Ticket #400 (closed task: fixed)

Opened 4 years ago

Last modified 4 years ago

Create Authz Rules for MapGuide subversion repository

Reported by: tomfukushima Owned by: warmerdam
Priority: normal Milestone:
Component: Systems Admin Keywords: subversion
Cc: gregboone

Description

Per the "Authz Rules" section described on  http://wiki.osgeo.org/wiki/Subversion, please use the attached authz.tmpl file for MapGuide.

Note that we already have the LDAP group "mapguide", but "mapguide_sandbox" will need to be created.

I am putting this as critical since we are seeing some uncontrolled submissions to our projects.

Attachments

authz.tmpl Download (155 bytes) - added by tomfukushima 4 years ago.

Change History

Changed 4 years ago by tomfukushima

Changed 4 years ago by hobu

Tom,

I have implemented authz rules for both the MapGuide and FDO projects using the default committers lists of "fdo" and "mapguide". IIRC, there is no _sandbox groups for those projects yet.

Please confirm that everything is working as expected.

Howard

Changed 4 years ago by tomfukushima

Hi Howard,

Unfortunately, this still doesn't work, I just did a submission from an account that I just created (tomfukushima2) and it still committed:  http://trac.osgeo.org/mapguide/changeset/4149

Tom

Changed 4 years ago by hobu

Can you give the MapGuide and FDO repositories another whirl with your fake account?

Changed 4 years ago by tomfukushima

  • cc gregboone added

Nice work! That works now! My fake account failed, but my good account succeeded. FDO seems fine as well since my fake account failed there as well.

Can you also create the "mapguide_sandbox" group and seed it with my account so that I can admin it?

Since we are doing FDO at the same time, please create the FDO sandbox and seed it with gregboone so that he can administer it.

Thanks Tom

Changed 4 years ago by tomfukushima

  • priority changed from critical to normal

Changing priority from critical to normal because that's what the remaining work on creating sandbox groups is.

Changed 4 years ago by warmerdam

  • keywords subversion added
  • owner changed from sac@… to warmerdam

I'll take the task of implementing a sandbox for MapGuide.

Changed 4 years ago by warmerdam

  • status changed from new to assigned

I have created the mapguide_sandbox group, editable at:

 https://www.osgeo.org/cgi-bin/auth/ldap_group.py?group=mapguide_sandbox

I have also put the new authz.tmpl file into place.

I have set it up with Greg and Tom as initial members of the sandbox for the purpose of granting others access. I have also added "uvlite" since that is apparently the point.

I'd appreciate Tom or Greg creating the /sandbox area if it does not already exist in svn and testing the new security for it. Close the ticket if everything checks out.

Changed 4 years ago by tomfukushima

  • status changed from assigned to closed
  • resolution set to fixed

Thanks very much Frank, this is working well. And it has already turned out to be useful. Closing the ticket.

Greg, if you would like this for FDO, could you create a separate ticket for that?

Note: See TracTickets for help on using tickets.