Re: Access Control and ViewCVS

On May 21, 2004, at 2:16 PM, Anthony Glover wrote:

> I just got ViewCVS installed and was browsing my repository when I
> noticed that my access controls that I had set up for Apache are being
> ignored. I guess this makes sense since I am not using the Location
> specified in my httpd.conf, but am instead using the viewcvs.cgi
> script instead. Is there anyway to implement access controls such that
> even "file:" access (which I'm assuming that viewcvs uses) is
> controlled?

access controls for file:// cannot be implemented in a way worth
anything; if access control is only enforced by a software layer, that
software layer can be replaced or removed. The enforcement of access
controls needs to be out of the accessing user/process's control to
circumvent.

-David Waite

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Fri May 21 22:34:41 2004