Return-Path: X-Original-To: apmail-subversion-users-archive@minotaur.apache.org Delivered-To: apmail-subversion-users-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 0D08618F65 for ; Tue, 28 Jul 2015 09:18:03 +0000 (UTC) Received: (qmail 64583 invoked by uid 500); 28 Jul 2015 09:18:02 -0000 Delivered-To: apmail-subversion-users-archive@subversion.apache.org Received: (qmail 64551 invoked by uid 500); 28 Jul 2015 09:18:02 -0000 Mailing-List: contact users-help@subversion.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@subversion.apache.org Received: (qmail 64541 invoked by uid 99); 28 Jul 2015 09:18:02 -0000 Received: from Unknown (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 28 Jul 2015 09:18:02 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id E511AD8313 for ; Tue, 28 Jul 2015 09:18:01 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -0.119 X-Spam-Level: X-Spam-Status: No, score=-0.119 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, URIBL_BLOCKED=0.001] autolearn=disabled Authentication-Results: spamd1-us-west.apache.org (amavisd-new); dkim=pass (1024-bit key) header.d=wandisco.com Received: from mx1-eu-west.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id fowq9cZCGC1u for ; Tue, 28 Jul 2015 09:17:53 +0000 (UTC) Received: from mail-wi0-f179.google.com (mail-wi0-f179.google.com [209.85.212.179]) by mx1-eu-west.apache.org (ASF Mail Server at mx1-eu-west.apache.org) with ESMTPS id D71E620775 for ; Tue, 28 Jul 2015 09:17:52 +0000 (UTC) Received: by wicgb10 with SMTP id gb10so147183851wic.1 for ; Tue, 28 Jul 2015 02:17:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wandisco.com; s=gapps; h=message-id:date:from:organization:user-agent:mime-version:to :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=VDiMhOKu4OOeALP8Qif7MTZkPjoH2uQWsVVwBr2VEnQ=; b=nXjovsFKv41P7MQDebEB4gwkdt9FEwS6BAaCo6ebF5f7+4IjoCpBOzmBZFVv4eNa8H LsZ9RCB9KTv/qpJ5z0PPi9ziHnaJqLuJ/I30krj2OSTU9ZClarO/5C/YOY3GjDGi9IWm 2UfQHZ4asv/k3lVo/1jxsEM08USo9dU/ZqAs8= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:organization:user-agent :mime-version:to:subject:references:in-reply-to:content-type :content-transfer-encoding; bh=VDiMhOKu4OOeALP8Qif7MTZkPjoH2uQWsVVwBr2VEnQ=; b=lyJnr6cAD3zgWEsjlV1An++sVdO55gUZAJgp6SwmqBMSyHb2DsddHH0lvdQUouE2es eMwdIav0rabGkzkWQVKJ2OdBqWVwHBdi4laBpxAGmpTp2kQwWgRqGP6ITz0K9PI/hEY+ W9dAe0qs9nOl3SEW+yJtpdpEd1ZTlVq5PGHQNwjNxlEJvY1UhhNpAI3c/OqfyO5e4QOA 0jPKbdPzS8/4zjALGNAd7p35eqywgnbGhzO/jiT8zZdnbLUpxWEmiQ110Vj5BzpnQj0A 9/9S1R70NSAvKh+1X7FcxpXL6Qzv9uXjJ9Y3pPTCzzaC94Hshjs61qF78N2m0QaHhyfJ tSLg== X-Gm-Message-State: ALoCoQnZEbOIgERAznK6fIcVOfC9LPHWR+tFiVC5X+Vm0rclzZf6lXQlDIKsymOJoxDBg3IVW4NW X-Received: by 10.194.58.167 with SMTP id s7mr38263228wjq.69.1438075021519; Tue, 28 Jul 2015 02:17:01 -0700 (PDT) Received: from zulu.23.e-reka.si (cpe-46-164-5-176.dynamic.amis.net. [46.164.5.176]) by smtp.gmail.com with ESMTPSA id c11sm18016028wib.1.2015.07.28.02.17.00 for (version=TLSv1 cipher=RC4-SHA bits=128/128); Tue, 28 Jul 2015 02:17:00 -0700 (PDT) Received: from zulu.23.e-reka.si (localhost [127.0.0.1]) by zulu.23.e-reka.si (Postfix) with ESMTP id 3B164F3E4B37 for ; Tue, 28 Jul 2015 11:16:58 +0200 (CEST) Message-ID: <55B74889.9090805@wandisco.com> Date: Tue, 28 Jul 2015 11:16:57 +0200 From: =?UTF-8?B?QnJhbmtvIMSMaWJlag==?= Organization: WANdisco User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.7.0 MIME-Version: 1.0 To: users@subversion.apache.org Subject: Re: A question about Path-Based Authorization in svn References: <41302A7145AC054FA7A96CFD03835A0A0B9B5E82@EX10MBX02.EU.NEC.COM> In-Reply-To: <41302A7145AC054FA7A96CFD03835A0A0B9B5E82@EX10MBX02.EU.NEC.COM> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit On 28.07.2015 10:11, David Aldrich wrote: > Hi > > Path-Based Authorization is described here: > > http://svnbook.red-bean.com/nightly/en/svn.serverconfig.pathbasedauthz.html > > Having read that description, it is not clear to me what happens in this situation: > > groupA = fred > groupB = fred, jane > > [myRepo:/] > @groupA = rw > @groupB = r > > Is fred's access to myRepo:/ 'rw' or 'r'? The user always gets the union of all rights given her by a rule; in other words, the maximum access rights defined in any entry in a rule. > Does the order of the groups (below the [myRepo:/] statement) matter? No, it does not. -- Brane