RE: Betr.: RE: Questions about svn:externals
From: David Aldrich <David.Aldrich_at_EU.NEC.COM>
Date: Thu, 20 Jan 2011 09:24:28 +0000
Hi Jan
> I've changed my mind, there is something that may be better than
I get your drift but may I check I am understanding you correctly?
The authz file would contain:
*/thesecretfolder/*
svn does not expand wildcards in authz but I guess it will not complain about such an entry. The hook reads authz and does the comparison of the actual commit path against this wildcard path using regular expressions (or whatever). Am I right so far?
The hook must then check that the committer has rights to commit to that path. So the hook uses the access permission specification in the above entry, and checks that the committer belongs to 'privileged_group'. Then the hook allows or blocks the commit. Am I correct?
> The advantage of this approach over externals is that you'll have atomic
Yes, I like your idea, thanks. I am quite opposed to using externals for this since I realised that externals are not well supported in branching and merging.
I did think of another approach before receiving your suggestion. I thought of having a proprietary 'my_authz' file which allows wildcards. Then our own mangler would check what branches exist, read our my_authz and generate a real authz file with all the necessary expanded paths and permissions. Could be run regularly by cron (or whatever).
However, your suggestion is more elegant. Not sure which would be more efficient.
BR
David
|
This is an archived mail posted to the Subversion Users mailing list.
This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.