Re: Multiple matching lines in authz file

2010-05-02 Thread Stefan Sperling
On Wed, Jan 27, 2010 at 01:49:18PM +0200, Mark Cammidge wrote: > Stefan Sperling wrote: > > >> Does anybody object if I create an issue in the documentation issue > >> tracker? I'll create a patch to the English documentation to go with > >> the issue. > > > > Please go ahead and file an issue.

Re: Multiple matching lines in authz file

2010-01-27 Thread Mark Cammidge
Stefan Sperling wrote: >> Does anybody object if I create an issue in the documentation issue >> tracker? I'll create a patch to the English documentation to go with >> the issue. > > Please go ahead and file an issue. http://code.google.com/p/svnbook/issues/detail?id=71 Disclaimer: http://ww

Re: Multiple matching lines in authz file

2010-01-26 Thread Eric Lee
On Fri, Jan 15, 2010 at 6:16 AM, Philip Martin wrote: > What should happen when a username matches multiple lines in an authz > file? The svnbook states that the first matching line applies: > > [groups] > paint-developers = frank, sally, jane > > [paint:/projects/paint] > jane = r > @p

Re: Multiple matching lines in authz file

2010-01-26 Thread Stefan Sperling
On Tue, Jan 26, 2010 at 11:36:13AM +0200, Mark Cammidge wrote: > Danil Shopyrin wrote: > > >> Do they? Perhaps they write them by trial-and-error, testing to see > >> if they get the behaviour they want. In that case we will break authz > >> files that work. > > > > Agree on this. From our expe

Re: Multiple matching lines in authz file

2010-01-26 Thread Mark Cammidge
Danil Shopyrin wrote: >> Do they? Perhaps they write them by trial-and-error, testing to see >> if they get the behaviour they want. In that case we will break authz >> files that work. > > Agree on this. From our experience, people configure access > permissions by trial-and-error approach. At

Re: Multiple matching lines in authz file

2010-01-24 Thread Danil Shopyrin
>> Most people have probably written their authz rules according to the >> book, so their authz rules may not work as expected. > > Do they?  Perhaps they write them by trial-and-error, testing to see > if they get the behaviour they want.  In that case we will break authz > files that work. Agree

Re: Multiple matching lines in authz file

2010-01-20 Thread Philip Martin
Stefan Sperling writes: > This is quite a dangerous bug isn't it? > Anyone relying on authz for confidentially would rightfully regard > this as a security issue. I think we should fix the code. > Most people have probably written their authz rules according to the > book, so their authz rules ma

Re: Multiple matching lines in authz file

2010-01-19 Thread Stefan Sperling
On Thu, Jan 14, 2010 at 10:16:35PM +, Philip Martin wrote: > What should happen when a username matches multiple lines in an authz > file? The svnbook states that the first matching line applies: > >[groups] >paint-developers = frank, sally, jane > >[paint:/projects/paint] >j

Multiple matching lines in authz file

2010-01-14 Thread Philip Martin
What should happen when a username matches multiple lines in an authz file? The svnbook states that the first matching line applies: [groups] paint-developers = frank, sally, jane [paint:/projects/paint] jane = r @paint-developers = rw Another important fact is that the first