Re: [viewvc-users] viewvc + path-based authorization

Julian wrote:
> Hi - trying to get the above working on viewvc 1.1.0 but am having
> trouble seeing where to configure this, can someone help?
> 
> I already have access to our svn repos restricted by AuthzSVNAccessFile
> and basic Apache authentication which works fine - so only given users
> can get to viewvc in a browser and then only given users have full r/w
> access to parts of repos.
> 
> However I would also like to restrict access to the viewvc document root
> in a browser - it mentions here http://viewvc.org/faq.html#authz-support
> that it's possible - but how / where do I configure this?

To use Subversion authz authorization with ViewVC, you'll need to perform
two steps.

First, configure Apache to demand usernames of your ViewVC visitors.  For
consistency and simplicity, you'll probably want to use the same
authentication rules that you use to force authenticated access to
Subversion, just applied to the ViewVC Location:

   <Location /viewvc/url>
      Require valid-user
      ...
   </Location>

Then, configure ViewVC to apply your authz rules to the users that visit the
site:

  Set the value of the "authorizer" option in viewvc.conf to "svnauthz":

     authorizer = svnauthz

  Then, down in the [authz-svnauthz] section, you need to tell ViewVC
  where to find the authorization rules it should use:

     [authz-svnauthz]
     authzfile = /path/to/svn/authz.conf

As long as your repository (or root) names and usernames match between
Subversion and ViewVC, this should work for you.

-- 
C. Michael Pilato <[email protected]>
CollabNet   <>   www.collab.net   <>   Distributed Development On Demand

------------------------------------------------------
http://viewvc.tigris.org/ds/viewMessage.do?dsForumId=4255&dsMessageId=2314885

To unsubscribe from this discussion, e-mail: [[email protected]].

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkoS2s8ACgkQokEGqRcG/W5cbACgrhcuGMVLV/F7dn0StBWf1hZq
jn8An0lQArMjGv+BjXq54ZwuqCSQpmaa
=WhqN
-----END PGP SIGNATURE-----