[viewvc-dev] How to secure ViewVC access ?

 Hello,

I'm setting up ViewVC for many Subversion repositories (Debian Etch
server, ViewVC 1.0.4). My Subversion server setup is https on Apache2,
with "Location" blocks to control access: mod_auth_kerb for SPNEGO and
Basic authentication and LDAP groups for permissions.

To be consistent, ViewVC browsing should follow the same access control
policy.

I have first thought to use also "Location" block to protect access to
each root but the current URL pattern does not suit my needs:
https://server.mydomain/cgi-bin/viewvc.cgi/path/in/repo/?root=repo

Another need in my case: prevent users to gain access to the repository
listing.

Is it possible to setup such access control with current version ?

For such a need - prevent full read access to everyone thanks to
"Location" - I propose to refactor URL to get "repo" in the URL path:
https://server.mydomain/cgi-bin/viewvc.cgi/repo/path/in/repo/

What do you think about this idea ?

Thank you to provide such a great tool.
-- 
Yves Martin

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]