Is there a way to enable path-based authorization only when committing?
I can see allowing any user with access to a repository to be able to
see the entire thing, but wanting to keep most users from writing to
tags folders and to the main branch areas of previous releases that have
been locked down. Even if this was to be enforced using a commit hook,
it would probably be acceptable if it boosted performance significantly.
-----Original Message-----
From: Jon Bendtsen [mailto:jbendtsen_at_laerdal.dk]
Sent: Wednesday, March 12, 2008 4:58 AM
To: Erik Huelsmann
Cc: users_at_subversion.tigris.org
Subject: Re: svn log using apache is SLOW
On 12/03/2008, at 11.48, Erik Huelsmann wrote:
> On 3/12/08, Jon Bendtsen <jbendtsen_at_laerdal.dk> wrote:
>> On 10/03/2008, at 19.29, Erik Huelsmann wrote:
>>
>>> On Mon, Mar 10, 2008 at 5:14 PM, Jon Bendtsen <jbendtsen_at_laerdal.dk>
>>> wrote:
>>>> Hi
>>>>
>>>> My apache 2.0 based subversion 1.4 is quite slow at doing svn log
>>>> commands.
>>>
>>> The default answer here is: yes, if you enable path based
>>> authorization, svn log can be very slow over HTTP. There's
>>> information
>>> about disabling path based authz here:
>>>
http://svnbook.red-bean.com/nightly/en/svn-book.html#svn.serverconfig.ht
tpd.authz.pathauthzoff
>>> .
>>
>> I know it is the standard answer, but i do not think it applies in my
>> case.
>>
>> I also use svnserve, and svnserver is MANY times faster, and svnserve
>> also uses
>> authz-db = dav_svn.authz
>
> But the mechanism used by mod_dav_svn to do its access authorization
> differs from svnserve, so until you have actually tested this, I'm
> unable to eliminated this reason.
I have tried both using apache and svnserve.
>
>> I believe the problem is that svn or apache wants to close
>> 34897573403487348
>> file descriptors.
>
> Well, I can hardly imagine this would affect log but no other
> commands. That means that if *only* 'log' is slow, then I don't think
> it's this problem.
I am sorry i was saying only log was slow, because every svn command
using
apache is much slower than using svnserve. I do my testing using svn
log because
that does not change the repository.
JonB
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_subversion.tigris.org
For additional commands, e-mail: users-help_at_subversion.tigris.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_subversion.tigris.org
For additional commands, e-mail: users-help_at_subversion.tigris.org
Received on 2008-03-12 15:01:05 CET