[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: SVN mixed public\restricted access, please help!

From: Cooke, Mark <mark.cooke_at_siemens.com>
Date: Wed, 10 Nov 2010 09:32:43 -0000

> -----Original Message-----
> From: Shaun Martin [mailto:smartin_at_akazaresearch.com]
> Sent: 09 November 2010 18:33
> Subject: SVN mixed public\restricted access, please help!
>
> Hi All,
>
> Ok I am trying to achieve a repository that at its base level
> everyone has read-only access without a username. But then at
> subsequent levels I would like to remove their access so they
> have none. I thought this could be accomplished with 1.6 with
> the addition of "~" and "$anonymous" but I have yet been able
> to get a working configuration.
>
> First off I tried setting up my apache just like this for my repo.
> Code:
> <Location /repos>
> DAV svn
> SVNParentPath /var/svn
>
> # our access control policy
> AuthzSVNAccessFile /path/to/access/file
>
> # try anonymous access first, resort to real
> # authentication if necessary.
> Satisfy Any
> Require valid-user

My understanding of apache is that this gets passed first.. So I suspect
that your problem is that everyone is being accepted as an anonymous
user ~ have you ever been challenged for username/password during your
testing?

~ mark c

> # how to authenticate a user
> AuthType Basic
> AuthName "Subversion repository"
> AuthUserFile /path/to/users/file
> </Location>
>
> with this in my SVNAccessFile
>
> Code:
> [openclinica:/subdir]
> @clients = rw
> @svn-admin = rw
>
> [/]
> @svn-admin = rw
>
> I could not achieve a non authenticated user to gain access
> unless i added either "* = r" or "$anonymous = r" to the [/]
> in the access file. so now my file looks like this.
>
> Code:
> [openclinica:/subdir]
> @clients = rw
> @svn-admin = rw
>
> [/]
> @svn-admin = rw
> $anonymous = r
>
> Now I try to remove access to my subdir for the anonymous
> users by adding "~$anonymous = r" so my file now looks like this.
>
> Code:
> [openclinica:/subdir]
> @clients = rw
> @svn-admin = rw
> ~$anonymous = r
>
> [/]
> @svn-admin = rw
> $anonymous = r
>
> which apparently does nothing as anonymous users can still
> access my subdir and it does not force anyone to login.
>
> So then I tried the following.
>
> Code:
> [openclinica:/subdir]
> @clients = rw
> @svn-admin = rw
> $anonymous =
>
> [/]
> @svn-admin = rw
> $anonymous = r
>
> Which did not allow anonymous users to access my subdir,
> unfortunately it does not allow my authenticated users to
> access the subdir either.
>
> I have tried all these configuration with the "Satisfy Any"
> in apache enabled and disabled. Please help!!
>
> This was posted on svnforum.org
> http://www.svnforum.org/2017/viewtopic.php?p=32748#32748
>
> Thanks,
> Shaun
> --
> Shaun Martin
> Systems Administrator
> Akaza Research
> smartin_at_akazaresearch.com
> Office: (781) 547-8413
> www.akazaresearch.com <http://www.akazaresearch.com/>
> www.openclinica.org <http://www.openclinica.org/>
> Open Source Platform for Clinical Research
>
>
>
Received on 2010-11-10 10:33:25 CET

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.