[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: Trying (failing) to limit access to one user

From: Engebakken Geir <geir.engebakken_at_edb.com>
Date: Tue, 10 May 2011 12:42:32 +0200

We have set up pah-based access like this, and it works fine :

[java:/business/archive]
@archive_r=r
@archive=rw
~archive =

Members of archive_r have readonly access
Members of archive have read/write access
Not-Members of archive have no access

Geir

Note : All inquiries regarding Subversion, MKS and general Development servers should be directed to "EDB SourceControl System"

> -----Original Message-----
> From: Bob Archer [mailto:Bob.Archer_at_amsi.com]
> Sent: 28. april 2011 15:23
> To: Alan M. Evans; Daniel Shahaf
> Cc: users_at_subversion.apache.org; kmradke_at_rockwellcollins.com; David
> Brodbeck
> Subject: RE: Trying (failing) to limit access to one user
>
> > > Perhaps
> > >
> > > [/]
> > > ~jon = rw
> >
> > Nope. jon still able to check out the entire repository tree.
> >
> > So far, it seems that the only rules that make any difference are
> > "* ="
> > and "$authenticated =". These give everybody access. Without one of
> > these present, nobody has access. And now I can add "~anyname =" to
> > that
> > list.
> >
> > Using "anyname =" doesn't seem to have any effect at all on access.
> > It
> > certainly doesn't grant any access to anyname.
> >
> > This is why I mentioned in my OP that I thought this might be me
> > misunderstanding the meaning of "anonymous access" in this context.
>
> What authentication method are you using? I'm guessing while *= works
> but "jon=" (or other user names) doesn't that isn't the full user name
> that svn sees. If you look at your log are the usernames the ones you
> are expecting and putting into the authz file?
>
> BOb
Received on 2011-05-10 12:43:07 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.