Re: Can I use webdav with only subversion clients

On Mar 18, 2004, at 5:49 PM, Chris Kacoroski wrote:

> I want the directory access control that webdav provides, but I do not
> want non-subversion clients (e.g. windows or mac file explorers)
> accessing the subversion files directly and potentially making changes
> that are not tracked. Is there a way to do this?

Assuming you mean this as a deterrent against that type of
access/change (not a security measure), you could use some technique
like the following:

<Location /svn>
...
  SetEnvIf User-Agent "^SVN/[0-9.]+ " is_svn_client
  Order Deny,Allow
  Deny from all
  Allow from env=is_svn_client
...
</Location>

More details:
   http://httpd.apache.org/docs-2.1/mod/mod_authz_host.html#allow

Obviously someone with nefarious intentions can make the User-Agent
whatever he or she pleases and get around such a deterrent. My example
may well be too limiting. You'll have to collect a sample of the
user-agent strings you care about and come up with some formula based
on that and your particular desires.

-Travis

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Fri Mar 19 05:32:52 2004