Opened 13 years ago

Closed 13 years ago

#400 closed task (fixed)

Create Authz Rules for MapGuide subversion repository

Reported by: tomfukushima Owned by: warmerdam
Priority: normal Milestone:
Component: Systems Admin Keywords: subversion
Cc: gregboone

Description

Per the "Authz Rules" section described on http://wiki.osgeo.org/wiki/Subversion, please use the attached authz.tmpl file for MapGuide.

Note that we already have the LDAP group "mapguide", but "mapguide_sandbox" will need to be created.

I am putting this as critical since we are seeing some uncontrolled submissions to our projects.

Attachments (1)

authz.tmpl (155 bytes ) - added by tomfukushima 13 years ago.

Download all attachments as: .zip

Change History (9)

by tomfukushima, 13 years ago

Attachment: authz.tmpl added

comment:1 by hobu, 13 years ago

Tom,

I have implemented authz rules for both the MapGuide and FDO projects using the default committers lists of "fdo" and "mapguide". IIRC, there is no _sandbox groups for those projects yet.

Please confirm that everything is working as expected.

Howard

comment:2 by tomfukushima, 13 years ago

Hi Howard,

Unfortunately, this still doesn't work, I just did a submission from an account that I just created (tomfukushima2) and it still committed: http://trac.osgeo.org/mapguide/changeset/4149

Tom

comment:3 by hobu, 13 years ago

Can you give the MapGuide and FDO repositories another whirl with your fake account?

comment:4 by tomfukushima, 13 years ago

Cc: gregboone added

Nice work! That works now! My fake account failed, but my good account succeeded. FDO seems fine as well since my fake account failed there as well.

Can you also create the "mapguide_sandbox" group and seed it with my account so that I can admin it?

Since we are doing FDO at the same time, please create the FDO sandbox and seed it with gregboone so that he can administer it.

Thanks Tom

comment:5 by tomfukushima, 13 years ago

Priority: criticalnormal

Changing priority from critical to normal because that's what the remaining work on creating sandbox groups is.

comment:6 by warmerdam, 13 years ago

Keywords: subversion added
Owner: changed from sac@… to warmerdam

I'll take the task of implementing a sandbox for MapGuide.

comment:7 by warmerdam, 13 years ago

Status: newassigned

I have created the mapguide_sandbox group, editable at:

https://www.osgeo.org/cgi-bin/auth/ldap_group.py?group=mapguide_sandbox

I have also put the new authz.tmpl file into place.

I have set it up with Greg and Tom as initial members of the sandbox for the purpose of granting others access. I have also added "uvlite" since that is apparently the point.

I'd appreciate Tom or Greg creating the /sandbox area if it does not already exist in svn and testing the new security for it. Close the ticket if everything checks out.

comment:8 by tomfukushima, 13 years ago

Resolution: fixed
Status: assignedclosed

Thanks very much Frank, this is working well. And it has already turned out to be useful. Closing the ticket.

Greg, if you would like this for FDO, could you create a separate ticket for that?

Note: See TracTickets for help on using tickets.