RE: mod_authz_svn and multiple group permissions

[ Sorry if this is a duplicate; not convinced my first attempt to send succeeded. ]

> -----Original Message-----
> From: Johnathan Gifford [mailto:jgifford_at_wernervas.com]
> Sent: 09 January 2008 16:27
> To: Subversion List <users_at_subversion.tigris.org
> Subject: Re: mod_authz_svn and multiple group permissions
>
> Jon,
>
> Make sure you order the permissions from none to read to read/write
> (least access to most access). The authz apparently gives permission
> based on the last group a user is included in.
>
> Hope this helps,
>
> Johnathan

Thanks for the reply, but that's exactly what _isn't_ happening. No matter how I order the rules, the permission is the combined set of all granted permissions - it doesn't seem to have anything to do with the ordering.

This is either a very common misconception (I believed it myself until yesterday), or I'm getting something wrong (always possible). But given the amount of time I've spent looking at this so far, I'm starting to come round to the idea that I'm not.

> [repo:/]
> * =
> everyone = rw
>
> # This works fine...
> [repo:/builds/dev/stable]
> @everyone = r
> @integrators = rw
>
> # so does this...
> [repo:/builds/test]
> @developers =
>
> # but this doesn't...
> [repo:/builds/test/stable]
> @developers =
> @everyone = r
> @integrators = rw

In other words, this doesn't act any differently to

> [repo:/]
> * =
> everyone = rw
>
> # This works fine...
> [repo:/builds/dev/stable]
> @everyone = r
> @integrators = rw
>
> # so does this...
> [repo:/builds/test]
> @developers =
>
> # but this doesn't...
> [repo:/builds/test/stable]
> @everyone = r
> @developers =
> @integrators = rw

for users who are members of both 'everyone' and 'developers', but not 'integrators'.

Regards,

--
Jon Ashley
This email is confidential and intended solely for the use of the individual to whom it is addressed. If you are not the intended recipient, be advised that you have received this email in error and that any use, disclosure, copying or distribution or any action taken or omitted to be taken in reliance on it is strictly prohibited. If you have received this email in error please contact the sender. Any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Praxis. 
Although this email and any attachments are believed to be free of any virus or other defect, no responsibility is accepted by Praxis or any of its associated companies for any loss or damage arising in any way from the receipt or use thereof. The IT Department at Praxis can be contacted at it.support_at_praxis-his.com.
Praxis High Integrity Systems Ltd:
Company Number: 3302507, registered in England and Wales
Registered Address: 20 Manvers Street, Bath. BA1 1PX
VAT Registered in Great Britain: 682635707
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_subversion.tigris.org
For additional commands, e-mail: users-help_at_subversion.tigris.org