SVN repositories without authz files seem to allow any authorized OSGeo LDAP user to commit
|Reported by:||hobu||Owned by:|
The OSSIM project had some unauthorized commits to its repository http://trac.osgeo.org/ossim/changeset/14391 , and I also found that I could commit to their repository even though I wasn't in the ossim group http://trac.osgeo.org/ossim/changeset/14406
Some limited testing showed me this is related to our non-authz configuration, but I couldn't figure out why it was allowing me to commit. For a quick fix, I just put an authz.tmpl in the ossim svn directory and went on my way. There are a number of projects that do not use authz though, so we should figure out what's going on.