[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: [PATCH] wildcard authz prototype

From: Garrett Rooney <rooneg_at_electricjellyfish.net>
Date: 2006-05-02 01:35:34 CEST

On 5/1/06, Greg Hudson <ghudson@mit.edu> wrote:
> On Mon, 2006-05-01 at 16:06 -0700, Garrett Rooney wrote:
> > Seriously, it iterates over all the wildcards applying them, to see if
> > any of them matter. See the modifications to authz_get_tree_access
> > and authz_parse_section for details.
>
> I'm confused as to how this can be correct.
>
> If I have a rule denying read access to */tags, and a caller wants to
> know if the user has recursive read access to /project/foo, doesn't the
> answer depend on whether /project/foo contains a "tags" somewhere? How
> can you know if the */tags wildcard entry is relevant without knowing
> what paths exist inside the tree?

You have a valid point... This will require some thought.

-garrett

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Tue May 2 01:35:58 2006

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.