From users-return-24468-apmail-subversion-users-archive=subversion.apache.org@subversion.apache.org Wed Mar 9 20:58:07 2016 Return-Path: X-Original-To: apmail-subversion-users-archive@minotaur.apache.org Delivered-To: apmail-subversion-users-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 5AB0C18F36 for ; Wed, 9 Mar 2016 20:58:07 +0000 (UTC) Received: (qmail 94007 invoked by uid 500); 9 Mar 2016 20:58:07 -0000 Delivered-To: apmail-subversion-users-archive@subversion.apache.org Received: (qmail 93972 invoked by uid 500); 9 Mar 2016 20:58:07 -0000 Mailing-List: contact users-help@subversion.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@subversion.apache.org Received: (qmail 93962 invoked by uid 99); 9 Mar 2016 20:58:06 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 09 Mar 2016 20:58:06 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id 35F30C374B for ; Wed, 9 Mar 2016 20:58:06 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 0.298 X-Spam-Level: X-Spam-Status: No, score=0.298 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, KAM_COUK=1.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd1-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=yahoo.co.uk Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id s0xny9WEUXy9 for ; Wed, 9 Mar 2016 20:58:04 +0000 (UTC) Received: from nm17-vm3.bullet.mail.ir2.yahoo.com (nm17-vm3.bullet.mail.ir2.yahoo.com [212.82.96.218]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTPS id 05AAC5FACD for ; Wed, 9 Mar 2016 20:58:03 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s2048; t=1457557076; bh=n+pdHoayKNEXMnxIv76JUZDlhjoTEPxuLfNcsMp4PKQ=; h=Subject:To:References:From:Date:In-Reply-To:From:Subject; b=Pz+FzkOfPROvxr61RQMTVrtSxgWbBGp21XXr56/FXrJy3ruyr7t6PD6C0djMglTZBeVNPHRorn/NeU1uCdWy3vMAILC62OBc1AkOd+GgDS1vjuq4RDDjs9w3r9hVX4XqP3zG62us8bVAMRO3FRMEKiWGx8zFacOCLZY7EFI1N0dTHve0XUT0oa8dT0sn1WC+yNJxYETxXR8YFn+5P3rtwNzLj68ersaMhz8yQGzhNT+saCcE8RzS6CajrthFjhE/Zqy4ZWJ90vSogRPZqHDXFynAb4jMwrRimL0SVbqio4BmDFfr4LK/INGJYk3KO/I21bYAudyDRRSYj8lTd74B4A== Received: from [212.82.98.62] by nm17.bullet.mail.ir2.yahoo.com with NNFMP; 09 Mar 2016 20:57:56 -0000 Received: from [46.228.39.92] by tm15.bullet.mail.ir2.yahoo.com with NNFMP; 09 Mar 2016 20:57:56 -0000 Received: from [127.0.0.1] by smtp129.mail.ir2.yahoo.com with NNFMP; 09 Mar 2016 20:57:56 -0000 X-Yahoo-Newman-Id: 962072.18541.bm@smtp129.mail.ir2.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: hUMJmRoVM1mUU5zQ2E1iJu28kOFhYfSwkVmEqKg_rqBX06E cLLwHoEj4rcVkNS9ssjxQmad76Fgm85AS5.2u8sTW0Y3De3KR0QSpoDHr81F 0UdHX5rban3Wvs8EgaNIaG3pC8JixUU9xfVdGGeQC0Y0MGcjqOL1Gv7A56.K bdonO6dW62c.062Jze_Z9_pz0udEcuK7j0cH3krW1OjHO4lZMul3OykAiwtx BLHu2ODq8Uxd7VM4QgA7FosHcGgQfjj7ry16R69tDXmqRZrtsblMjmzqdEUd DUiSuOwHecYc6gmSqas2_73a.xgnWLjv.a.fim.vl3isuFeKIc5Ox0xLPxET Ws6FE97eS3szu6TBfS6D4Q4uD28KQgpNTlkFqzXTRDtU4JvL2_IRz1FNscku Kk2AT2uo2NoBU6cczPioW7YTJQvzcYpOge0s8Yum4PZmxim58pvgtV8Uo87k m6.4En2GBwRU9GbGo8SX7LYt4CaLpZst17IkrfOwjBN9ALEVp0Ul6TOm78o7 ibwfTOv2n0Yb85mnRBiRVR9Z6iCjOJA-- X-Yahoo-SMTP: t6Nao3WswBCMyu6cKdFdPm2TpXE- Subject: Re: AW: repositories structure from user/access control viewpoint - how? To: "users@subversion.apache.org" References: <56E0036E.10108@yahoo.co.uk> <1AE3002F400CE4498072DFDF74A843CC1F4B18C9@DEFTHW99EH3MSX.ww902.siemens.net> From: lejeczek Message-ID: <56E08E53.7090709@yahoo.co.uk> Date: Wed, 9 Mar 2016 20:57:55 +0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: <1AE3002F400CE4498072DFDF74A843CC1F4B18C9@DEFTHW99EH3MSX.ww902.siemens.net> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit On 09/03/16 16:44, Niemann, Hartmut wrote: > Hi! > > I learned that finer-as-per-repository-grained read access is rather "expensive" in terms of server load > because rights have to be checked for each file updated. > So it would be best that you have separate repositories for separate "read" user groups. Hi, that is interesting concept but one that I don't quite get - you would have different locations/namespaces pointing to the same target? And these namespaces would define different type of access per whole groups? > > I have not heared about somebody who used separate HTTP servers for that, I doubt that it would help. I see I might have been a bit vague when said - service. What I meant was, would one use separate namespace, eg: DirectoryIndex disabled DAV svn ForceType text/plain SVNReposName ...... .... for each project if the reason was - this helps finer access control. Or it does not and one namespace for all locations/projects does the same? many thanks > > Our setup is a combined redmine/svn server, where global read/write rights (per repo) > are managed by redmine, and where necessary (in my area with about 50 projects this is exactly one > project with a sort of paranoid leader) we use a precommit hook to restrict > commit rights to individual subdirectories, which works quite well. > > Mit freundlichen Grüßen > Dr. Hartmut Niemann > > Siemens AG > MO MLT LM EN CCI 1 >