The limit/limitexcept sections allow you to have separate read/only and
read/write groups.
For example (Group xxx has read/write access, Group yyy only has read
access):
# These groups have write access
<LimitExcept GET PROPFIND OPTIONS REPORT>
Require ldap-group CN=xxx,OU=Groups,DC=company,DC=com
</LimitExcept>
# These groups have read access
<Limit GET PROPFIND OPTIONS REPORT>
Require ldap-group CN=xxx,OU=Groups,DC=company,DC=com
Require ldap-group CN=yyy,OU=Groups,DC=company,DC=com
</Limit>
The apache docs have more detailed info. (This is really an apache
related question,
and has nothing to do with Subversion itself.)
Kevin R.
Oliver Marshall <oliver.marshall_at_g2support.com> wrote on 01/21/2009
06:55:26 AM:
> Hi chaps,
>
> I?ve got SVN working with LDAP on Apache so that users are authenticated
> against the Windows server here. However I do have a question.
>
> In lots of examples I see something like this;
>
> <location /svn>
>
> <limit this that the-other>
> LDAP AUTH HERE
> </limit>
>
> </location>
>
>
> Now, I?m not using a LIMIT parameter in my dav_svn.conf file. I just
have the
> locations with the LDAP stuff and requirements under each one.
>
> Should I be using the LIMIT param at all? Does it bring anything to the
party?
>
> Olly
>
> --
> Important notice:
> We have moved offices. Our new address is below.
>
> G2 Support
> Network Support : Online Backups : Server Management
>
> Tel: 0870 904 3443
> Email: oliver.marshall_at_g2support.com
> Web: http://www.g2support.com
> Mail: 2nd Floor, 130a Western Rd, Brighton, Sussex, BN12LA
>
> G2 Support LLP is registered at Mill House, 103 Holmes Avenue, HOVE
> BN3 7LE. Our registered company number is OC316341.
>
>
>
------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=1041429
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].
Received on 2009-01-21 17:02:45 CET