SVN Restrict file access using wildcards

I took on the role of software in the project, and now I manage the SVN repository for the specified project. Access to various parts is controlled by the authz file. Groups were created for developers, leads, testers and cm management.

The file exists in several branches and tags, to which we want to restrict access. To block it, I do not want to read or write, except for a group of potential clients. Is there a way to do this without specifying each area of โ€‹โ€‹the branch / tag where it can be? I do not want anyone to find it in the old edition, if possible.

A copy of my authz file is here:

### Groups [groups] developers = user1, user2 leads = fearless_leader ############################################## ### Defaults for all repos in this directory ############################################## [/] *=r @developers = r @leads = rw ############################################## ### Project repository settings ############################################## [project_src:/] @developers = rw @leads = rw ############################################## ### myPrivateKey.pfx settings ############################################## [project_src:/project/branches/release1/deploy/licenses/myPrivateKey.pfx] @developers = @leads = rw 

I hope I can use wildcards to do something like the following (but this did not work):

 ############################################## ### myPrivateKey.pfx settings ############################################## [project_src:/project/branches/*/deploy/licenses/myPrivateKey.pfx] @developers = @leads = rw 

Thanks for any help.

+4
source share
2 answers

The authz Subversion file does not support wildcards. It is just that simple. Function does not exist.

You can restrict the use of wildcards with a pre-commit script hook, such as svnperms.py , but nothing to read.

+7
source

As @alroc already answered - Subversion-based authorization does not support wildcards in the authz file since version 1.8; I doubt that in the upcoming release of Subversion 1.9, substitution files in authz files will be implemented, but there is a chance that we will see them in one of the next releases.

There is a bugtracker # 2662 entry โ€œauthz with wildcardsโ€ that has a milestone of 1.9 to consider, but since the release of Subversion 1.9 is right around the corner, I donโ€™t think you will see progress in this in the near future.

+3
source

Source: https://habr.com/ru/post/1469348/


All Articles