Trying (failing) to limit access to one user

2011-04-26 Thread Alan M. Evans
Sorry for what must be a simple question; I've googled around and read/followed all the examples and docs I can find. There is apparently something fundamental that I'm misunderstanding. Server is running CentOS 5, Subversion 1.6.15, Apache 2.2.3. We have a company-wide repository that all develo

Re: Trying (failing) to limit access to one user

2011-04-26 Thread kmradke
"Alan M. Evans" wrote on 04/26/2011 04:26:27 PM: > Sorry for what must be a simple question; I've googled around and > read/followed all the examples and docs I can find. There is apparently > something fundamental that I'm misunderstanding. > > Server is running CentOS 5, Subversion 1.6.15, Apac

Re: Trying (failing) to limit access to one user

2011-04-26 Thread Alan M. Evans
On Tue, 2011-04-26 at 16:45 -0500, kmra...@rockwellcollins.com wrote: > I've found using "*" to be non intuitive. Try: > > [/] > $authenticated=rw > jon= Thanks for the reply! Unfortunately, jon still has full access... -Alan

Re: Trying (failing) to limit access to one user

2011-04-26 Thread kmradke
"Alan M. Evans" wrote on 04/26/2011 04:54:37 PM: > > > I've found using "*" to be non intuitive. Try: > > > > [/] > > $authenticated=rw > > jon= > > Thanks for the reply! Unfortunately, jon still has full access... Does order matter? I think the first match wins: [/] jon= $authenticat

Re: Trying (failing) to limit access to one user

2011-04-26 Thread Alan M. Evans
On Tue, 2011-04-26 at 17:18 -0500, kmra...@rockwellcollins.com wrote: > "Alan M. Evans" wrote on 04/26/2011 04:54:37 PM: > > > > > I've found using "*" to be non intuitive. Try: > > > > > > [/] > > > $authenticated=rw > > > jon= > > > > Thanks for the reply! Unfortunately, jon still has ful

Re: Trying (failing) to limit access to one user

2011-04-26 Thread David Brodbeck
On Tue, Apr 26, 2011 at 3:23 PM, Alan M. Evans wrote: > On Tue, 2011-04-26 at 17:18 -0500, kmra...@rockwellcollins.com wrote: > > "Alan M. Evans" wrote on 04/26/2011 04:54:37 PM: > > > > > > > I've found using "*" to be non intuitive. Try: > > > > > > > > [/] > > > > $authenticated=rw > > > > jo

Re: Trying (failing) to limit access to one user

2011-04-26 Thread kmradke
David Brodbeck wrote on 04/26/2011 06:07:13 PM: > On Tue, Apr 26, 2011 at 3:23 PM, Alan M. Evans wrote: > On Tue, 2011-04-26 at 17:18 -0500, kmra...@rockwellcollins.com wrote: > > "Alan M. Evans" wrote on 04/26/2011 04:54:37 PM: > > > > > > > I've found using "*" to be non intuitive. Try: > > >

RE: Trying (failing) to limit access to one user

2011-04-27 Thread Bob Archer
> On Tue, 2011-04-26 at 16:45 -0500, kmra...@rockwellcollins.com > wrote: > > > I've found using "*" to be non intuitive. Try: > > > > [/] > > $authenticated=rw > > jon= > > Thanks for the reply! Unfortunately, jon still has full access... > > -Alan Are you sure he has "full" access? Path base

RE: Trying (failing) to limit access to one user

2011-04-27 Thread Bob Archer
> > On Tue, 2011-04-26 at 16:45 -0500, kmra...@rockwellcollins.com > > wrote: > > > > > I've found using "*" to be non intuitive. Try: > > > > > > [/] > > > $authenticated=rw > > > jon= > > > > Thanks for the reply! Unfortunately, jon still has full access... > > > > -Alan > > Are you sure he has

Re: Trying (failing) to limit access to one user

2011-04-27 Thread Alan M. Evans
On Tue, 2011-04-26 at 16:07 -0700, David Brodbeck wrote: > So the short answer is there's probably no way to do what you want > except by creating a group with everyone but jon in it. But I tried this already: [groups] ourcompany = alan,james,craig,tony,keith,ken [/] @ourcompany = r

Re: Trying (failing) to limit access to one user

2011-04-27 Thread David Brodbeck
On Wed, Apr 27, 2011 at 8:51 AM, Alan M. Evans wrote: > On Tue, 2011-04-26 at 16:07 -0700, David Brodbeck wrote: > > > So the short answer is there's probably no way to do what you want > > except by creating a group with everyone but jon in it. > > But I tried this already: > > [groups] > ou

Re: Trying (failing) to limit access to one user

2011-04-27 Thread Daniel Shahaf
Alan M. Evans wrote on Wed, Apr 27, 2011 at 08:51:03 -0700: > On Tue, 2011-04-26 at 16:07 -0700, David Brodbeck wrote: > > > So the short answer is there's probably no way to do what you want > > except by creating a group with everyone but jon in it. > I haven't read the thread, but this caught

Re: Trying (failing) to limit access to one user

2011-04-27 Thread Daniel Shahaf
Daniel Shahaf wrote on Wed, Apr 27, 2011 at 21:03:25 +0300: > Alan M. Evans wrote on Wed, Apr 27, 2011 at 08:51:03 -0700: > > On Tue, 2011-04-26 at 16:07 -0700, David Brodbeck wrote: > > > > > So the short answer is there's probably no way to do what you want > > > except by creating a group with

Re: Trying (failing) to limit access to one user

2011-04-27 Thread Alan M. Evans
On Wed, 2011-04-27 at 10:29 -0700, David Brodbeck wrote: > > > That's very peculiar. What do you have set in svnserve.conf? > > I'm using Apache, not svnserve, as I mentioned in my OP. FWIW, the apache conf file for this repository looks like: DAV svn SVNPath /srv/svn/re

Re: Trying (failing) to limit access to one user

2011-04-27 Thread Alan M. Evans
On Wed, 2011-04-27 at 21:07 +0300, Daniel Shahaf wrote: > Perhaps > > [/] > ~jon = rw Nope. jon still able to check out the entire repository tree. So far, it seems that the only rules that make any difference are "* =" and "$authenticated =". These give everybody access. Without one of these p

Re: Trying (failing) to limit access to one user

2011-04-27 Thread Daniel Shahaf
Alan M. Evans wrote on Wed, Apr 27, 2011 at 11:20:15 -0700: > On Wed, 2011-04-27 at 21:07 +0300, Daniel Shahaf wrote: > > > Perhaps > > > > [/] > > ~jon = rw > > Nope. jon still able to check out the entire repository tree. > Works for me with svnserve. You may need an explicit 'jon = ' entry

RE: Trying (failing) to limit access to one user

2011-04-28 Thread Bob Archer
> > Perhaps > > > > [/] > > ~jon = rw > > Nope. jon still able to check out the entire repository tree. > > So far, it seems that the only rules that make any difference are > "* =" > and "$authenticated =". These give everybody access. Without one of > these present, nobody has access. And now I

RE: Trying (failing) to limit access to one user

2011-05-10 Thread Engebakken Geir
ra...@rockwellcollins.com; David > Brodbeck > Subject: RE: Trying (failing) to limit access to one user > > > > Perhaps > > > > > > [/] > > > ~jon = rw > > > > Nope. jon still able to check out the entire repository tree. > > > > So fa