[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Work-in-progress native authz for mod_dav_svn

From: Artem Egorkine <arteme_at_gmail.com>
Date: 2006-07-18 02:45:42 CEST

Hi,

This is a snapshot of the code I'm writing for the Google Summer of
Code. Please feel free to poke at it and give me feedback.

The main idea: do path-based authorization natively within mod_dav_svn
apache module without the help and overhead of mod_authz_svn.

On per-location basis there are two new config statements:

  SVNNativeAuthz <on|off> - turn on native mod_dav_svn authorization
  SVNNativeAuthzFile <path> - the file containing permissions for the repository

When native path-based authorization is on, mod_dav_svn does
authorization checks by itself, from the hook functions to mod_dav.
This allows for mod_dav_svn to first perform sanity checks and discard
bogus and erronous requests based on that. Most importantly native
path-based authorization in mod_dav_svn allows for cheap recursive
authorization lookups which is much faster than the Apache
sub-requests that need to be used when the authorization is handles by
mod_authz_svn.

The implementation is by no means complete. Summer of code mid-term
surveys are coming around and I need to show the code.

Regards,
  Artem Egorkine

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org

Received on Tue Jul 18 02:47:41 2006

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.