Re: subversion security, everyone can commit, limited to who can delete

right but what do I put for the users that I do not want the rights to
delete?

> If you want to prevent ANYONE from deleting ANYTHING in the
> repository, try this:
> <Limit DELETE>
> </Limit>
>
> If you want to allow only certain users to delete, try this:
> <Limit DELETE>
> require someuser1
> </Limit>
>
> This will have the effect of LIMITing only those items that appear
> behind them. Only the user allowed in the REQUIRE directive is going
> to be able to delete. In your original example, the only thing anyone
> could do was DELETE. No one could GET or PUT.
>
So should I also put a require valid-user somewhere on the outside of
the <limit> statements...?

something like:

<Location /www/dav/ns32>
  Require user adminuser
  <Limit DELETE>
    Require user deleteuser
  </Limit>
  <Limit GET PROPFIND OPTIONS>
    Require user readuser
  </Limit>
</Location>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Fri Oct 14 19:13:01 2005