Re: [viewvc-users] problem with authentication.

Mark,

Generally speaking, ViewVC takes the same serious view of security that
Subversion itself does, binding "read" and "list" access to the same
permission.  If you can't read it, you can't see it.  Also, the
permissioning is all path-based.  You can't say that someone has/doesn't
have access to "a repository" -- only to specific trees within it (of which
"the root directory and everything below it" is one such tree).

Now, that said, I believe ViewVC diffs from Subversion in one key way.
ViewVC will display the repository in the root listing if the user has read
access to *any* path therein.  And the path needn't even exist.  So give
this a shot in your authz file:

   [private-repos:/__SOME_BOGUS_PATH__]
   * = r

That junk in all-caps?  Put it in there literally (unless, of course, you
really have something in your repository named __SOME_BOGUS_PATH__ that you
need to keep private).


On 11/12/2011 02:15 PM, Mark Manning wrote:
> Tried to use websvn to view my repositories and had an issue with it,
> was suggested by someone that I try viewvc.  Having exactly the same
> issue with viewvc as I had with websvn.
> 
> In a nutshell...
> 
> I have two repositories.  One of them is private and only I have read
> or write access to it.  My second repository is open to the entire
> world and is readable by everyone.  I have set up my subversion policy
> and have configured viewvc to use it and it is not working the way I'm
> expecting it should.
> 
> Because of the policy file, when I view my parentpath repository root
> the only thing that shows up in viewvc is the one that is configured
> as * = r.  This means that there is no way for me to view my private
> repository using viewvc.
> 
> What I expected to be able to do was to be able to see all
> repositories within the parent path and when I tried to access one
> that has restrictions that websvn/viewvc would require that I log in
> to see the contents thereof.   Thus far I have not been able to figure
> out how to do this or if it is even possible.
> 
> When I asked the developer of websvn how I could do this his cop-out
> answer was to use the totally insecure and slow .htaccess method.  I
> uninstalled websvn.
> 
> I seriously hope that this is doable within viewvc :/
> 
> If it is not possible to show all repositories in the view root and
> for viewvc to require credentials on a view attempt then I think this
> should be considered for addition.
> 
> ------------------------------------------------------
> http://viewvc.tigris.org/ds/viewMessage.do?dsForumId=4255&dsMessageId=2877579
> 
> To unsubscribe from this discussion, e-mail: [[email protected]].


-- 
C. Michael Pilato <[email protected]>
CollabNet   <>   www.collab.net   <>   Distributed Development On Demand

------------------------------------------------------
http://viewvc.tigris.org/ds/viewMessage.do?dsForumId=4255&dsMessageId=2878005

To unsubscribe from this discussion, e-mail: [[email protected]].

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAk7BMVQACgkQokEGqRcG/W7IQACcCuoP+ezjsUxmp5PjdlD5DUKq
WWYAoLaizTGSJ685xOjW0iChhRJfhBl7
=c7ve
-----END PGP SIGNATURE-----