Re: [viewvc-dev] Success and a problem with svnauthz module.

Martijn, I am aware of this shortcoming in the current authz implementation,
but if you add a comment to issue 268, it will serve as a great reminder.

In the meantime, you could simply empty the roots view and remove the
drop-down root selection box from the templates.  That won't let folks see
the repositories they have access to, but also won't let them see what they
*don't* have access to.

Martijn Ras wrote:
> Heya Folks,
> 
> I just successfully installed ViewVC from the latest trunk on a
> standalone machine with a copy of all our subversion repositories to
> test setting up ViewVC with the svnauthz module for them.
> 
> All our subversion repositories reside under a single root, which i
> pointed 'root_parents' to, I also set the 'authorizer' to "svnauthz".
> This works fine, but there's a catch.
> 
> I'm in an environment that requires very strict security. So the
> current method of populating the 'Repository Listing' is insufficient.
> Since it simply lists all repositories it finds under the root,
> without checking whether the user has access. Some of our projects are
> need-to-know and should not be listed. Other projects may be listed
> whether or not they require authentication or are open to all.
> 
> So I'd like to change the way ViewVC build its Repository Listing, so
> it shows a list of repositories available to the user.
> 
> Given the following set of repositories and visibilities:
> 
>   Repository Visibility
>   1          ALL
>   2          Users: A, B
>   3          Users: B, C
>   4          ALL
>   5          Users: B
> 
> ViewVC should produce the following Repository Listings:
> 
>   Anonymous A B C
>       1     1 1 1
>       4     2 2 3
>             4 3 4
>               4
>               5
> 
> Is anybody working on something like this?
> Should I add this to issue #268
> (http://viewvc.tigris.org/issues/show_bug.cgi?id=268), or should I
> open a new issue for this?
> 
> Mazzel,
> 
> Martijn.
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
> 


-- 
C. Michael Pilato <[email protected]>
CollabNet   <>   www.collab.net   <>   Distributed Development On Demand

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFG+5YqokEGqRcG/W4RAmQQAKCaZwX2lJpxQugWFc/f8vF0REuf2wCfXas0
EWHQKhoqaSQNIfkT3fx2N8E=
=/meE
-----END PGP SIGNATURE-----