Re: Authentication issue

In Subversion, your server does the permissioning for reading. Then,
you use a pre-commit hook script to take care of permissioning on the
commit side.

Subversion source distribution comes with a Python script that reads a
control file, so it is easy to add or change permissions. I recommend
everyone uses that hook if only to prevent people from checking out
and modifying tags. The hook allows you to create a tag, but prohibits
you from committing changes in the files in the tags directory.

You can use this script to control reading and writing of certain
files or directories which include branches.

--
David Weintraub
qazwart_at_gmail.com
On Wed, Aug 13, 2008 at 2:18 PM, Mark Braemer <mbraemer_at_pomeroy.com> wrote:
> Due to SOX requirements, we have one group of people who write and commit
> the code in our development environment and another group who update our
> production environment.
>
> I have Microsoft AD working fine to allow a group access as so:
>
>
>
> <Location /myrepo>
>
>     DAV svn
>
>     SVNParentPath C:/repositories/myrepo
>
>     SVNListParentPath on
>
>     AuthLDAPAuthoritative on
>
>     AuthType Basic
>
>     AuthName "myrepo"
>
>     AuthLDAPURL
> "ldap://domain_name.msft:389/dc=domain_name,dc=msft?sAMAccountName?sub?(objectClass=*)"
>
>     AuthLDAPBindDN "LDAPAgent_at_domain_name.msft"
>
>     AuthLDAPBindPassword "password_value"
>
>     #require valid-user
>
>     require group CN=Web
> Team,OU=Users,OU=Applications,OU=IT,OU=Headquarters,DC=domain_name,DC=msft
>
> </Location>
>
>
>
> What I want to do is add a second group that can update from svn but cannot
> commit changes to svn. Has anyone done anything like this?
>
>
>
> Mark A. Braemer
>
> 1-800-846-8727 ext 4288
>
> Application Developer
>
> Pomeroy IT Solutions
>
> MCP, V3 ITIL Foundation, CompTIA A+,CompTIA Network+
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_subversion.tigris.org
For additional commands, e-mail: users-help_at_subversion.tigris.org