[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Web interface that supports security?

From: Sheryl <gubydala_at_his.com>
Date: 2007-07-13 18:17:08 CEST

Tom Malia wrote:

> I'm looking for a browser interface for my SVN repos that also supports
> security. I do a lot of access control at the directory level within a
> large repository. Is there anything out there that gives a nice browser
> front end but also supports such access control?
> I've tried sventon and like the interface a lot but don't see anyway to
> integrate security. I looked briefly at ViewVC and WebSVN and these
> appear
> to have same limitation.

We use WebSVN and it does support security. There is a prominent access
control section in the config file (include/config.inc in the WebSVN
directory, I think copied from a template file in that directory). We
force SSL on the directory so passwords can't be sniffed, use LDAP for
authentication and then restrict access via the same file that we use to
determine access for the checkout/commit and so forth on the repository.


// --- ACCESS RIGHTS ---

// Uncomment this line if you want to use your Subversion access file to
control access
// rights via WebSVN. For this to work, you'll need to set up the same
Apache based authentication
// to the WebSVN (or wsvn) directory as you have for Subversion itself.
More information can be
// found in install.txt

$config->useAuthenticationFile("/path/to/access-file"); // Global access file

// You may also specify a per repository access file by uncommenting and
copying the following
// line as necessary. Use the convention "groupname.myrep" if your
repository is in a group.

// $config->useAuthenticationFile("/path/to/accessfile", "myrep"); //
Access file for myrep

To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Fri Jul 13 18:16:42 2007

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.