>IIUC, prior to your change, nobody who had enabled authz at all could make
>use of the SVNListParentPath feature (because the authorization for that
>display would systematically fail).  But this also means that Subversion
>never leaked the name of a repository that was intended to be private/hidden
>from particular users.  Now, we no longer suffer the blanket authz failure,
>but we are showing the name of every repository in the parent directory
>without regard to any authz rules whatsoever.


Whoever wanted SVNListParentPath to work with authz prior to this commit was 
using a workaround of <Location /svn/> which was leaking the same info.

With regards
Kamesh Jayachandran

Reply via email to