Re: Local repository problems

Pelle Johansson wrote:
> Hello, I'm having some trouble with a file:// repository.
>
> First of all, there doesn't seem to be any way to restrict read access.
> Basically if you can read the db you have read access to the whole
> repository. I realise I'd have to run svn setuid for anything else to
> work, but am I missing something or is this not implemented yet?

Not implemented, (and realistically unlikely to ever be).

> Second svn honors the --username when accessing the repository. I like
> that, but there seems to be no way to check the password? As it
> currently stands, it seems you can impersonate anyone using this.
>
> Should I setup apache even for local access? (currently only running
> apache 1.3 so will be some work).

If you can arrange to only need to restrict read access at the granularity
of repositories, you could use svn+ssh:// instead, which would be more
lightweight.

If you cannot, then yes, apache is the only solution.

Max.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Fri Oct 29 15:06:48 2004