I just use a pre-commit hook that ONLY allows adds to any folder named "tag".
It allows devs to tag their own projects. It also allows adding to a tag folder after the initial tag creatuib (we use this ocassionally when we want to save compiled binaries alongside the tagged source code). However, nothing can be modified or deleted.
-----Original Message-----
From: Erik Huelsmann [mailto:ehuels@gmail.com]
Sent: Monday, September 10, 2007 12:57 AM
To: Rainer Sokoll; users@subversion.tigris.org
Subject: Re: Revision numbers in subversion...
On 9/9/07, Rainer Sokoll <R.Sokoll@intershop.de> wrote:
> On Sun, Sep 09, 2007 at 10:49:09PM +0200, Erik Huelsmann wrote:
> > On 9/9/07, Rainer Sokoll <R.Sokoll@intershop.de> wrote:
> > > Unfortunataly, there is no "create" permission in subversion :-(
> >
> > This pre-commit script knows about an 'add' permission:
> >
> > http://svn.collab.net/repos/svn/trunk/tools/hook-scripts/svnperms.py
>
> What I want to achieve: everyone with write permissions to /tags is
> allowed to create a directory (i.e.: create a tag), but once the tag is
> created, it must be immutable, also for the person(s) with write
> permission to /tags (this is the idea of a tag, as I understand it).
> Is this possible with svnperms.py?
Yes. The example below should give you that (untested, but you get the idea):
[your-repos groups]
taggers = john jack joe
[your-repos]
# only @taggers may add to the tags list
# nobody may commit changes or remove them
tags/[^/]+/ = *() @taggers(add)
# nobody may commit to tags, be it changes, additions or removal
tags/[^/]+/.+ = * ()
# everybody may commit to trunk
trunk/.* = *(add, update, remove)
I have no idea what this setup does with the area outside of tags and
trunk. If you give the script a try, please let us know.
HTH,
Erik.
PS: You still may want to use path-based authorization for read access control.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Mon Sep 10 21:07:38 2007