You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Raghu GS <ra...@gmail.com> on 2013/01/10 13:56:47 UTC
access control for Subfolder is not work in svn 1.6
Hello Everybody
How can i block access to sub folders in svn for repository members ?
I have tried "membername =" and "*=" (without quotes)
parameters in svnauthz file.
I have also tried "require user membernane" in
/etc/httpd/conf.d/svn.conf
All the procedures i have tried didn't work.
Please consult the pastebin links given below to know my configuration.
1) http://pastebin.com/1X71kM9P (/etc/httpd/conf.d/svn.conf)
2) http://pastebin.com/2xhN3pcc (/srv/svn/config/svnauthz.conf)
3) CentOS 5.x, subversion v1.6.11
Re: access control for Subfolder is not work in svn 1.6
Posted by Thorsten Schöning <ts...@am-soft.de>.
Guten Tag Raghu GS,
am Samstag, 12. Januar 2013 um 15:12 schrieben Sie:
> I am receiving "Not a working copy" error in svn while creating
> external reference in svn.
Then you should provide some details about your working copy and the
commands you issued to set svn:externals. There surely is an error
somewhere.
> Isn't that mean external requires working copy?
No, it just means there's an error somewhere in what you did.
Mit freundlichen Grüßen,
Thorsten Schöning
--
Thorsten Schöning E-Mail:Thorsten.Schoening@AM-SoFT.de
AM-SoFT IT-Systeme http://www.AM-SoFT.de/
Telefon...........05151- 9468- 55
Fax...............05151- 9468- 88
Mobil..............0178-8 9468- 04
AM-SoFT GmbH IT-Systeme, Brandenburger Str. 7c, 31789 Hameln
AG Hannover HRB 207 694 - Geschäftsführer: Andreas Muchow
Re: access control for Subfolder is not work in svn 1.6
Posted by Raghu GS <ra...@gmail.com>.
> I think that Thorsten perhaps misunderstood your problem. I just
> tested this with Subersion 1.7.8 on a local file based repository, and
> when you're trying to *set* svn:externals, you do need a local working
> copy of the directory you're setting svn:externals for. TortoiseSVN
> does provide wonderful views into the existing upstream repository and
> its configurations, but I'm sure does not allow *directly* setting
> these properties in the repo itself, because it's not in the basic
> "svn" command itself.
>
>
Thanks for your reply.
If svn:external require working copy, then it can be implemented
only in client side basis right?
If i want my entire team to use a uniform svn folder structure, then
should i need to configure the folder structure via svn:external one by one?
Can't i just configure the svn repository structure in the server side and
let my team check out the entire svn repository with all related folders
linked using svn external ?
Re: access control for Subfolder is not work in svn 1.6
Posted by Thorsten Schöning <ts...@am-soft.de>.
Guten Tag Nico Kadel-Garcia,
am Samstag, 12. Januar 2013 um 16:42 schrieben Sie:
> I think that Thorsten perhaps misunderstood your problem.
That may be of course. :-)
> I just
> tested this with Subersion 1.7.8 on a local file based repository, and
> when you're trying to *set* svn:externals, you do need a local working
> copy of the directory you're setting svn:externals for. TortoiseSVN
> does provide wonderful views into the existing upstream repository and
> its configurations, but I'm sure does not allow *directly* setting
> these properties in the repo itself, because it's not in the basic
> "svn" command itself.
It does, I just tested: Open repo browser, show properties on any
directory and you can directly set new properties, including
externals.
Mit freundlichen Grüßen,
Thorsten Schöning
--
Thorsten Schöning E-Mail:Thorsten.Schoening@AM-SoFT.de
AM-SoFT IT-Systeme http://www.AM-SoFT.de/
Telefon...........05151- 9468- 55
Fax...............05151- 9468- 88
Mobil..............0178-8 9468- 04
AM-SoFT GmbH IT-Systeme, Brandenburger Str. 7c, 31789 Hameln
AG Hannover HRB 207 694 - Geschäftsführer: Andreas Muchow
Re: access control for Subfolder is not work in svn 1.6
Posted by Nico Kadel-Garcia <nk...@gmail.com>.
On Sat, Jan 12, 2013 at 9:12 AM, Raghu GS <ra...@gmail.com> wrote:
> Thorsten Schöning <tschoening <at> am-soft.de> writes:
>
>>
>> Guten Tag Raghu GS,
>> am Samstag, 12. Januar 2013 um 11:51 schrieben Sie:
>>
>> > svn:external can only function in a working copy.
>> > How do implement the same in svn source.
>> > Because people may not check working copy.
>>
>> svn:external is something which needs to be recognized by the client,
>> it doesn't necessary need a working copy. For example TortoiseSVN has
>> a repo browser which shows svn:external definitions with a link icon
>> and is able to follow those without checking out a working copy, just
>> by double clicking. There's no such thing like implementing it in "svn
>> source" or a working copy, you always need a client to access the
>> repo and svn:externals are always part of the repo. How they are
>> recognized may be different depending on the clients.
>>
>> Mit freundlichen Grüßen,
>>
>> Thorsten Schöning
>>
>
> Hi Thorsten
>
> Thamks for your reply.
> I am receiving "Not a working copy" error in svn while creating
> external reference in svn.
>
> Isn't that mean external requires working copy?
> I am 100% sure that the folder in which i was trying to create
> the external reference are svn repositories, i even committed
> some code in it.
>
> Still i am getting the error said above,
> If svn doesn't require working copy, then assist me in
> resolving the issue.
I think that Thorsten perhaps misunderstood your problem. I just
tested this with Subersion 1.7.8 on a local file based repository, and
when you're trying to *set* svn:externals, you do need a local working
copy of the directory you're setting svn:externals for. TortoiseSVN
does provide wonderful views into the existing upstream repository and
its configurations, but I'm sure does not allow *directly* setting
these properties in the repo itself, because it's not in the basic
"svn" command itself.
Re: access control for Subfolder is not work in svn 1.6
Posted by Raghu GS <ra...@gmail.com>.
Thorsten Schöning <tschoening <at> am-soft.de> writes:
>
> Guten Tag Raghu GS,
> am Samstag, 12. Januar 2013 um 11:51 schrieben Sie:
>
> > svn:external can only function in a working copy.
> > How do implement the same in svn source.
> > Because people may not check working copy.
>
> svn:external is something which needs to be recognized by the client,
> it doesn't necessary need a working copy. For example TortoiseSVN has
> a repo browser which shows svn:external definitions with a link icon
> and is able to follow those without checking out a working copy, just
> by double clicking. There's no such thing like implementing it in "svn
> source" or a working copy, you always need a client to access the
> repo and svn:externals are always part of the repo. How they are
> recognized may be different depending on the clients.
>
> Mit freundlichen Grüßen,
>
> Thorsten Schöning
>
Hi Thorsten
Thamks for your reply.
I am receiving "Not a working copy" error in svn while creating
external reference in svn.
Isn't that mean external requires working copy?
I am 100% sure that the folder in which i was trying to create
the external reference are svn repositories, i even committed
some code in it.
Still i am getting the error said above,
If svn doesn't require working copy, then assist me in
resolving the issue.
Re: access control for Subfolder is not work in svn 1.6
Posted by Thorsten Schöning <ts...@am-soft.de>.
Guten Tag Raghu GS,
am Samstag, 12. Januar 2013 um 11:51 schrieben Sie:
> svn:external can only function in a working copy.
> How do implement the same in svn source.
> Because people may not check working copy.
svn:external is something which needs to be recognized by the client,
it doesn't necessary need a working copy. For example TortoiseSVN has
a repo browser which shows svn:external definitions with a link icon
and is able to follow those without checking out a working copy, just
by double clicking. There's no such thing like implementing it in "svn
source" or a working copy, you always need a client to access the
repo and svn:externals are always part of the repo. How they are
recognized may be different depending on the clients.
Mit freundlichen Grüßen,
Thorsten Schöning
--
Thorsten Schöning E-Mail:Thorsten.Schoening@AM-SoFT.de
AM-SoFT IT-Systeme http://www.AM-SoFT.de/
Telefon...........05151- 9468- 55
Fax...............05151- 9468- 88
Mobil..............0178-8 9468- 04
AM-SoFT GmbH IT-Systeme, Brandenburger Str. 7c, 31789 Hameln
AG Hannover HRB 207 694 - Geschäftsführer: Andreas Muchow
Re: access control for Subfolder is not work in svn 1.6
Posted by Raghu GS <ra...@gmail.com>.
Grierson, David <David.Grierson <at> bskyb.com> writes:
>
> Hi,
>
> If I remember correctly, you cannot remove permissions which you have already
granted for a parent folder.
>
> See this answer on ServerFault for a more complete explanation of how I would
go about achieving this.
>
> http://serverfault.com/questions/404003/setup-svn-repository-subfolder-
specific-write-permission/432915#432915
>
> Regards,
>
> David.
> --
> David Grierson - Tools Specialist
> Sky Broadcasting - Customer Business Systems
> Email David.Grierson <at> bskyb.com
> Watermark Building, Alba Campus, Livingston, EH54 7HH
>
>
> -----Original Message-----
> From: Raghu GS [mailto:raghugs <at> gmail.com]
> Sent: 10 January 2013 12:57
> To: users <at> subversion.apache.org
> Subject: access control for Subfolder is not work in svn 1.6
>
> Hello Everybody
>
> How can i block access to sub folders in svn for repository members ?
> I have tried "membername =" and "*=" (without quotes) parameters in svnauthz
file.
>
> I have also tried "require user membernane" in /etc/httpd/conf.d/svn.conf All
the procedures i have
> tried didn't work.
>
> Please consult the pastebin links given below to know my configuration.
>
> 1) http://pastebin.com/1X71kM9P (/etc/httpd/conf.d/svn.conf)
> 2) http://pastebin.com/2xhN3pcc (/srv/svn/config/svnauthz.conf)
> 3) CentOS 5.x, subversion v1.6.11
>
> Information in this email including any attachments may be privileged,
confidential and is intended
> exclusively for the addressee. The views expressed may not be official
policy, but the personal views of
> the originator. If you have received it in error, please notify the sender by
return e-mail and delete it
> from your system. You should not reproduce, distribute, store, retransmit,
use or disclose its contents
> to anyone. Please note we reserve the right to monitor all e-mail
communication through our internal and
> external networks. SKY and the SKY marks are trade marks of British Sky
Broadcasting Group plc and are used
> under licence. British Sky Broadcasting Limited (Registration No. 2906991),
Sky Interactive Limited
> (Registration No. 3554332), Sky-In-Home Service Limited (Registration No.
2067075) and Sky
> Subscribers Services Limited (Registration No. 2340150) are direct or
indirect subsidiaries of
> British Sky Broadcasting Group plc (Registration No. 2247735). All of the
companies mentioned in this
> paragraph are incorporated in England and Wales and share the same registered
office at Grant Way,
> Isleworth, Middlesex TW7 5QD.
>
>
Hi David
svn:external can only function in a working copy.
How do implement the same in svn source.
Because people may not check working copy.
RE: access control for Subfolder is not work in svn 1.6
Posted by "Grierson, David" <Da...@bskyb.com>.
If they're not on the list of users for the external repository then they will be unable to check it out via the svn:externals property.
David.
--
David Grierson - Tools Specialist
Sky Broadcasting - Customer Business Systems
Email David.Grierson@bskyb.com
Watermark Building, Alba Campus, Livingston, EH54 7HH
-----Original Message-----
From: Raghu GS [mailto:raghugs@gmail.com]
Sent: 10 January 2013 13:49
To: users@subversion.apache.org
Subject: Re: access control for Subfolder is not work in svn 1.6
Hi David
Thanks for your reply.
The solution you pointed looks complex but still doable.
But would the solution allow to hide svn folders selectively ?
For example member1 should be able to see and commit folder1 only.
member1 should not be able to see any other folders.
Is that possible ?
Regards
Raghu GS
Information in this email including any attachments may be privileged, confidential and is intended exclusively for the addressee. The views expressed may not be official policy, but the personal views of the originator. If you have received it in error, please notify the sender by return e-mail and delete it from your system. You should not reproduce, distribute, store, retransmit, use or disclose its contents to anyone. Please note we reserve the right to monitor all e-mail communication through our internal and external networks. SKY and the SKY marks are trade marks of British Sky Broadcasting Group plc and are used under licence. British Sky Broadcasting Limited (Registration No. 2906991), Sky Interactive Limited (Registration No. 3554332), Sky-In-Home Service Limited (Registration No. 2067075) and Sky Subscribers Services Limited (Registration No. 2340150) are direct or indirect subsidiaries of British Sky Broadcasting Group plc (Registration No. 2247735). All of the companies mentioned in this paragraph are incorporated in England and Wales and share the same registered office at Grant Way, Isleworth, Middlesex TW7 5QD.
Re: access control for Subfolder is not work in svn 1.6
Posted by Raghu GS <ra...@gmail.com>.
Grierson, David <David.Grierson <at> bskyb.com> writes:
>
> Hi,
>
> If I remember correctly, you cannot remove permissions which you have already
granted for a parent folder.
>
> See this answer on ServerFault for a more complete explanation of how I would
go about achieving this.
>
> http://serverfault.com/questions/404003/setup-svn-repository-subfolder-
specific-write-permission/432915#432915
>
> Regards,
>
> David.
> --
> David Grierson - Tools Specialist
> Sky Broadcasting - Customer Business Systems
> Email David.Grierson <at> bskyb.com
> Watermark Building, Alba Campus, Livingston, EH54 7HH
>
>
> -----Original Message-----
> From: Raghu GS [mailto:raghugs <at> gmail.com]
> Sent: 10 January 2013 12:57
> To: users <at> subversion.apache.org
> Subject: access control for Subfolder is not work in svn 1.6
>
> Hello Everybody
>
> How can i block access to sub folders in svn for repository members ?
> I have tried "membername =" and "*=" (without quotes) parameters in svnauthz
file.
>
> I have also tried "require user membernane" in /etc/httpd/conf.d/svn.conf All
the procedures i have
> tried didn't work.
>
> Please consult the pastebin links given below to know my configuration.
>
> 1) http://pastebin.com/1X71kM9P (/etc/httpd/conf.d/svn.conf)
> 2) http://pastebin.com/2xhN3pcc (/srv/svn/config/svnauthz.conf)
> 3) CentOS 5.x, subversion v1.6.11
>
> Information in this email including any attachments may be privileged,
confidential and is intended
> exclusively for the addressee. The views expressed may not be official
policy, but the personal views of
> the originator. If you have received it in error, please notify the sender by
return e-mail and delete it
> from your system. You should not reproduce, distribute, store, retransmit,
use or disclose its contents
> to anyone. Please note we reserve the right to monitor all e-mail
communication through our internal and
> external networks. SKY and the SKY marks are trade marks of British Sky
Broadcasting Group plc and are used
> under licence. British Sky Broadcasting Limited (Registration No. 2906991),
Sky Interactive Limited
> (Registration No. 3554332), Sky-In-Home Service Limited (Registration No.
2067075) and Sky
> Subscribers Services Limited (Registration No. 2340150) are direct or
indirect subsidiaries of
> British Sky Broadcasting Group plc (Registration No. 2247735). All of the
companies mentioned in this
> paragraph are incorporated in England and Wales and share the same registered
office at Grant Way,
> Isleworth, Middlesex TW7 5QD.
>
>
Hi David
Thanks for your reply.
The solution you pointed looks complex but still doable.
But would the solution allow to hide svn folders selectively ?
For example member1 should be able to see and commit folder1 only.
member1 should not be able to see any other folders.
Is that possible ?
Regards
Raghu GS
RE: access control for Subfolder is not work in svn 1.6
Posted by "Grierson, David" <Da...@bskyb.com>.
Hi,
If I remember correctly, you cannot remove permissions which you have already granted for a parent folder.
See this answer on ServerFault for a more complete explanation of how I would go about achieving this.
http://serverfault.com/questions/404003/setup-svn-repository-subfolder-specific-write-permission/432915#432915
Regards,
David.
--
David Grierson - Tools Specialist
Sky Broadcasting - Customer Business Systems
Email David.Grierson@bskyb.com
Watermark Building, Alba Campus, Livingston, EH54 7HH
-----Original Message-----
From: Raghu GS [mailto:raghugs@gmail.com]
Sent: 10 January 2013 12:57
To: users@subversion.apache.org
Subject: access control for Subfolder is not work in svn 1.6
Hello Everybody
How can i block access to sub folders in svn for repository members ?
I have tried "membername =" and "*=" (without quotes) parameters in svnauthz file.
I have also tried "require user membernane" in /etc/httpd/conf.d/svn.conf All the procedures i have tried didn't work.
Please consult the pastebin links given below to know my configuration.
1) http://pastebin.com/1X71kM9P (/etc/httpd/conf.d/svn.conf)
2) http://pastebin.com/2xhN3pcc (/srv/svn/config/svnauthz.conf)
3) CentOS 5.x, subversion v1.6.11
Information in this email including any attachments may be privileged, confidential and is intended exclusively for the addressee. The views expressed may not be official policy, but the personal views of the originator. If you have received it in error, please notify the sender by return e-mail and delete it from your system. You should not reproduce, distribute, store, retransmit, use or disclose its contents to anyone. Please note we reserve the right to monitor all e-mail communication through our internal and external networks. SKY and the SKY marks are trade marks of British Sky Broadcasting Group plc and are used under licence. British Sky Broadcasting Limited (Registration No. 2906991), Sky Interactive Limited (Registration No. 3554332), Sky-In-Home Service Limited (Registration No. 2067075) and Sky Subscribers Services Limited (Registration No. 2340150) are direct or indirect subsidiaries of British Sky Broadcasting Group plc (Registration No. 2247735). All of the companies mentioned in this paragraph are incorporated in England and Wales and share the same registered office at Grant Way, Isleworth, Middlesex TW7 5QD.
Re: access control for Subfolder is not work in svn 1.6
Posted by Raghu GS <ra...@gmail.com>.
Stefan Sperling <stsp <at> apache.org> writes:
>
> On Thu, Jan 10, 2013 at 12:56:47PM +0000, Raghu GS wrote:
> > Hello Everybody
> >
> > How can i block access to sub folders in svn for repository members ?
> > I have tried "membername =" and "*=" (without quotes)
> > parameters in svnauthz file.
> >
> > I have also tried "require user membernane" in
> > /etc/httpd/conf.d/svn.conf
> > All the procedures i have tried didn't work.
>
> What doesn't work? Please be more specific.
>
> Are you trying to list the repository? With svn or with a browser?
>
> Are you trying check out from the repository? Commit to the repository?
>
> Which URLs are you using during testing? Please be precise here.
> Simple typing errors can often lead to the impression that authz
> doesn't work.
>
> > Please consult the pastebin links given below to know my configuration.
> >
> > 1) http://pastebin.com/1X71kM9P (/etc/httpd/conf.d/svn.conf)
> > 2) http://pastebin.com/2xhN3pcc (/srv/svn/config/svnauthz.conf)
> > 3) CentOS 5.x, subversion v1.6.11
>
> This is not showing a complete configuration.
>
> Did you load mod_authz_svn into Apache HTTPD? This is required for
> authz to work in the first place. Your HTTPD configuration snippet
> doesn't show whether or not you're loading the mod_authz_svn module.
>
> You're using SVNPath so you don't need to prefix paths in the authz
> rules with the repository name (Production:).
> See http://svnbook.red-bean.com/en/1.7/svn.serverconfig.pathbasedauthz.html
> which says:
> If you're using the SVNParentPath directive, it's important to specify
> the repository names in your sections. If you omit them, a section such
> as [/some/dir] will match the path /some/dir in every repository. If
> you're using the SVNPath directive, however, it's fine to only define
> paths in your sections—after all, there's only one repository.
>
>
Hi Stefan
Thanks for your detailed reply.
Preventing project members from
committing code to unauthorized folders works.
But couldn't prevent svn members from
accessing unauthorized sub folders in svn doesn't work
I have shared a sub set of apache svn configuration file.
We have a perfectly working mod_authz setup.
Only the access control for subfolders in same svn repository
is not working.
Thanks for pointing out the svnpath thingy.
I'll go through it and get back to you.
Re: access control for Subfolder is not work in svn 1.6
Posted by Stefan Sperling <st...@apache.org>.
On Thu, Jan 10, 2013 at 12:56:47PM +0000, Raghu GS wrote:
> Hello Everybody
>
> How can i block access to sub folders in svn for repository members ?
> I have tried "membername =" and "*=" (without quotes)
> parameters in svnauthz file.
>
> I have also tried "require user membernane" in
> /etc/httpd/conf.d/svn.conf
> All the procedures i have tried didn't work.
What doesn't work? Please be more specific.
Are you trying to list the repository? With svn or with a browser?
Are you trying check out from the repository? Commit to the repository?
Which URLs are you using during testing? Please be precise here.
Simple typing errors can often lead to the impression that authz
doesn't work.
> Please consult the pastebin links given below to know my configuration.
>
> 1) http://pastebin.com/1X71kM9P (/etc/httpd/conf.d/svn.conf)
> 2) http://pastebin.com/2xhN3pcc (/srv/svn/config/svnauthz.conf)
> 3) CentOS 5.x, subversion v1.6.11
This is not showing a complete configuration.
Did you load mod_authz_svn into Apache HTTPD? This is required for
authz to work in the first place. Your HTTPD configuration snippet
doesn't show whether or not you're loading the mod_authz_svn module.
You're using SVNPath so you don't need to prefix paths in the authz
rules with the repository name (Production:).
See http://svnbook.red-bean.com/en/1.7/svn.serverconfig.pathbasedauthz.html
which says:
If you're using the SVNParentPath directive, it's important to specify
the repository names in your sections. If you omit them, a section such
as [/some/dir] will match the path /some/dir in every repository. If
you're using the SVNPath directive, however, it's fine to only define
paths in your sections—after all, there's only one repository.