Re: [viewvc-users] AuthzSVNAccessFile

Well, strictly speaking, it's not the case that "ViewVC 1.0.7 supports the
AuthzSVNAccessFile directive".  ViewVC is completely ignorant of your Apache
authentication and authorization configuration -- it's handed an
authenticated username by Apache, but that's it.

That directive tells Apache to try to use Subversion's mod_authz_svn module
for path-based authorization.  This happens to work out okay for you because
ViewVC tries to preserve the directory heirarchy of the version control
system in its URL space.  (So ".../viewvc/trunk/foo/bar" maps to the
"/trunk/foo/bar" item in the repository.)  Where you run into trouble are
the places where ViewVC doesn't preserve that path scheme -- the *docroot*
area, the *checkout* and *viewroots* magic URLs, multiple repositories (if
you have root_as_url_component=0), etc.

My suggestion to use ViewVC 1.1.x the way it's designed to be used is still
a better long-term route, but hey, I also understand "if it ain't broke,
don't fix it".  :-)


On 10/27/2010 02:00 PM, Adrian Marsh wrote:
> Hi Michael,
> 
> Many thanks for the reply.
> 
> I'm not trying to overlap the URLs.. its a seperate one for SVN (/svn)
> and another for ViewVC (/viewvc). I've only shown the viewvc in my
> original post but there are two of them. Both do need to adhere to the
> permissions list.
> 
> I seem to of gotten it working however.  1.0.7 does seem to support the
> AuthzSVNAccessFile directive.  Though I had to add the below entries to
> svn1_directives.conf to get it to allow the images etc to show. I do
> think thats a bit of a hack, but I'm following the Collabnet releases for
> my version of SVN.  When I upgrade that then ViewVC gets upgraded too and
> maybe that goes away.
> 
> I've tested by adding and removing users ACLs in the svn1_directives.conf
> file, and that does seem to also add/remove them from accessing the same
> repositories in ViewVC as in SVN.
> 
> 
> [*docroot*:/images] * = r
> 
> [*docroot*:/styles.css] * = r
> 
> [branches:/] * = r
> 
> 
> The only thing that seems broken now is the "repository" list in the top
> right. But I can live with that.
> 
> ------------------------------------------------------ 
> http://viewvc.tigris.org/ds/viewMessage.do?dsForumId=4255&dsMessageId=2676215
>
>  To unsubscribe from this discussion, e-mail:
> [[email protected]].


-- 
C. Michael Pilato <[email protected]>
CollabNet   <>   www.collab.net   <>   Distributed Development On Demand

------------------------------------------------------
http://viewvc.tigris.org/ds/viewMessage.do?dsForumId=4255&dsMessageId=2676219

To unsubscribe from this discussion, e-mail: [[email protected]].

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkzIbOAACgkQokEGqRcG/W7bQACfZFXVxMkrCbe3qSzxfP6Ib4Fg
bMEAoLX7JyCNNQMWNj9/OXBh7ixbG7Lh
=dV0t
-----END PGP SIGNATURE-----