Re: newbie vs access control

On Wed, 2004-05-05 at 13:49, Robin Becker wrote:
> We're experimenting with moving our CVS repository to svn. That seems to go well
> after I hacked the script to look at the cvs -kb flag.
>
> I have a couple of questions related to access control.
>
> First off I don't really understand example 6.3. Is it authz_svn_module &
> AuthzSVNAccessFile that triggers a username request? Can I also require that a
> valid group be obtained? Are the group names from my AuthGroupFile usable inside
> AuthzSVNAccessFile?

My understanding is that those are two different things -
authz_svn_module & AuthzSVNAccessFile are access control _inside_ svn
itself.

AuthGroupFile is implemented in mod_access in Apache.

> Secondly is there any way to control access within a repository using apache
> Location & Rewrite?

Yes, I do all the access control in apache using http authentication.
This means that the only (write) access to the repository has to be
through http - no svnserve, no file access (we actually do some
read-only access on the server itself through file access, but _never_
write access). I'd be happy to post examples...

-- 
Scott Lawrence        
  Pingtel Corp.   
  sip:slawrence {at} pingtel.com  
  +1.781.938.5306 x162
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org