Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have the following access control file

[groups]
admin = robu, jjtl, dat
user  = ulo
[/]
@admin = rw
@user  = rw

[/wlp]
@admin = rw

[/wesys]
@admin = rw
@user  = rw

But the user group still can browse the wlp, how can I remove the access? It is working if a take out from the root([/]) but I don't want to do that because we are using trac for repository browsing.

share|improve this question
1  
Which SVN layout you are using: single repository for multiple projects or each project have its own repository? –  quanta Aug 15 '11 at 11:16
add comment

2 Answers

up vote 1 down vote accepted

Try this:

[/wlp]
@admin = rw
@user = 

With subversion permissions, a user will inherit the permissions form the parent folder unless there's an explicit match that alters those permissions further down the directory tree. So in your case, ulo inherits read access to /wlp from the the root folder, since he's a member of user and [/] is the closest match to the path where permissions for that group are defined.

By explicitly defining @user = under [/wlp] you're giving svn a closer match to the requested path which specifically states 'no access'.

share|improve this answer
add comment

how if ?

 [groups]
 admin = robu, jjtl, dat
 user  = ulo

 [/]
 @admin = rw
 *=r
share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.