[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RES: Branching from Working Copy with Partial Visibility

From: Luiz Guilherme Kimel <lkimel_at_dba.com.br>
Date: Fri, 30 Jul 2010 09:38:35 -0300

Interesting topic and sorry the intromission, but I wonder, after creating
that branch with an user who has full recursive permissions, if there is a
low administrative effort way of persisting original access rights, since
the path changed. This should be accomplished without having to create
specific new rules for this new path on the authz file.

Luiz Guilherme

-----Mensagem original-----
De: Daniel Shahaf [mailto:d.s_at_daniel.shahaf.name]
Enviada em: sexta-feira, 30 de julho de 2010 04:35
Para: Neil Gray (Chemstations)
Cc: users_at_subversion.apache.org
Assunto: Re: Branching from Working Copy with Partial Visibility

Neil Gray (Chemstations) wrote on Thu, Jul 29, 2010 at 14:49:59 -0700:
> Hello.
>
> My subversion repository has some directories with restricted access
> configured by the authz file. This works very well, and checkouts with
> partial visibility.
>
> However if I need to make a branch, I cannot seem to do that with partial
> visibility. In all cases that I have tried the svn copy is stopped by an
> access denied error.
>
> Is there any way to normally branch and merge from directories that
contain
> items that I do not have permission to see?
>
> Neil

If you attempt 'svn cp /foo /bar' and you can't see some of /foo's children,
I expect the copy to succeed but only copy what you have access to see. Is
that not the case?

I do not expect it to be possible to make a full recursive copy of a
directory that has children you can't see. (that would be a security hole:
who guarantees the authz is configured so those children remain
unviewable-by-you after the copy?)

So, if you want to branch that thing, do so as someone with full recursive
read
permissions.
Received on 2010-07-30 14:39:35 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.