Re: [viewvc-users] .htaccess

> [email protected] wrote:
>> Hi
>> We are running viewvcs 0.9.2 on apache and I'm trying to limit access to
>> specific directories via .htaccess files.  Can this work?  I have
>> verified
>> a none cvs directory with .htaccess and it works, so I am pretty
>> confident
>> in the base setup.  But, it allows access to all and doesn't prompt for
>> a
>> password when I go through viewcvs.  Any ideas?
>
> ViewCVS won't honor .htaccess file scattered across a CVS repository.
> .htaccess files are for Apache's directory traversal needs, and ViewVC (as
> it's now called) virtualizes all that directory stuff via its version
> control libraries.
>
> ViewCVS 0.9.2 is *ancient* (8+ years ago) by software standards.  I'd
> suggest upgrading to something much, much newer (like, say, the latest
> release).  You still won't find support for .htaccess restrictions of
> individual directories, but ViewVC 1.1 adds support for configurable
> path-based authorization via other mechanism (some built-in, but with the
> option for a Python programmer to write their own if required).
>
> --
> C. Michael Pilato <[email protected]>
> CollabNet   <>   www.collab.net   <>   Distributed Development On Demand
>
>
I see.  My confusion stems from your FAQ Answer to Question:
"Does ViewVC support path-based authorization, such as Subversion's
authz-file mechanism?"
Where you say:
"If you prefer to use only final releases, there are some available
workarounds. For example, if you are running ViewVC under Apache, you can
use regular Apache configuration directives to authz-protect areas of your
repository — see the Location and LocationMatch directives, as well as the
Authentication, Authorization and Access Control portions of the Apache
HTTP Server documentation."
and provide a link [http://httpd.apache.org/docs/2.2/howto/auth.html]
directly to a page that describes how to set up .htaccess.

I'm not an expert in apache mods, but from your answer it appears to me
the statement "you can use regular Apache configuration directives to
authz-protect areas of your repository" is incorrect.  If my understanding
is wrong could you please elaborate?

Thanks,
Nate

------------------------------------------------------
http://viewvc.tigris.org/ds/viewMessage.do?dsForumId=4255&dsMessageId=2593434

To unsubscribe from this discussion, e-mail: [[email protected]].