[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Add pre-access hook?

From: David Weintraub <qazwart_at_gmail.com>
Date: 2005-07-08 20:07:11 CEST

This is better done via the server you're using. For example, if you
are using Apache, you can use .htaccess files in the various
directories. I'm not sure how this can be done via the svnserve
command.

BTW, this is one of the reasons why one big repository isn't always
the greatest idea. If you have each project in a separate repository,
this would be much easier to do.

On 7/8/05, Servatius.Brandt@fujitsu-siemens.com
<Servatius.Brandt@fujitsu-siemens.com> wrote:
> It is possible to control write access to a repository on a per-path
> base (by using something like svnperms.py from the pre-commit hook).
>
> But it is not possible to restrict read access on a per-path base.
> I would like to do so for security reasons, so that some users could
> only check out a part of the repository, but others could check out all
> of it.
>
> Could we get a pre-access hook to check paths which returns non-zero if
> the access should be denied? This hook should be used for "svn co",
> "svn up", "svn cp", "svn cat", etc.
>
> For "svn up", it could be invoked as "pre-access REPOS TXN" since there
> is a temporary transaction built by the client anyway. Maybe, because
> of the other commands ("svn cat" etc.) "pre-access REPOS PATH-LIST" is
> better. However, if it were possible to build a temporary transaction
> also for "svn cat" etc., this would make it very easy to write
> a pre-access hook: just by calling svnperms.py using a special config
> file for read access.
>
> I noticed there is already an issue (#2316) to add path-based
> authorization support to svnserve. Would it be simpler to add
> a pre-access hook, instead?
>
> - Servatius
>
> ------------------------------------------------------------------------
> Servatius Brandt Phone: +49 89 636-41504
> Fujitsu Siemens Computers Fax: +49 89 636-48716
> EP SW AD C++ Email: Servatius.Brandt@fujitsu-siemens.com
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>

-- 
--
David Weintraub
qazwart@gmail.com
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Fri Jul 8 20:09:35 2005

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.