[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: show differences

From: ESSI - Billie H. Cleek <bcleek_at_essystemsinc.com>
Date: 2006-09-21 20:50:27 CEST


There are more reasons for security other than just having something
saved on disk. I don't want someone walking up to my machine and doing
operations that only I can do. If I save authentication information,
then suddenly they walk up to my machine if I happen to be away and
forgot to lock it and execute operations on the repository that they
would not normally be able to do.

I don't know the internals of TSVN, but surely this is possible, because:
1. Previous versions of TSVN did not exhibit this behavior
2. If there is a method that is controlling the operations that are
performed based on a single ui event, and one of the actions that TSVN
does is to get the authentication information, then that ui handler can
pass the credentials to the other methods that need it. This is
definitely in the realm of possibilities.

Stefan Küng wrote:
> ESSI - Billie H. Cleek wrote:
>> I don't want my authentication information saved for security reasons.
>> The previous versions of TSVN did not exhibit this behavior, and if I'm
>> doing a single operation from the user point of view, then it would make
>> sense for TSVN to only need to prompt the user for authenticaion
>> information one time.
> Security reasons? The authentication data is saved encrypted on Windows,
> and the encryption is done using your very own windows login/password -
> no other user can decrypt it but you.
> Unfortunately, it's not possible to do all this in one operation.
> Stefan

Billie H. Cleek
Project Manager
3259 E. Sunshine St
Suite AA
Springfield, Missouri 65804
   Tel: (417) 886-2528
   Fax: (417) 886-2541
PGP: 0xE9734285
Fingerprint = 1CF8 1903 8574 EFAD 0322  1A2E CC02 52B8 E973 4285
To unsubscribe, e-mail: users-unsubscribe@tortoisesvn.tigris.org
For additional commands, e-mail: users-help@tortoisesvn.tigris.org
Received on Thu Sep 21 20:51:19 2006

This is an archived mail posted to the TortoiseSVN Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.