From users-return-1959-daniel=haxx.se@subversion.apache.org Thu Apr 1 13:42:43 2010 Return-Path: Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by giant.haxx.se (8.14.3/8.14.3/Debian-9) with SMTP id o31BggZr007258 for ; Thu, 1 Apr 2010 13:42:42 +0200 Received: (qmail 69113 invoked by uid 500); 1 Apr 2010 11:42:40 -0000 Mailing-List: contact users-help@subversion.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@subversion.apache.org Received: (qmail 69105 invoked by uid 99); 1 Apr 2010 11:42:40 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 01 Apr 2010 11:42:40 +0000 X-ASF-Spam-Status: No, hits=2.3 required=10.0 tests=AWL,FREEMAIL_FROM,HTML_MESSAGE,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: local policy) Received: from [98.136.167.121] (HELO web113901.mail.gq1.yahoo.com) (98.136.167.121) by apache.org (qpsmtpd/0.29) with SMTP; Thu, 01 Apr 2010 11:42:34 +0000 Received: (qmail 66528 invoked by uid 60001); 1 Apr 2010 11:42:13 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1270122133; bh=PKFPqfitlC2FTt998OevJ9uGHZFrsjASeXtA35xZAOk=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=3D1I0RKSqPFtmzq4vuSzLY+Ihm7Ol4IUj5XiFMKUcdffA7/WfK0Zq3Ay5nGhPrVGEhRFX1GfLVrurB0VyHCmk6qJyGT/bhfBZMVRjegZKLpxxoA0wq0CrB7ivXnz97Z2ka8StruULAsDCdWzGWKQn7AtQtkg3rcCs5DrU0grghs= DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=UTzs6R7d26YhhBtd2HOey7tJsulXUCzthfXxJfLzryw1J05Bd0aZrW91UKz7oSDCGc8cNAnCVOEtIbZRxC7MfzIxdlVbF0zzWLcP0ZahsDBIJsd3G0W2XHCY9XjV5XawKD8U0PEVl9KEtzUXhI4Xg89lJcVm/anXFtdqG0lxYm4=; Message-ID: <385814.65846.qm@web113901.mail.gq1.yahoo.com> X-YMail-OSG: 9nDncNYVM1mkkoxoq75QAXuM7JyVTQFqqsPf9A4mIlwlsWd _8EJvBgHzwao4rq1OKv_hpmvzXm266rK_EXi9c8X537sx9U3fBntY.04nX0T YzrsFZOqILAdztJGA3kh9uCGeg0wqSBn5ClcbG69L1iacAzctZ99UkQbTM0d MOAJtPTcinti1DqIHDXudAsX9lUMg_6vglcHozxdYslGdFzKFnr_E_tlHfzd iydefxiLKSWWLILph_ugwJ0Bjxdq6aQ7l7iTG2RhbZikZi_W55WlLSTFdXI0 8R_8StQ-- Received: from [88.47.188.242] by web113901.mail.gq1.yahoo.com via HTTP; Thu, 01 Apr 2010 04:42:13 PDT X-Mailer: YahooMailRC/324.3 YahooMailWebService/0.8.100.260964 References: <4BB3CF07.5040306@redhat.com> <4B6F0239C13D0245820603C036D180BCA62E1F@CABOTUKEXCH01.cabot.local> <516357.45238.qm@web113910.mail.gq1.yahoo.com> <38E3A921A2B9FC46B02E566BDED7CF4E02A6F03F@oxfw0e1a.ww001.siemens.net> Date: Thu, 1 Apr 2010 04:42:13 -0700 (PDT) From: Mauro Gatti Subject: Re: authz conf file & multiple repositories To: "Cooke, Mark" , users@subversion.apache.org In-Reply-To: <38E3A921A2B9FC46B02E566BDED7CF4E02A6F03F@oxfw0e1a.ww001.siemens.net> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="0-2132545091-1270122133=:65846" --0-2132545091-1270122133=:65846 Content-Type: text/plain; charset=us-ascii Mark, you are right! I added the final "/" and I can see the root directory. Thanks Again Regards Mauro ________________________________ From: "Cooke, Mark" To: users@subversion.apache.org Cc: Mauro Gatti Sent: Thu, April 1, 2010 1:10:21 PM Subject: RE: authz conf file & multiple repositories Hello Mauro, > I'm using a multiple repositories configuration of subversion. > If I don't use the authz conf file I can browse the list of > repositoris (allowen in http.conf with directive > SVNListParentPath On). > If I use authz conf file apache le tme access only to > different repositories but not to the "index" list of them. > Is it possible to both use authz file and see the list of > repositories? > Yes, I do. If I remember correctly, the issue is with how you configure apache for your sites and if you use the slash on the end of the path. Excerpts from my working configuration follow: DAV svn SVNIndexXSLT "/subversion/svnindex.xsl" SVNParentPath D:/svn/department1/ SVNListParentPath On # restrict access to subversion repository paths... AuthzSVNAccessFile D:/svn/department1/svn-users.txt ...I have multiple ParentPath repo-groups using different s. The important bit was using the '/' at the end of the location string so that you can grant (at least) read permission in your AuthzSVNAccessFile for the root directory: # Give all authenticated users read access to the root # NB: use "* = " for all [repo:/] sections to remove access [/] I hope that helps! ~ Mark C --0-2132545091-1270122133=:65846 Content-Type: text/html; charset=us-ascii
Mark, you are right!
I added the final "/" and I can see the root directory.

Thanks Again

Regards

Mauro

From: "Cooke, Mark" <mark.cooke@siemens.com>
To: users@subversion.apache.org
Cc: Mauro Gatti <mauro.list@yahoo.com>
Sent: Thu, April 1, 2010 1:10:21 PM
Subject: RE: authz conf file & multiple repositories

Hello Mauro,

> I'm using a multiple repositories configuration of subversion.
> If I don't use the authz conf file I can browse the list of
> repositoris (allowen in http.conf with directive
> SVNListParentPath On).
> If I use authz conf file apache le tme access only to
> different repositories but not to the "index" list of them.
> Is it possible to both use authz file and see the list of
> repositories?
>
Yes, I do.  If I remember correctly, the issue is with how you configure
apache for your sites and if you use the slash on the end of the path.
Excerpts from my working configuration follow:

<Location /svn/department1/>
    DAV svn
    SVNIndexXSLT "/subversion/svnindex.xsl"
    SVNParentPath D:/svn/department1/
    SVNListParentPath On
    # restrict access to subversion repository paths...
    AuthzSVNAccessFile D:/svn/department1/svn-users.txt
</Location>

...I have multiple ParentPath repo-groups using different <Location>s.
The important bit was using the '/' at the end of the location string so
that you can grant (at least) read permission in your AuthzSVNAccessFile
for the root directory:

# Give all authenticated users read access to the root
# NB: use "* = " for all [repo:/] sections to remove access
[/]

I hope that helps!

~ Mark C

--0-2132545091-1270122133=:65846--