[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [SAGE] Subversion, passwords and ACLs



If i remember correctly, ssh access cannot restrict properly access at
this level.

The Webdav module, however, allows for much more fine-grained control
over locations. It's what we use here and while we use an "htpasswd"
file to store credentials, it could be perfectly possible to use some
mod_pam apache module or something.

The following documentatio is in french, but it should give you some
guidelines:

http://wiki.koumbit.net/VersionControlService/SubVersion#head-configurer-subversion

Also see svnbook.org.

A.

On Fri, Jan 19, 2007 at 11:17:46AM -0500, Neil Watson wrote:
> Suppose I have a Subversion repository:
> 
> /trunk/
> /branches/dev
> /branches/qa
> 
> I want to be able to limit users to certain directories.  John should
> only be able to access branches/qa.  Jane should only be able to access
> branches/dev.
> 
> I can accomplish this using Subversion's authz-db files.  Using this
> method users contact a running Subversion daemon.  Their credentials are
> stored in a password-db file.  I do not like that this file is plain
> text.  I also do not like that this does not give the user's a chance to
> change their passwords.
> 
> Is there a way to control directory access inside a repository while
> still using UNIX shell accounts for logins?
> 
> -- 
> Neil Watson             | Debian Linux
> System Administrator    | Uptime 6 days
> http://watson-wilson.ca
> 

-- 

Digital signature