[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: [PATCH] pre-update and pre-getfile hook

From: Mathias Weinert <mathias.weinert_at_gfa-net.de>
Date: 2006-03-01 17:34:04 CET

Max Bowsher wrote:

>
> Mathias Weinert wrote:
> > Referring to http://svn.haxx.se/dev/archive-2006-02/0304.shtml Max Bowsher wrote:
> >
> >> The efficiency implications are major, and the extreme inelegance of
> >> forcing the user to essentially do access control in two different ways,
> >> just because of details of Subversion's internals, is quite unpleasant.
> >> I realized I didn't have anything more productive to say than "This
> >> scares me. I won't be involving myself in this feature", and left the
> >> message well alone, hoping someone else would have something more useful
> >> to say about it.
> >
> > I agree with you that now as we have per path access control for
> > svnserve these hooks aren't as important as they've been. But on
> > the other side they could be used for other things like logging,
> > preventing people from checking out too much (e. g. root) as
> > recently discussed in another thread or blocking certain IP
> > addresses.
> >
> > What exactly do you mean with "The efficiency implications are
> > major"? Would the hook significantly slow down things?
>
> Many invocations of it would (as has been mentioned already).
>
>
> However, of *greater* concern to me is the extreme inelegance of
> dividing read-control between two separate hooks. If we implemented
> this, I believe it would cause widespread confusion. We should NOT be
> exposing the report vs. individual-get implementation detail in this case.
>

Okay, I agree to you. The only thing that comes into my mind is
if someone e. g. wants to prevent users from checking out the root
of a repository the authorization file may be enhanced to have
different sorts of 'read':
'r' meaning the same as today
'r-' meaning that the user is allowed to ls and cat but not
to checkout this part of the repository
Just a thought...

Mathias

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Wed Mar 1 18:17:05 2006

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.