> Do you need to restrict READ access to the branch or tag, or do you
> simply want to restrict COMMIT access.

Thanks for the response.  We need both, but restricting read access is
the main concern at the moment.  So far, I only know of AuthUserFile
for controlling read access.

> If you just want to restrict commit access, you can use a pre-commit
> hook to kill a commit transaction if the user who doesn't have
> permission attempts to change a tag or branch.

Good to know.  I'll check into the script you've mentioned.  At the
moment, we've removed read access to /tags for most users.  But this
is not a good long term solution.

> By the way, there's also a way to configure Apache httpd to use LDAP
> instead of a regular text file. This means that users will have access
> to your Subversion repository based upon their Windows or Unix account
> and that users will automatically get logins and have their access
> removed when they get hired or move on.

That's something we'll definitely consider.  We have some other quirks
with account management to sort out first :)

Best,
Shaun


Reply via email to