Re: [viewvc-dev] ViewVC 1.1 enabling "default_file_view = co" seems to override svnauthz

Phil Pinkerton wrote:
> authorizer = svnauthz is set to use the svn.access file and this was
> working until ...
> 
> I changed "default_file_view = log"  to  "default_file_view = co" and
> "allowed_views = markup, annotate" to "allowed_views = markup,
> annotate, co"
> 
> Now anyone can view the repositories again as if svnauthz was not enabled ?

Hrm.  I don't see how changing the allowed and default values would matter. 
  The authz logic is triggered down in the depths of the version control 
abstraction library -- a level of logic that knows nothing of ViewVC's 
configuration, the requested view of the file, etc.

Further, I can't seem to demonstrate this problem on my own machine.  I 
typically run with allowed_views=markup,annotate,co,tar and
default_file_view=co, and my unprivileged users are denied access just as I 
would expect them to be.

-- 
C. Michael Pilato <[email protected]>
CollabNet   <>   www.collab.net   <>   Distributed Development On Demand

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFIiNjLokEGqRcG/W4RAh6rAJ92asNApNY7iC92dBlzUjjNIQUDbQCfR0+i
IPIfFsHZm5A+a2qPCpeBxDA=
=SIlz
-----END PGP SIGNATURE-----