[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: newbie vs access control

From: Robin Becker <robin_at_reportlab.com>
Date: 2004-05-06 09:56:04 CEST

Scott Lawrence wrote:

> On Wed, 2004-05-05 at 14:23, Robin Becker wrote:
>
>>Scott Lawrence wrote:
>
>
>>>Yes, I do all the access control in apache using http authentication.
>>>This means that the only (write) access to the repository has to be
>>>through http - no svnserve, no file access (we actually do some
>>>read-only access on the server itself through file access, but _never_
>>>write access). I'd be happy to post examples...
>
>
>>That would be great; my understanding of Rewrite is poor. I have a suspicion
>>that RewriteBase is involved in the sort of things I might need to do.
>
>
> I don't use any form of rewrite (as Seth Falcon pointed out, that would
> mean understanding and being dependent on how svn does URLs internally,
> which would be bad).
>
> Known limitations of this scheme:
>
> 1) All write access must be via https.
>
> Since we wanted to have no user accounts on the server, we actually
> see this as an advantage.
>
> 2) Access control is only at the repository level, not the path level.
>
> We do one repository per project, and that's all the granularity
> we need, so that too was deemed acceptable (I think that if we decide
> we need more that I will do it in a pre-commit hook). We name a
> group the same as the project, and group membership controls
> write access.
>
> So here's what we do - there are two (ip-based) virtual hosts, which
> both inherit the same user/group rules from the server-wide
> configuration:
> ===================================

...... Thanks for these examples. I was actually hoping someone would
know how to shorten a URL using Rewrite. We have say

https://xxx.yyy.com/svn/repository/trunk/subproject

I was hoping we might be able to rewrite that as

https://xxx.yyy.com/svn/subproject

ie have shortcuts for the most common usages.

-- 
Robin Becker
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Thu May 6 09:55:51 2004

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.