Return-Path: X-Original-To: apmail-subversion-commits-archive@minotaur.apache.org Delivered-To: apmail-subversion-commits-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 8746D11F13 for ; Mon, 15 Sep 2014 14:42:26 +0000 (UTC) Received: (qmail 74591 invoked by uid 500); 15 Sep 2014 14:42:26 -0000 Delivered-To: apmail-subversion-commits-archive@subversion.apache.org Received: (qmail 74558 invoked by uid 500); 15 Sep 2014 14:42:26 -0000 Mailing-List: contact commits-help@subversion.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@subversion.apache.org Delivered-To: mailing list commits@subversion.apache.org Received: (qmail 74548 invoked by uid 99); 15 Sep 2014 14:42:26 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 15 Sep 2014 14:42:26 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=5.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.131] (HELO eos.apache.org) (140.211.11.131) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 15 Sep 2014 14:42:04 +0000 Received: from eos.apache.org (localhost [127.0.0.1]) by eos.apache.org (Postfix) with ESMTP id AA0A5F42 for ; Mon, 15 Sep 2014 14:42:02 +0000 (UTC) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: Apache subversion Wiki To: Apache subversion Wiki Date: Mon, 15 Sep 2014 14:42:02 -0000 Message-ID: <20140915144202.12903.98460@eos.apache.org> Subject: =?utf-8?q?=5BSubversion_Wiki=5D_Update_of_=22AuthzImprovements=22_by_Stef?= =?utf-8?q?anFuhrmann?= Auto-Submitted: auto-generated X-Virus-Checked: Checked by ClamAV on apache.org Dear Wiki user, You have subscribed to a wiki page or wiki category on "Subversion Wiki" fo= r change notification. The "AuthzImprovements" page has been changed by StefanFuhrmann: https://wiki.apache.org/subversion/AuthzImprovements?action=3Ddiff&rev1=3D9= &rev2=3D10 Comment: Specify that repo-specific rules have higher prio = =3D=3D Inheritance and disambiguation =3D=3D = - These are the rules as of today, with rule 6 added to support + These are the rules as of today, with rule 7 added to support ambiguous path patches caused by pattern matching. Please note the difference between ''matching'' (does a path fully match a given pattern?) and ''applying to'' (governing the access rights). @@ -56, +56 @@ 5. If no ACL is given for the repository root, a default ACL denying access to anybody applies to the root path. = + 6. If repository-specific path rules as well as global path rules + match a given path, only the repositor-specific ones will be + considered. + = - 6. If multiple path rules match a given repository path, only + 7. If multiple path rules match a given repository path, only the one specified last in the authz file shall apply. = - 7. If multiple ACEs of a given ACL apply to a user, the union of + 9. If multiple ACEs of a given ACL apply to a user, the union of all individually granted access rights is granted. = {{{#!wiki caution=20