Opened 13 years ago

Closed 13 years ago

#333 closed task (fixed)

Authz File for MapServer

Reported by: sdlime Owned by: warmerdam
Priority: normal Milestone:
Component: Systems Admin Keywords: subversion svn
Cc: dmorissette

Description

Hi guys: We'd like to support two different groups for svn access for MapServer. One being the current mapserver group and another for docs. I created a template authz file (see attachement) as described at:

http://wiki.osgeo.org/wiki/Subversion#Authz_Rules

I'm not sure it's quite right though. We need to limit access to /*/docs since the docs will accompany branches I believe. Not sure if one can do wildcards in these files. Please let me know what changes I need to make. Thanks...

Steve

Attachments (1)

authz.tmpl.rtf (458 bytes) - added by sdlime 13 years ago.
authz template file

Download all attachments as: .zip

Change History (4)

Changed 13 years ago by sdlime

Attachment: authz.tmpl.rtf added

authz template file

comment:1 Changed 13 years ago by warmerdam

Keywords: subversion svn added
Owner: changed from sac@… to warmerdam

comment:2 Changed 13 years ago by dmorissette

Cc: dmorissette added

comment:3 Changed 13 years ago by warmerdam

Resolution: fixed
Status: newclosed

OK, the new mapserver_docs LDAP group has been created, currently with only sdlime as a member. It can be administered at:

https://www.osgeo.org/cgi-bin/auth/ldap_group.py?group=mapserver_docs

I have updated the subversion respository to use the authz file slightly modified to:

[groups]
committers = @@mapserver@@
docs = @@mapserver_docs@@

[/]
* = r
@committers = rw

[/trunk/docs]
* = r
@committers = rw
@docs = rw

This configuration only grants permissions on /trunk/docs (not branches or tags) to the mapserver_docs group. I am doubtful whether this limitation will matter, but significant time spent researching the authz format failed to turn up details on wildcards.

I have not tested the mapserver_docs access to the docs tree myself, though I have confirmed normal commiters can still update it.

Note: See TracTickets for help on using tickets.