RE: Re: subversion security, everyone can commit, limited to who can delete

Does the manager that you report to understand the nature of a version control system? I would think it would be easier to explain it to him than it would be to go through this rigamarole.

Dale
-----Original Message-----
From: plabonte@gmail.com [mailto:plabonte@gmail.com]
Sent: Friday, October 14, 2005 12:06 PM
To: Frank Gruman
Cc: users@subversion.tigris.org
Subject: Re: subversion security, everyone can commit, limited to who can delete

Here is a sample of a configuration that works for me. I added the <Limit...> to show you as a reference.

   <Location /code>
     DAV svn
     SVNParentPath /code_repos
     SVNIndexXSLT /svnindex.xsl
     AuthType Basic
     AuthName "Code Repository"

   # AuthUserFile /code_repos/users.list
     AuthPAM_Enabled on
     require valid-user
     AuthzSVNAccessFile /code_repos/access.list
     <Limit DELETE>
       require user username1 username2
     </Limit>
   </Location>

This will require that there be a valid user to do anything in the repository. However, the only people allowed to delete anything will be username1 and username2. The read and write access to the repository is controlled within the SVN (mod_authz_svn) module itself, and I use the AuthzSVNAccessFile to set those permissions.

Regards,
Frank

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

I tried you example above. And it will not allow anyone without delete rights to commit a file. This is because each commit needs to delete a tmp file... so it appears it is not possible to prevent people that have commit rights from getting delete rights.
Unless you can find a way.

--------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org For additional commands, e-mail: users-help@subversion.tigris.org

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Fri Oct 14 21:52:25 2005