You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Mikhail Sobolev <ms...@mawhrin.net> on 2004/08/02 08:56:41 UTC

authz documentation

Hi

I'm trying to better understand features of mod_authz_svn module.  So
far only two sources of information were found:
    -- INSTALL file that accompanies mod_authz_svn sources
    -- Subversion Book

However I could not find the answer for the following questions:
    * in case [project:/path] and [/path] both exist, how they are processed
    * if two records exist '* = r' and 'harry = ', what rights harry
      will have?
    * are those pathes pathes to directories only, or it's also possible
      to control access on per-file basis?

Regards

--
Misha

Re: authz documentation

Posted by Ben Collins-Sussman <su...@collab.net>.
On Mon, 2004-08-02 at 03:56, Mikhail Sobolev wrote:
> Hi
> 
> I'm trying to better understand features of mod_authz_svn module.  So
> far only two sources of information were found:
>     -- INSTALL file that accompanies mod_authz_svn sources
>     -- Subversion Book
> 
> However I could not find the answer for the following questions:
>     * in case [project:/path] and [/path] both exist, how they are processed

Specific repository overrides the "general" repository one, i.e. it's
matched first.


>     * if two records exist '* = r' and 'harry = ', what rights harry
>       will have?

Again, the more specific one wins.  "harry" matches both "harry" and
"*", but the "harry" one will override the general "*" match.


>     * are those pathes pathes to directories only, or it's also possible
>       to control access on per-file basis?


Access is on paths;  it doesn't matter if the path is a directory or
file, they all work.

Thanks for the feedback;  I'll make a note to clarify this in the book.



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: authz documentation

Posted by Mikhail Sobolev <ms...@mawhrin.net>.
On Mon, Aug 02, 2004 at 12:56:41PM +0400, Mikhail Sobolev wrote:
> However I could not find the answer for the following questions:
>     * in case [project:/path] and [/path] both exist, how they are processed
>     * if two records exist '* = r' and 'harry = ', what rights harry
>       will have?
>     * are those pathes pathes to directories only, or it's also possible
>       to control access on per-file basis?
Also, what happens if the user belongs to several groups, and these
groups have different access rights?

--
Misha