[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: How to authenticate HTTP users when root dir also has anonymous access?

From: David Glasser <glasser_at_davidglasser.net>
Date: 2007-10-30 02:52:11 CET

On 10/29/07, Christian Convey <christian.convey@gmail.com> wrote:
> I'm running smack into a problem anticipated here:
>
> file:///home/cjc/Desktop/svn-book.html#svn.serverconfig.pathbasedauthz
>
> "In a similar way, if the root of the repository is anonymously
> world-readable, then the entire checkout will be done without
> authentication—again, skipping the unreadable directory, rather than
> asking for authentication partway through."
>
> I'd like to offer two kinds of HTTP-based access to my Subversion
> repository. I'd like anonymous people to be able to get a read-only
> copy of the repository (but with certain subdirectories not appearing
> at all in the checkout). I'd like authenticated developers to get
> read-write access (and the ability to see even those hidden
> directories.)
>
> The problem is, if I enable this rule in my access control file:
>
> [my-repos:/]
> @admin = rw
> @developers = rw
> * = r
>
> then Subversion/DAV seem to totally ignore the fact that the user was
> willing and able to provide developers' credentials on the "svn co"
> command line. I.e.:
>
> svn co --username cconvey --password mypasswd --no-auth-cache
> http://localhost/svn/my-repos/
>
> Does anyone know how I can accomplish what I'm trying to do? (It
> would need to work ideally on with svn 1.4.3 and 1.4.4)

One possibility is to provide two different URLs accessing the same
repository, one of which allows anonymous access and the other of
which doesn't; then have your developers just use the latter.

(Note that the right mailing list is dev@subversion.tigris.org, not
svn@, which is the commit mail list.)

--dave

-- 
David Glasser | glasser_at_davidglasser.net | http://www.davidglasser.net/
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Tue Oct 30 02:56:25 2007

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.