08, Gerhard Gappmeier &lt;gerhard.gappmeier@ascolab.com&gt; wrote:<br>I've seen that the user also needs access to the trunk/ folder,<br>otherwise he cannot access the subfolder trunk/b/.<br><br>[sample:/]<br>foo = r<br><br>[sample:/trunk/b]<br>foo = rw<br><br>[sample:/tags]<br>foo =<br><br>[sample:/branches]<br>foo =<br><br>[sample:/trunk/a]<br>foo =<br><br>[sample:/trunk/c]<br>foo =<br>------------------------------------------------------------------<br><br>I am pretty confident that parent folder access is not required for child folder access. You can simply give 'No Rights' to user at root, and only give specific rights on specific folder irrespective of its location. E.g. following works perfectly for me:<br><br>[sample:/]<br>foo= <br><br>[sample:/trunk/b]<br>foo= rw<br><br>This way, I don't have to remove user's rights from every other sub folder
 because "No Rights" are already dripping through from top to bottom.<br><br>Regards,<br>Waqas Arshed<br><br></td></tr></table><br>

      <hr size=1>Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile. <a href="http://us.rd.yahoo.com/evt=51733/*http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ "> Try it now.</a>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org