[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Ev2 and Authz

From: Branko Čibej <brane_at_apache.org>
Date: Tue, 17 Apr 2012 19:52:52 +0200

On 17.04.2012 19:48, Branko Čibej wrote:
> The related right is called "directory traversal" and is, indeed,
> orthogonal to read and write permissions on directories (which are
> usually further split into read/write contents and read/write
> attributes). It is a property of directories, not leaf objects.
>

To clarify: the difference between "traverse" and "read (contents)"
permisions for directories is quite important. If you're allowed to
traverse, but not read, you have to know the path of a subordinate
object in order to be able to access it, modulo the object's own
permissions. In other words, you cannot discover the names of
subordinate objects by reading the directory contents.

-- Brane
Received on 2012-04-17 19:53:00 CEST

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.