Re: authz question

OK -- I've re-read that section, and it sounds like this
configuration, though verbose, ought to work:

----
[/]
dcrosta = rw
* = r
[/trunk]
* = r
[/trunk/module]
* = r
[/trunk/othermod]
* =
----
what it actually seems to be doing is overriding it so that I only
have acess to /, /trunk and /trunk/dtk, and so that *nobody* has
access to /trunk/othermod. In other words, * matches everyone and more
general definitions are overriding the more specific ones. order does
not seem to matter, at least not so long as the definitions are
unique.
does anyone know if this is correct behavior of mod_dav_svn (or
whatever is actually responsible for applying rules for authz)? I have
1.2.3 installed.
- d
On 9/25/06, Mark <mark@mitsein.net> wrote:
> You're fine.  Please see:
> http://svnbook.red-bean.com/nightly/en/svn.serverconfig.httpd.html#svn.serverconfig.httpd.authz.perdir
>
> It looks like if you don't use the SVNParentPath setting, you don't
> need to put the repository name in the authz setting.
>
> On 9/25/06, Dan Crosta <dcrosta@gmail.com> wrote:
> > (apologies, mark, for the double mail, i keep expecting gmail to reply-all...)
> >
> > Maybe I've been confusing the terminology: there is only one
> > repository, but several... well, CVS called the modules, but I guess
> > they are actually paths within the repository, is that right? That is,
> > the repository has:
> >
> > /tags
> > /branches
> > /trunk
> >  /module
> >  /othermodule
> >  /thirdmodule
> >
> > - d
> >
> >
> > On 9/25/06, Mark <mark@mitsein.net> wrote:
> > > Yes, because you are accessing one authz file for many repositories, right?
> > >
> > > On 9/25/06, Dan Crosta <dcrosta@gmail.com> wrote:
> > > > Is this true even if I'm using SVNPath in httpd.conf, not SVNParentPath?
> > > >
> > > > - d
> > > >
> > > > On 9/25/06, Dan Crosta <dcrosta@gmail.com> wrote:
> > > > > Is this true even if I'm using SVNPath in httpd.conf, not SVNParentPath?
> > > > >
> > > > > - d
> > > > >
> > > > > On 9/25/06, Mark <mark@mitsein.net> wrote:
> > > > > > the authz config for mod_svn_authz is slightly different than for
> > > > > > svnserve.  You need to specify the name of the repository.  So if your
> > > > > > repository name is goodstuff:
> > > > > > [/]
> > > > > > dcrosta = rw
> > > > > >
> > > > > > [goodstuff:/trunk]
> > > > > > * =r
> > > > > >
> > > > > > etc
> > > > > >
> > > > > > On 9/25/06, Dan Crosta <dcrosta@gmail.com> wrote:
> > > > > > > i have a repository i use to track all my source code, some of which i
> > > > > > > want to make publicly available, but most of which i want to keep
> > > > > > > private. i'm using mod_dav_svn and mod_svn_authz for repository access
> > > > > > > and control, and have followed the pattern at svnbook.red-bean.com for
> > > > > > > anonymous or authenticated access, with an authz file like this:
> > > > > > >
> > > > > > > ----
> > > > > > >
> > > > > > > [/]
> > > > > > > dcrosta = rw
> > > > > > >
> > > > > > > [/trunk]
> > > > > > > * = r
> > > > > > >
> > > > > > > [/trunk/module]
> > > > > > > * = r
> > > > > > >
> > > > > > > [/trunk/othermod]
> > > > > > > * =
> > > > > > >
> > > > > > > [/trunk/thirdmod]
> > > > > > > * =
> > > > > > >
> > > > > > > ----
> > > > > > >
> > > > > > > which, if i understand correctly, should allow anonymous access to
> > > > > > > /trunk/module, but not to any other part of the repository, and allow
> > > > > > > me access to any of the repository. however, this is not working.
> > > > > > > checkout and export are prompting for a password, but the list command
> > > > > > > quite happily lists contents of /trunk/module. have i messed something
> > > > > > > up?
> > > > > > >
> > > > > > > alternately, is there an easier way to give access to just a portion
> > > > > > > of the repository? i tried leaving out the section for [/trunk] and
> > > > > > > for [/trunk/othermod] and [/trunk/thirdmod] ... that configuration
> > > > > > > doesn't allow anonymous users to list /trunk (fine by me), it does
> > > > > > > allow anonymous to list /trunk/module (good), but still won't allow
> > > > > > > anonymous to check out from anywhere.
> > > > > > >
> > > > > > > - d
> > > > > > >
> > > > > > > ---------------------------------------------------------------------
> > > > > > > To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> > > > > > > For additional commands, e-mail: users-help@subversion.tigris.org
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > > > --
> > > > > > Mark
> > > > > > "Blessed is he who finds happiness in his own foolishness, for he will
> > > > > > always be happy."
> > > > > >
> > > > > > ---------------------------------------------------------------------
> > > > > > To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> > > > > > For additional commands, e-mail: users-help@subversion.tigris.org
> > > > > >
> > > > > >
> > > > >
> > > >
> > > > ---------------------------------------------------------------------
> > > > To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> > > > For additional commands, e-mail: users-help@subversion.tigris.org
> > > >
> > > >
> > >
> > >
> > > --
> > > Mark
> > > "Blessed is he who finds happiness in his own foolishness, for he will
> > > always be happy."
> > >
> > > ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> > > For additional commands, e-mail: users-help@subversion.tigris.org
> > >
> > >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> > For additional commands, e-mail: users-help@subversion.tigris.org
> >
> >
>
>
> --
> Mark
> "Blessed is he who finds happiness in his own foolishness, for he will
> always be happy."
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org