[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: using PSexec to remotely run svnserver

From: Erik Huelsmann <ehuels_at_gmail.com>
Date: Tue, 23 Mar 2010 23:35:30 +0100

On Tue, Mar 23, 2010 at 11:14 PM, Andy Levy <andy.levy_at_gmail.com> wrote:
> On Tue, Mar 23, 2010 at 15:46, yary <not.com_at_gmail.com> wrote:
>>>You should stop doing so immediately and set up a proper server. Any user
>>>with direct file:-protocol access to the repository can access any part of it
>>>(bypassing any path-based security you've put in place) and can even delete
>>>the entire repository (accidentally or intentionally).
>>
>> What you are describing is considered a feature in our environment.
>> Anyone with file system access on the server has utilmate trust. If
>> you wish to lecture me, please mail me directly. If you wish to answer
>> the original topic, then email the list.
>>
>
> It's not a lecture. Your original request runs counter to all best
> practices of a multi-user Subversion repository. It may be a "feature"
> of your environment but that "feature" will result in a lot of pain &
> suffering at some point. At which point the loss of data will be
> blamed on a deficiency in Subversion by someone in your organization,
> when in fact the fault lies with how the environment is configured.

Additionally, the Subversion development team has announced file://
protocol should not be considered for production environments. There
are other protocols for such situations.

Bye,

Erik.
Received on 2010-03-23 23:35:59 CET

This is an archived mail posted to the Subversion Users mailing list.