[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: SVN mixed public\restricted access, please help!

From: Daniel Shahaf <d.s_at_daniel.shahaf.name>
Date: Wed, 10 Nov 2010 02:23:12 +0200

1. There is a "$authenticated" keyword in addition to "$anonymous". Might help.

2. Bugfix that will be in 1.6.14: unreadable directories will not appear
in their parent directory's list of children, both in 'svn ls' and in
the listing that appears when an http:// repository is accessed in
a browser. It's in the neighbourhood, though not directly related to
what you need.

Shaun Martin wrote on Tue, Nov 09, 2010 at 13:32:46 -0500:
> Hi All,
>
> Ok I am trying to achieve a repository that at its base level everyone has
> read-only access without a username. But then at subsequent levels I would
> like to remove their access so they have none. I thought this could be
> accomplished with 1.6 with the addition of "~" and "$anonymous" but I have
> yet been able to get a working configuration.
>
> First off I tried setting up my apache just like this for my repo.
> Code:
> <Location /repos>
>   DAV svn
>   SVNParentPath /var/svn
>
>   # our access control policy
>   AuthzSVNAccessFile /path/to/access/file
>
>   # try anonymous access first, resort to real
>   # authentication if necessary.
>   Satisfy Any
>   Require valid-user
>
>   # how to authenticate a user
>   AuthType Basic
>   AuthName "Subversion repository"
>   AuthUserFile /path/to/users/file
> </Location>
>
> with this in my SVNAccessFile
>
> Code:
> [openclinica:/subdir]
> @clients = rw
> @svn-admin = rw
>
> [/]
> @svn-admin = rw
>
> I could not achieve a non authenticated user to gain access unless i added
> either "* = r" or "$anonymous = r" to the [/] in the access file. so now my
> file looks like this.
>
> Code:
> [openclinica:/subdir]
> @clients = rw
> @svn-admin = rw
>
> [/]
> @svn-admin = rw
> $anonymous = r
>
> Now I try to remove access to my subdir for the anonymous users by adding
> "~$anonymous = r" so my file now looks like this.
>
> Code:
> [openclinica:/subdir]
> @clients = rw
> @svn-admin = rw
> ~$anonymous = r
>
> [/]
> @svn-admin = rw
> $anonymous = r
>
> which apparently does nothing as anonymous users can still access my subdir
> and it does not force anyone to login.
>
> So then I tried the following.
>
> Code:
> [openclinica:/subdir]
> @clients = rw
> @svn-admin = rw
> $anonymous =
>
> [/]
> @svn-admin = rw
> $anonymous = r
>
> Which did not allow anonymous users to access my subdir, unfortunately it
> does not allow my authenticated users to access the subdir either.
>
> I have tried all these configuration with the "Satisfy Any" in apache
> enabled and disabled. Please help!!
>
> This was posted on svnforum.org
> http://www.svnforum.org/2017/viewtopic.php?p=32748#32748
>
> Thanks,
> Shaun
> --
> Shaun Martin
> Systems Administrator
> Akaza Research
> smartin_at_akazaresearch.com
> Office: (781) 547-8413
> www.akazaresearch.com <http://www.akazaresearch.com/>
> www.openclinica.org <http://www.openclinica.org/>
> Open Source Platform for Clinical Research
>
>
Received on 2010-11-10 01:26:11 CET

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.