> -----Original Message-----
> From: Shaun Martin [mailto:smar...@akazaresearch.com] 
> Sent: 09 November 2010 18:33
> Subject: SVN mixed public\restricted access, please help!
> 
> Hi All, 
> 
> Ok I am trying to achieve a repository that at its base level 
> everyone has read-only access without a username. But then at 
> subsequent levels I would like to remove their access so they 
> have none. I thought this could be accomplished with 1.6 with 
> the addition of "~" and "$anonymous" but I have yet been able 
> to get a working configuration. 
> 
> First off I tried setting up my apache just like this for my repo. 
>    Code: 
>   <Location /repos> 
>   DAV svn 
>   SVNParentPath /var/svn 
> 
>   # our access control policy 
>   AuthzSVNAccessFile /path/to/access/file 
> 
>   # try anonymous access first, resort to real 
>   # authentication if necessary. 
>   Satisfy Any 
>   Require valid-user 

My understanding of apache is that this gets passed first.. So I suspect
that your problem is that everyone is being accepted as an anonymous
user ~ have you ever been challenged for username/password during your
testing?

~ mark c

>   # how to authenticate a user 
>   AuthType Basic 
>   AuthName "Subversion repository" 
>   AuthUserFile /path/to/users/file 
> </Location> 
> 
> with this in my SVNAccessFile 
> 
>    Code: 
>   [openclinica:/subdir] 
> @clients = rw 
> @svn-admin = rw 
> 
> [/] 
> @svn-admin = rw 
> 
> I could not achieve a non authenticated user to gain access 
> unless i added either "* = r" or "$anonymous = r" to the [/] 
> in the access file. so now my file looks like this. 
> 
>    Code: 
>   [openclinica:/subdir] 
> @clients = rw 
> @svn-admin = rw 
> 
> [/] 
> @svn-admin = rw 
> $anonymous = r 
> 
> Now I try to remove access to my subdir for the anonymous 
> users by adding "~$anonymous = r" so my file now looks like this. 
> 
>    Code: 
>   [openclinica:/subdir] 
> @clients = rw 
> @svn-admin = rw 
> ~$anonymous = r 
> 
> [/] 
> @svn-admin = rw 
> $anonymous = r 
> 
> which apparently does nothing as anonymous users can still 
> access my subdir and it does not force anyone to login. 
> 
> So then I tried the following. 
> 
>    Code: 
>   [openclinica:/subdir] 
> @clients = rw 
> @svn-admin = rw 
> $anonymous = 
> 
> [/] 
> @svn-admin = rw 
> $anonymous = r 
> 
> Which did not allow anonymous users to access my subdir, 
> unfortunately it does not allow my authenticated users to 
> access the subdir either. 
> 
> I have tried all these configuration with the "Satisfy Any" 
> in apache enabled and disabled. Please help!! 
> 
> This was posted on svnforum.org 
> http://www.svnforum.org/2017/viewtopic.php?p=32748#32748
> 
> Thanks, 
> Shaun
> --  
> Shaun Martin
> Systems Administrator
> Akaza Research
> smar...@akazaresearch.com
> Office: (781) 547-8413
> www.akazaresearch.com <http://www.akazaresearch.com/> 
> www.openclinica.org <http://www.openclinica.org/> 
> Open Source Platform for Clinical Research
> 
> 
> 

Reply via email to