Home / server / Questions / 301170
Accepted
Mokus
Asked: 2011-08-16 02:51:10 +0800 CST

Problem with SVN access control

  • 772

I have the following access control file

[groups]
admin = robu, jjtl, dat
user  = ulo
[/]
@admin = rw
@user  = rw

[/wlp]
@admin = rw

[/wesys]
@admin = rw
@user  = rw

But the user group still can browse the wlp, how can I remove the access? It is working if a take out from the root([/]) but I don't want to do that because we are using trac for repository browsing.

apache-2.2 svn

2 Answers

  1. how if ?

     [groups]
 admin = robu, jjtl, dat
 user  = ulo

 [/]
 @admin = rw
 *=r
    • 1
  2. Best Answer

    Try this:

    [/wlp]
@admin = rw
@user =

    With subversion permissions, a user will inherit the permissions form the parent folder unless there's an explicit match that alters those permissions further down the directory tree. So in your case, ulo inherits read access to /wlp from the the root folder, since he's a member of user and [/] is the closest match to the path where permissions for that group are defined.

    By explicitly defining @user = under [/wlp] you're giving svn a closer match to the requested path which specifically states 'no access'.

    • 1