Comments on: Read-Only and Read-Write SVN Repositories https://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/ Thoughts, rants, and even some code from the mind of Barney Boisvert. Thu, 11 Sep 2014 09:58:12 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: Matteo https://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/comment-page-1/#comment-521883 Matteo Thu, 22 May 2014 08:53:47 +0000 http://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/#comment-521883 The problem is that if I do a chekcout of the anonymous-enabled subpath "public"as follows: svn co https://repo_url/public Apache always ask for a username and password The problem is that if I do a chekcout of the anonymous-enabled subpath "public"as follows:
svn co https://repo_url/public
Apache always ask for a username and password

]]> By: Matteo https://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/comment-page-1/#comment-521882 Matteo Thu, 22 May 2014 08:49:43 +0000 http://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/#comment-521882 Hi Barney, I need exaclty what you explained in this post: a repo with RW acces to authenticated users, but with a subpath with anonymous readonly access. So i configured apache as you suggested: ... # Authorization AuthzSVNAccessFile my_auth_file Satisfy any Require valid-user And the authz file is as follows [repo:/] matteo = rw [repo:/public] * = r mbrunettini = rw But it does not work on subversion 1.6.17 Where Am I wrong? Thanks for you help. Matteo Hi Barney,
I need exaclty what you explained in this post: a repo with RW acces to authenticated users, but with a subpath with anonymous readonly access. So i configured apache as you suggested:

…
# Authorization
AuthzSVNAccessFile my_auth_file
Satisfy any
Require valid-user

And the authz file is as follows
[repo:/]
matteo = rw
[repo:/public]
* = r
mbrunettini = rw

But it does not work on subversion 1.6.17
Where Am I wrong?
Thanks for you help.
Matteo

]]> By: Karthik https://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/comment-page-1/#comment-453599 Karthik Thu, 09 Jan 2014 23:07:41 +0000 http://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/#comment-453599 Barney - Thanks for your reply. I have got it working now. Yes, my repo name is all in caps (SVNCOPY) but the actual issue was that I didn't have to specify the repo name at all. Since I declared realm name as SYNCOPY, I guess it only needed to know the parent folder names at the root level. When I corrected, it started working as expected. Cheers, Karthik Durairajan Barney – Thanks for your reply. I have got it working now. Yes, my repo name is all in caps (SVNCOPY) but the actual issue was that I didn't have to specify the repo name at all. Since I declared realm name as SYNCOPY, I guess it only needed to know the parent folder names at the root level. When I corrected, it started working as expected.

Cheers,
Karthik Durairajan

]]> By: barneyb https://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/comment-page-1/#comment-453593 barneyb Thu, 09 Jan 2014 22:48:46 +0000 http://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/#comment-453593 Karthik, I've never done path-based auth with multiple repositories (i.e., using SVNParentPath), but that seems like it should do what you want. Note that I think you have to repository-qualify all your paths (so the first section won't do anything). Also, I'm pretty sure the repo names are case sensitive; is your path really in all caps on the filesystem? Karthik,

I've never done path-based auth with multiple repositories (i.e., using SVNParentPath), but that seems like it should do what you want. Note that I think you have to repository-qualify all your paths (so the first section won't do anything). Also, I'm pretty sure the repo names are case sensitive; is your path really in all caps on the filesystem?

]]> By: Karthik https://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/comment-page-1/#comment-452683 Karthik Wed, 08 Jan 2014 06:08:31 +0000 http://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/#comment-452683 Hi Barney I’ve got both authentication and authorization working as they should be in my setup. However, path based restrictions don’t seem to work for sub folders. Please see Authz snippet below: <pre>[groups] ctrlMusers = user1, user2, user3 [/]@ctrlM = r [SVNCOPY:/ControlM] @ctrlM = rw @developers = r * = </pre> From the above, I’m restricting write access only to ctrlMusers. But sadly, ControlM folder has too many sub directories (SVNCOPY/ControlM/trunk/AciCore/build/release1) user3 is not able to commit a file under SVNCOPY/ControlM/trunk/AciCore/build/release1 even though he has RW access at the parent folder level (ControlM). How do I go about resolving this issue? Thanks. Karthik Hi Barney

I’ve got both authentication and authorization working as they should be in my setup. However, path based restrictions don’t seem to work for sub folders. Please see Authz snippet below:

[groups]
ctrlMusers = user1, user2, user3

[/]@ctrlM = r

[SVNCOPY:/ControlM]
@ctrlM = rw
@developers = r
* =

From the above, I’m restricting write access only to ctrlMusers. But sadly, ControlM folder has too many sub directories (SVNCOPY/ControlM/trunk/AciCore/build/release1)

user3 is not able to commit a file under SVNCOPY/ControlM/trunk/AciCore/build/release1 even though he has RW access at the parent folder level (ControlM). How do I go about resolving this issue? Thanks.
Karthik

]]> By: barneyb https://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/comment-page-1/#comment-337370 barneyb Wed, 19 Dec 2012 17:42:16 +0000 http://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/#comment-337370 sanjog, if you don't give read access to "<code>*</code>", then the folder won't be visible. I don't know what your setup is, but if you have a the root set to allow anonymous read, you need only define a section for the folder you want to restrict and not give read access to it. Basically the reverse of the first example: <pre>[/] * = r barneyb = rw [/bicycle_dashboard] barneyb = rw </pre> Now the repository will be readable, except for the '<code>bicycle_dashboard</code>' folder which is only accessible to '<code>barneyb</code>'. sanjog, if you don't give read access to "*", then the folder won't be visible. I don't know what your setup is, but if you have a the root set to allow anonymous read, you need only define a section for the folder you want to restrict and not give read access to it. Basically the reverse of the first example:

[/]
* = r
barneyb = rw

[/bicycle_dashboard]
barneyb = rw

Now the repository will be readable, except for the 'bicycle_dashboard' folder which is only accessible to 'barneyb'.

]]> By: sanjog https://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/comment-page-1/#comment-337342 sanjog Wed, 19 Dec 2012 12:48:31 +0000 http://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/#comment-337342 Hello barneyb, I am very new to svn. I just have setup the server and client. I have created some repositories. My question is --> How do i restrict the access to some folder in a repository ? (That is, those folder should not even be visible to the user). Kindly suggest with the code. Hello barneyb,

I am very new to svn.
I just have setup the server and client.
I have created some repositories.
My question is –>

How do i restrict the access to some folder in a repository ? (That is, those folder should not even be visible to the user).

Kindly suggest with the code.

]]> By: satheesh https://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/comment-page-1/#comment-317766 satheesh Thu, 26 Jul 2012 06:34:52 +0000 http://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/#comment-317766 Am using svnserve 1.4 in windows 7. i want to set permission in authz file. i want to give the rw permission to the subfolder if root folder is read protected . why bcoz in my repository i have lot of files & folder. so want to give rw permission for some of files & sub folders only . other folders are invisible to the user.... means.... I want to give the rw permissions to the some of the sub folders only not the entire directory..... & sub directory <pre> [/root] group1 = [/root/A/new/Data] group1 = rw [/root/C/Ex/Files] group1 = rw </pre> If i give above code. Nothing is displayed.... Bcoz <pre> [/root] group1 = </pre> If i give <pre> [/] group1 = rw </pre> All folders are visible to the "group1". I dont want like this... other option is <pre> [root/B] group1 = [root/c] group1 = </pre> .... like all sub folder that are not needed for group1. i dont want do like this.... pls anyone help me.............. Am using svnserve 1.4 in windows 7. i want to set permission in authz file.
i want to give the rw permission to the subfolder if root folder is read protected . why bcoz in my repository i have lot of files & folder. so want to give rw permission for some of files & sub folders only . other folders are invisible to the user…. means…. I want to give the rw permissions to the some of the sub folders only not the entire directory….. & sub directory

    [/root]
    group1 =
    [/root/A/new/Data]
    group1 = rw
    [/root/C/Ex/Files]
    group1 = rw

If i give above code. Nothing is displayed…. Bcoz

    [/root]
    group1 =

If i give 

    [/]
    group1 = rw

All folders are visible to the "group1″. I dont want like this…

other option is

    [root/B]
    group1 =
    [root/c]
    group1 =

….
like all sub folder that are not needed for group1. i dont want do like this….

pls anyone help me…………..

]]> By: Kalpesh Soni https://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/comment-page-1/#comment-307522 Kalpesh Soni Fri, 04 May 2012 17:36:37 +0000 http://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/#comment-307522 I have a reverse problem I wanted every one with valid user id having write access and a guest account with blank password having readonly access [groups] readonly=guest [/] @readonly=r *=rw this does not work apache matched guest account with second line (as it is also part of *) and hence guest gets read write access! what do i do now? I have a reverse problem

I wanted every one with valid user id having write access

and a guest account with blank password having readonly access

[groups]
readonly=guest

[/]
@readonly=r
*=rw

this does not work

apache matched guest account with second line (as it is also part of *)

and hence guest gets read write access!

what do i do now?

]]> By: vishal https://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/comment-page-1/#comment-288690 vishal Wed, 21 Dec 2011 05:31:17 +0000 http://www.barneyb.com/barneyblog/2008/02/28/read-only-and-read-write-svn-repositories/#comment-288690 Santhosh, you can use system passwd file to authenticate the SVN on SVN server, so if user want to change their password they can login to the server and change their system password which will be used by SVN authentication . I think above solves your problem. Santhosh, you can use system passwd file to authenticate the SVN on SVN server, so if user want to change their password they can login to the server and change their system password which will be used by SVN authentication .

I think above solves your problem.

]]>