We have set up pah-based access like this, and it works fine : [java:/business/archive] @archive_r=r @archive=rw ~archive =
Members of archive_r have readonly access Members of archive have read/write access Not-Members of archive have no access Geir Note : All inquiries regarding Subversion, MKS and general Development servers should be directed to "EDB SourceControl System" > -----Original Message----- > From: Bob Archer [mailto:bob.arc...@amsi.com] > Sent: 28. april 2011 15:23 > To: Alan M. Evans; Daniel Shahaf > Cc: users@subversion.apache.org; kmra...@rockwellcollins.com; David > Brodbeck > Subject: RE: Trying (failing) to limit access to one user > > > > Perhaps > > > > > > [/] > > > ~jon = rw > > > > Nope. jon still able to check out the entire repository tree. > > > > So far, it seems that the only rules that make any difference are > > "* =" > > and "$authenticated =". These give everybody access. Without one of > > these present, nobody has access. And now I can add "~anyname =" to > > that > > list. > > > > Using "anyname =" doesn't seem to have any effect at all on access. > > It > > certainly doesn't grant any access to anyname. > > > > This is why I mentioned in my OP that I thought this might be me > > misunderstanding the meaning of "anonymous access" in this context. > > What authentication method are you using? I'm guessing while *= works > but "jon=" (or other user names) doesn't that isn't the full user name > that svn sees. If you look at your log are the usernames the ones you > are expecting and putting into the authz file? > > BOb