Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: Trac: Users

Browse source vs svn_authz

 

 

Trac users RSS feed   Index | Next | Previous | View Threaded


fonsken at gmail

Oct 1, 2009, 4:27 AM

Post #1 of 3 (351 views)
Permalink
Browse source vs svn_authz

Hello,

I've set the authz_file parameter in my trac.ini, and everything works as
expected.

The only issue I have, is the following: some of my users are only allowed
to see a part of my repository, so they only have read/write rights on a
certain directory (let's say /trunk/public) in the trunk directory. They
have no rights to view the root, neither the trunk itself.
As a result, they're getting a "Insufficient permissions to access /" error
when trying to browse the source.
Is there a possibility to let them browse the /trunk/public directory? I
don't see a way to do this now, except for giving read rights to / and
disable rights for any other directory in it... Is there any other more
elegant solution? Maybe via a plugin?

Probably linked to this: they can't view a changeset they created
themselves. Same error, however they have the right to see each file in the
changeset.

Thanks,

Joeri

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Trac Users" group.
To post to this group, send email to trac-users [at] googlegroups
To unsubscribe from this group, send email to trac-users+unsubscribe [at] googlegroups
For more options, visit this group at http://groups.google.com/group/trac-users?hl=en
-~----------~----~----~----~------~----~------~--~---


gdt at ir

Oct 5, 2009, 10:48 AM

Post #2 of 3 (324 views)
Permalink
Re: Browse source vs svn_authz [In reply to]

Joeri De Backer <fonsken [at] gmail> writes:

> I've set the authz_file parameter in my trac.ini, and everything works as
> expected.
>
> The only issue I have, is the following: some of my users are only allowed
> to see a part of my repository, so they only have read/write rights on a
> certain directory (let's say /trunk/public) in the trunk directory. They
> have no rights to view the root, neither the trunk itself.
> As a result, they're getting a "Insufficient permissions to access /" error
> when trying to browse the source.
> Is there a possibility to let them browse the /trunk/public directory? I
> don't see a way to do this now, except for giving read rights to / and
> disable rights for any other directory in it... Is there any other more
> elegant solution? Maybe via a plugin?

What you are asking for is a way to let people see / when they aren't
allowed to see /....

Does the direct URL to partly down in the tree work? If not, that's arguably a bug.

In my setups, / is world-readable, and each module is ACLd separately.


fonsken at gmail

Oct 6, 2009, 12:09 AM

Post #3 of 3 (319 views)
Permalink
Re: Browse source vs svn_authz [In reply to]

On Mon, Oct 5, 2009 at 7:48 PM, Greg Troxel <gdt [at] ir> wrote:

>
> Joeri De Backer <fonsken [at] gmail> writes:
>
> > I've set the authz_file parameter in my trac.ini, and everything works as
> > expected.
> >
> > The only issue I have, is the following: some of my users are only
> allowed
> > to see a part of my repository, so they only have read/write rights on a
> > certain directory (let's say /trunk/public) in the trunk directory. They
> > have no rights to view the root, neither the trunk itself.
> > As a result, they're getting a "Insufficient permissions to access /"
> error
> > when trying to browse the source.
> > Is there a possibility to let them browse the /trunk/public directory? I
> > don't see a way to do this now, except for giving read rights to / and
> > disable rights for any other directory in it... Is there any other more
> > elegant solution? Maybe via a plugin?
>
> What you are asking for is a way to let people see / when they aren't
> allowed to see /....
>
> Does the direct URL to partly down in the tree work? If not, that's
> arguably a bug.
>
> In my setups, / is world-readable, and each module is ACLd separately.
>

Hello,

I didn't try the complete url, but there seems no way to go to the complete
url via the http interace. Only changing the url in the address bar seems to
do it, but that's not really a user friendly way :-)

I also changed my setup: / is now readable for everyone, and I gave
permissions to each subdirectory. So: case closed (for me...)

Thanks,

Joeri

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Trac Users" group.
To post to this group, send email to trac-users [at] googlegroups
To unsubscribe from this group, send email to trac-users+unsubscribe [at] googlegroups
For more options, visit this group at http://groups.google.com/group/trac-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Trac users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.