[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: SVNServe path based authorization help.

From: Hari Kodungallur <hkodungallur_at_gmail.com>
Date: Tue, 6 May 2008 10:38:39 -0700

On Tue, May 6, 2008 at 9:34 AM, Sami Mikhail <thesamim_at_yahoo.com> wrote:

> I've been digging for three days now, but no joy.
>
> Running basic svnserver daemon on Windows.
>
> Let's say I have:
>
> C:\MYPROJECT
> \---devDirectories
> +---database
> \---java
> \---sql
>
> In case that's not clear:
> C:\MyProject\devDirectories
> C:\MyProject\devDirectories\database
> C:\MyProject\devDirectories\java
> C:\MyProject\devDirectories\java\sql
>
> We need to give the development team RW access to everything; the DBA team
> RW to only the "database" and the da team RW to "sql" directories.
>
> (The directory structure is significantly more complex than that, and we
> have multiple active branches....)
>
> I've tried various combinations in my authorization file:
> [groups]
> da = harry, sally
> dba = fred, george
> developers = ron, hermione, neville
>
> [/]
> da =
> dba =
> developers = rw
> * = r
>
>
> [/MyProject/devDirectories/database/]
> @dba = rw
>
> [/MyProject/devDirectories/java/sql]
> @da = rw
>
> Nothing seems to work the way I expect it to. Has anyone gotten this kind
> of scenario to work? What's the right way of doing this?
>
> I can do whatever needs to be done with authorization/permissions, but i
> cannot change the directory structure.
>
> Any help greatly appreciated.
>

Can you provide some more info:

(1) What you have shown is the directory structure in the working copy,
which potentially reflects the one on the server. But I just want to make
sure that all directories including MyProjects is part of the repository.

(2) I assume you have set (or uncommented) the password-db and authz-db
config parameters in the svnserve.conf file.

(3) When you say "Nothing seems to work the way I expect it to", what
exactly happens. With the given access control file, what works and what
does not?

(4) I am not absolutely sure, but if my memory serves me right, the case
where you have provided " * = r", will let the all users including dba and
db to read that directory. I am not sure whether that is a bug or if it is a
bug, if it is fixed in later versions. I think early 1.4.x had that issue.

Thanks,
-Hari
Received on 2008-05-06 19:39:03 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.