[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Redux: svn+ssh, authz, insanity.

From: Mark <mark_at_mitsein.net>
Date: 2006-12-19 06:17:07 CET

You have anon-access and auth-access. anon-access tells you what
access non-authenticated users get. auth-access tells you what access
authenticated users get. You can further modify those general rules
with authz rules.

I was re-reading some info about authz in the svnbook today and I
think that section does need some help., There is a section about
authz under the httpd section, but I don't see it under plain
svnserve.

On 12/18/06, Omri Schwarz <ocschwar@mit.edu> wrote:
> Hi, all.
>
> After going step by step (i.e. fprintf() happy through the latest subversion
> code),
> I discovered the solition to my problem. To enable svn+ssh:// authorization
> for specific authenticated users, I have to have the following:
>
> in svnserve.conf:
> [general]
> auth-access = write
> authz-db = authz
>
> In authz:
> [repo:/]
> user1 = rw
> user2 = rw
> ...
>
> The "auth-access = write" will not enable any and all authenticated users to write to the repository if they are not mentioned in the authorization file. But without it, no authenticated users can commit to the repository.
>
> By and large that is not too bad a ruleset to go by, though it woudl be nice to document it as such, (and I am emailing so that the archives will mention the issue), but is this really the way Subversion should do authorization?
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>

-- 
Mark
"Blessed is he who finds happiness in his own foolishness, for he will
always be happy."
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Tue Dec 19 13:41:48 2006

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.