[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: [Issue 2702] New - Making a directory world-readable with authz

From: Gregory Bartholomew <gregory.lee.bartholomew_at_gmail.com>
Date: 2007-01-22 20:33:39 CET

By using:
<LimitExcept GET PROPFIND OPTIONS REPORT>
   Require valid-user
</LimitExcept>

You are preventing the authz module from being called on read requests
(GET PROPFIND OPTIONS REPORT) so it cannot deny access to any part of
the repository when the request is a read regaurdless of what you have
specified in the authorization file.

I think you can do what you are trying with something like the
following in the authorization file:

[/level_one]
* = r

[/level_one/level_two]
* =
jsmith = rw

On 21 Jan 2007 05:56:30 -0000, elibarzilay@tigris.org
<elibarzilay@tigris.org> wrote:
> http://subversion.tigris.org/issues/show_bug.cgi?id=2702
> Issue #|2702
> Summary|Making a directory world-readable with authz
> Component|subversion
> Version|1.4.x
> Platform|All
> URL|
> OS/Version|All
> Status|NEW
> Status whiteboard|
> Keywords|
> Resolution|
> Issue type|DEFECT
> Priority|P3
> Subcomponent|mod_authz_svn
> Assigned to|issues@subversion
> Reported by|elibarzilay
>
>
>
>
>
>
> ------- Additional comments from elibarzilay@tigris.org Sat Jan 20 21:56:28 -0800 2007 -------
> Using authz to protect a repository prevents making some parts wrold readable.
> I have posted a question on the mailing list three times and got no replies.
> See my post for the full details:
> http://subversion.tigris.org/servlets/ReadMsg?list=users&msgNo=60928
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: issues-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: issues-help@subversion.tigris.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Mon Jan 22 20:33:58 2007

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.