RE: SVN https folder permissions

Thanks for the reply Stephane,

If I add * = r, then I give *everyone* access to every file, everywhere
on the repository, including all subfolders. So in my example, "john"
would also then get access to folder1 as well.

The security settings are doing what they should, following the design,
however, as "bob" does have access to /folder1, then surely he should be
able to see that at the top level of the repository??

In linux filesystems, this would equate to an "l" file permissions I
believe.

Thanks,

Adrian

-----Original Message-----
From: Stephane Bortzmeyer [mailto:bortzmeyer_at_nic.fr]
Sent: 22 November 2008 13:26
To: Adrian Marsh
Cc: users_at_subversion.tigris.org
Subject: Re: SVN https folder permissions

[Warning: I'm not a Subversion security expert.]

On Sat, Nov 22, 2008 at 12:51:39PM -0000,
 Adrian Marsh <Adrian.Marsh_at_ubiquisys.com> wrote
 a message of 35 lines which said:

> However, if he browses to / then he cant see any list of folders
> (403), even if he does have access to folder1.

Isn't it sensible? Bob has no access to the root (/). So it makes
sense he cannot browse it.

On a repository with these permissions, it works:

# Default
[/]
* = r

[/foobar]
* =
bob = rw

Then, at /, bob can see /foobar.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_subversion.tigris.org
For additional commands, e-mail: users-help_at_subversion.tigris.org
Received on 2008-11-22 14:57:31 CET