Re: [viewvc-dev] svnauthz using svn bindings
Phil Richardson <[email protected]> Fri, 18 Dec 2015 15:34:33 +0000
| Newsgroups | gmane.comp.version-control.cvs.viewcvs.devel |
|---|---|
| Message-ID | <CALyekZGuFRpjdj+Gjg6N-nDjf1WzyV4swGD1Dk0UgU9q4NXibQ__16618.2653549642$1451917108$gmane$org@mail.gmail.com> |
------=_Part_4957_1242452454.1451917091541 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit I am currently working with the experimental support for glob expressions in authz. https://wiki.apache.org/subversion/AuthzImprovements https://svn.apache.org/repos/asf/subversion/branches/authzperf/BRANCH-README Which naturally the outcome presented with mod_authz_svn is the outcome we will see in the bindings too. On 18 December 2015 at 14:52, C. Michael Pilato <[email protected]> wrote: > The Subversion bindings aren't used in the ViewVC svnauthz authorizer > because that authorizer can be applied both to CVS repositories as well as > to remote Subversion repositories (those configured with URL rootpaths). I > wouldn't be opposed, however, to introducing another authorizer which is > built around the Subversion APIs and is only applicable to locally > accessible Subversion repositories. > > Out of curiosity, though, what is it about the current authorizer that's > insufficient for your needs? > > -- Mike > > On Mon, Dec 14, 2015 at 11:36 AM, Phil Richardson <[email protected] > > wrote: > >> I am currently using experimental features from future subversion >> releases. These specifically impact my ability to use the svnauthz >> authorizer. >> >> One thing that cropped up that I could not locate a prior post regarding. >> >> Is there a reason why the svn bindings are not used to perform the authz >> logic? >> >> Attached is a replacement which I used under the module svnauthzbindings >> >> This essentially proxies through what svn itself implements. The >> exception being I can only 1 in return check_root_access, otherwise access >> is denied (other path checking takes care of real access rules though). >> >> I'm also exploring the missing "authz in repositiory" as well, but it's >> not a problem for what I am doing right now. >> > > ------------------------------------------------------ http://viewvc.tigris.org/ds/viewMessage.do?dsForumId=4251&dsMessageId=3151291 To unsubscribe from this discussion, e-mail: [[email protected]]. ------=_Part_4957_1242452454.1451917091541 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">I am currently working with the experimental support for g= lob expressions in authz.<div><br></div><div><a href=3D"https://wiki.apache= .org/subversion/AuthzImprovements">https://wiki.apache.org/subversion/Authz= Improvements</a><br></div><div><a href=3D"https://svn.apache.org/repos/asf/= subversion/branches/authzperf/BRANCH-README">https://svn.apache.org/repos/a= sf/subversion/branches/authzperf/BRANCH-README</a><br></div><div><br></div>= <div>Which naturally the outcome presented with mod_authz_svn is the outcom= e we will see in the bindings too.</div></div><div class=3D"gmail_extra"><b= r><div class=3D"gmail_quote">On 18 December 2015 at 14:52, C. Michael Pilat= o <span dir=3D"ltr"><<a href=3D"mailto:[email protected]" target=3D"_b= lank">[email protected]</a>></span> wrote:<br><blockquote class=3D"gma= il_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-lef= t:1ex"><div dir=3D"ltr">The Subversion bindings aren't used in the View= VC svnauthz authorizer because that authorizer can be applied both to CVS r= epositories as well as to remote Subversion repositories (those configured = with URL rootpaths).=C2=A0 I wouldn't be opposed, however, to introduci= ng another authorizer which is built around the Subversion APIs and is only= applicable to locally accessible Subversion repositories.<div><br></div><d= iv>Out of curiosity, though, what is it about the current authorizer that&#= 39;s insufficient for your needs?</div><div><br></div><div>-- Mike</div></d= iv><div class=3D"HOEnZb"><div class=3D"h5"><div class=3D"gmail_extra"><br><= div class=3D"gmail_quote">On Mon, Dec 14, 2015 at 11:36 AM, Phil Richardson= <span dir=3D"ltr"><<a href=3D"mailto:[email protected]" target=3D= "_blank">[email protected]</a>></span> wrote:<br><blockquote class= =3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd= ing-left:1ex"><div dir=3D"ltr">I am currently using experimental features f= rom future subversion releases. These specifically impact my ability to use= the svnauthz authorizer.<div><br></div><div>One thing that cropped up that= I could not locate a prior post regarding.</div><div><br></div><div>Is the= re a reason why the svn bindings are not used to perform the authz logic?</= div><div><br></div><div>Attached is a replacement which I used under the mo= dule svnauthzbindings</div><div><br></div><div>This essentially proxies thr= ough what svn itself implements. The exception being I can only 1 in return= =C2=A0check_root_access, otherwise access is denied (other path checking ta= kes care of real access rules though).</div><div><br></div><div>I'm als= o exploring the missing "authz in repositiory" as well, but it= 9;s not a problem for what I am doing right now.</div></div> </blockquote></div><br></div> </div></div></blockquote></div><br></div> ------=_Part_4957_1242452454.1451917091541--