Re: [viewvc-dev] svnauthz using svn bindings

Phil Richardson <[email protected]> Fri, 18 Dec 2015 15:34:33 +0000
Newsgroups gmane.comp.version-control.cvs.viewcvs.devel
Message-ID <CALyekZGuFRpjdj+Gjg6N-nDjf1WzyV4swGD1Dk0UgU9q4NXibQ__16618.2653549642$1451917108$gmane$org@mail.gmail.com>
------=_Part_4957_1242452454.1451917091541
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

I am currently working with the experimental support for glob expressions
in authz.

https://wiki.apache.org/subversion/AuthzImprovements
https://svn.apache.org/repos/asf/subversion/branches/authzperf/BRANCH-README

Which naturally the outcome presented with mod_authz_svn is the outcome we
will see in the bindings too.

On 18 December 2015 at 14:52, C. Michael Pilato <[email protected]> wrote:

> The Subversion bindings aren't used in the ViewVC svnauthz authorizer
> because that authorizer can be applied both to CVS repositories as well as
> to remote Subversion repositories (those configured with URL rootpaths).  I
> wouldn't be opposed, however, to introducing another authorizer which is
> built around the Subversion APIs and is only applicable to locally
> accessible Subversion repositories.
>
> Out of curiosity, though, what is it about the current authorizer that's
> insufficient for your needs?
>
> -- Mike
>
> On Mon, Dec 14, 2015 at 11:36 AM, Phil Richardson <[email protected]
> > wrote:
>
>> I am currently using experimental features from future subversion
>> releases. These specifically impact my ability to use the svnauthz
>> authorizer.
>>
>> One thing that cropped up that I could not locate a prior post regarding.
>>
>> Is there a reason why the svn bindings are not used to perform the authz
>> logic?
>>
>> Attached is a replacement which I used under the module svnauthzbindings
>>
>> This essentially proxies through what svn itself implements. The
>> exception being I can only 1 in return check_root_access, otherwise access
>> is denied (other path checking takes care of real access rules though).
>>
>> I'm also exploring the missing "authz in repositiory" as well, but it's
>> not a problem for what I am doing right now.
>>
>
>

------------------------------------------------------
http://viewvc.tigris.org/ds/viewMessage.do?dsForumId=4251&dsMessageId=3151291

To unsubscribe from this discussion, e-mail: [[email protected]].
------=_Part_4957_1242452454.1451917091541
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">I am currently working with the experimental support for g=
lob expressions in authz.<div><br></div><div><a href=3D"https://wiki.apache=
.org/subversion/AuthzImprovements">https://wiki.apache.org/subversion/Authz=
Improvements</a><br></div><div><a href=3D"https://svn.apache.org/repos/asf/=
subversion/branches/authzperf/BRANCH-README">https://svn.apache.org/repos/a=
sf/subversion/branches/authzperf/BRANCH-README</a><br></div><div><br></div>=
<div>Which naturally the outcome presented with mod_authz_svn is the outcom=
e we will see in the bindings too.</div></div><div class=3D"gmail_extra"><b=
r><div class=3D"gmail_quote">On 18 December 2015 at 14:52, C. Michael Pilat=
o <span dir=3D"ltr">&lt;<a href=3D"mailto:[email protected]" target=3D"_b=
lank">[email protected]</a>&gt;</span> wrote:<br><blockquote class=3D"gma=
il_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-lef=
t:1ex"><div dir=3D"ltr">The Subversion bindings aren&#39;t used in the View=
VC svnauthz authorizer because that authorizer can be applied both to CVS r=
epositories as well as to remote Subversion repositories (those configured =
with URL rootpaths).=C2=A0 I wouldn&#39;t be opposed, however, to introduci=
ng another authorizer which is built around the Subversion APIs and is only=
 applicable to locally accessible Subversion repositories.<div><br></div><d=
iv>Out of curiosity, though, what is it about the current authorizer that&#=
39;s insufficient for your needs?</div><div><br></div><div>-- Mike</div></d=
iv><div class=3D"HOEnZb"><div class=3D"h5"><div class=3D"gmail_extra"><br><=
div class=3D"gmail_quote">On Mon, Dec 14, 2015 at 11:36 AM, Phil Richardson=
 <span dir=3D"ltr">&lt;<a href=3D"mailto:[email protected]" target=3D=
"_blank">[email protected]</a>&gt;</span> wrote:<br><blockquote class=
=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd=
ing-left:1ex"><div dir=3D"ltr">I am currently using experimental features f=
rom future subversion releases. These specifically impact my ability to use=
 the svnauthz authorizer.<div><br></div><div>One thing that cropped up that=
 I could not locate a prior post regarding.</div><div><br></div><div>Is the=
re a reason why the svn bindings are not used to perform the authz logic?</=
div><div><br></div><div>Attached is a replacement which I used under the mo=
dule svnauthzbindings</div><div><br></div><div>This essentially proxies thr=
ough what svn itself implements. The exception being I can only 1 in return=
=C2=A0check_root_access, otherwise access is denied (other path checking ta=
kes care of real access rules though).</div><div><br></div><div>I&#39;m als=
o exploring the missing &quot;authz in repositiory&quot; as well, but it&#3=
9;s not a problem for what I am doing right now.</div></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div>

------=_Part_4957_1242452454.1451917091541--