[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Fixing issue #4762 -- authz doesn't combine global and repository rules -- svn 1.10 regression [was: r1882186 ...]

From: Julian Foad <julianfoad_at_apache.org>
Date: Tue, 6 Oct 2020 15:24:01 +0100

Nathan Hartman wrote:
> Stefan Sperling wrote:
>> In my opinion the original change was a mistake which should be corrected.

To be clear: I don't disagree (and thank you for debugging and fixing
it); I understand your reasoning; I just don't have the context to judge
the impact and want to be sure we don't create a new problem when
deploying a fix for the original problem.

>> I think the benefits of seamless upgrades of existing deployments outweight
>> concerns over potential regressions in fresh deployments (which, let's admit
>> it, are getting rare these days).

A third group is pre-existing deployments in which the admins have now
adjusted their rules to match the 1.10+ behaviour. I can't guess which
group is biggest, which ones matter more or less than others, nor in
what proportion of deployments the semantic change would make any actual
difference to the authz rules in effect.

- Julian
Received on 2020-10-06 16:24:04 CEST

This is an archived mail posted to the Subversion Dev mailing list.