[prev in list] [next in list] [prev in thread] [next in thread]
List: trac
Subject: [Trac] Re: TRAC permissions not following subversion permissions
From: Mary Loftis <mary.loftis () utas ! utc ! com>
Date: 2016-04-14 13:03:52
Message-ID: 0a50ffb4-ae9c-4da0-96c8-015ef7f5a8d8 () googlegroups ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
I tried changing the [repositories] section to remove the
ARES_ComponentLibrary prefix. Same error.
When I am not a member of the admin group and therefore do not have read
access to the slash (/) directory, this is the error in the error.log file.
(A replaced server and ip addresses with <my_server> and <my_ip>.)
[Thu Apr 14 08:40:38 2016] [info] Subsequent (No.2) HTTPS request received
for child 245 (server <myserver.com>:443)
[Thu Apr 14 08:40:38 2016] [debug] mod_authz_svn.c(195): [client <my_ip>]
Path to authz file is E:/etc/.svnaccess, referer:
https://<myserver.com>/trac/
[Thu Apr 14 08:40:38 2016] [error] [client <my_ip>] Access denied:
'utcaus\\loftism' GET ARES_ComponentLibrary:/, referer:
https://<myserver.com>/trac/
[Thu Apr 14 08:40:43 2016] [debug] ssl_engine_io.c(1908): OpenSSL: I/O
error, 5 bytes expected to read on BIO#b870e0 [mem: 10dc55b]
[Thu Apr 14 08:40:43 2016] [info] [client <my_ip>] (OS 10060)A connection
attempt failed because the connected party did not properly respond after a
period of time, or established connection failed because connected host has
failed to respond. : SSL input filter read failed.
[Thu Apr 14 08:40:43 2016] [debug] ssl_engine_kernel.c(1910): OpenSSL:
Write: SSL negotiation finished successfully
[Thu Apr 14 08:40:43 2016] [info] [client <my_ip>] Connection closed to
child 245 with standard shutdown (server <myserver.com>:443)
When I am a member of the admin group and have read access to the slash (/)
directory, this is what I see in the error.log file - a successful
connection:
[Thu Apr 14 08:43:48 2016] [debug] mod_authz_svn.c(195): [client <my_ip>]
Path to authz file is E:/etc/.svnaccess, referer:
https://<myserver.com>/trac/ARES_ComponentLibrary
[Thu Apr 14 08:43:48 2016] [info] [client <my_ip>] Access granted:
'utcaus\\loftism' GET ARES_ComponentLibrary:/chrome/common/extlink.gif,
referer: https://<myserver.com>/trac/ARES_ComponentLibrary
[Thu Apr 14 08:43:48 2016] [debug] ssl_engine_io.c(1908): OpenSSL: I/O
error, 5 bytes expected to read on BIO#b870e0 [mem: cbcf3e3]
[Thu Apr 14 08:43:48 2016] [info] [client <my_ip>] (70014)End of file
found: SSL input filter read failed.
[Thu Apr 14 08:43:48 2016] [debug] ssl_engine_kernel.c(1910): OpenSSL:
Write: SSL negotiation finished successfully
[Thu Apr 14 08:43:48 2016] [info] [client <my_ip>] Connection closed to
child 249 with standard shutdown (server <myserver.com>:443)
I am going to attempt to create a top-level svn repo (call it
ACompLib) and have it contain a subversion external to the
ARES\ComponentLibrary area. I will set the permission on ACompLib to use
the same access control group used at the ARES\ComponentLibrary. I will
then create a TRAC project called ACompLib which points to the svn repo
ACompLib. I'm hoping that by having the TRAC project point to a top-level
svn repo, and having that svn repo have the same permissions as the
lower-level directory in the other subversion repo with an subversion
external to it, that TRAC will use the correct permissions.
On Monday, April 11, 2016 at 11:03:19 AM UTC-4, Mary Loftis wrote:
> I am having an issue with TRAC not adhering to the Subversion access
> control permissions.
>
>
>
> Platform/Authentication Info
>
> OS: Windows Server 2008 R2 Standard SP1 (64 bit)
>
> Service: CollabNet Subversion Apache 2.2.23 (win32)
>
> Service: CollabNet Subversion Client svnserver v1.7.8
>
> Client App: Tortoise SVN v1.8.11.26382 (64 bit)
>
> Authentication: Apache using SSPI
>
>
>
> ===============================
>
> In the httpd.conf file:
>
>
>
> # Among other load modules used are the following:
>
> LoadModule authn_default_module modules/mod_authn_default.so
>
> LoadModule authn_file_module modules/mod_authn_file.so
>
> LoadModule authz_default_module modules/mod_authz_default.so
>
> LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
>
> LoadModule authz_host_module modules/mod_authz_host.so
>
> LoadModule authz_user_module modules/mod_authz_user.so
>
> LoadModule sspi_auth_module modules/mod_auth_sspi.so
>
> LoadModule authz_svn_module modules/mod_authz_svn.so
>
>
>
> <Location /svn/>
>
> DAV svn
>
> SVNParentPath e:/svn_repository
>
> SVNIndexXSLT /manual/style/xsl/svnindex.xsl
>
> AuthType SSPI
>
> SSPIAuth On
>
> SSPIOfferSSPI Off
>
> SSPIAuthoritative On
>
> SSPIDomain <domaincontroller>
>
> # Specify domain\userid in .svnaccess file so set SSPIOmitDomain to off.
>
> SSPIOmitDomain Off
>
> SSPIUsernameCase lower
>
> SSPIPerRequestAuth On
>
> SSPIOfferBasic On
>
> AuthName " Subversion Login (Use domain\userid format)"
>
> # Specify which users are allowed to access which svn projects
>
> AuthzSVNAccessFile "E:/etc/.svnaccess"
>
> Require valid-user
>
> </Location>
>
>
>
> <Location /trac>
>
> SVNParentPath e:/svn_repository
>
> AuthzSVNAccessFile "E:/etc/.svnaccess"
>
>
>
> SetHandler mod_python
>
> PythonHandler trac.web.modpython_frontend
>
> PythonOption TracEnvParentDir e:\trac
>
> # Location and TracUriRoot have the same path
>
> # TracUriRoot may or may not be necessary in your setup.
>
> PythonOption TracUriRoot /trac
>
>
>
> AuthType SSPI
>
> SSPIAuth On
>
> SSPIOfferSSPI Off
>
> SSPIAuthoritative On
>
> SSPIDomain <domaincontroller>
>
> SSPIOmitDomain Off
>
> SSPIUsernameCase lower
>
> SSPIPerRequestAuth On
>
> SSPIOfferBasic On
>
> AuthName "TRAC Login (Use domain\userid format)"
>
> Require valid-user
>
> </Location>
>
>
>
> <Location /trac/login>
>
> AuthType SSPI
>
> AuthName "Trac Login"
>
> SSPIAuth On
>
> SSPIAuthoritative On
>
> SSPIDomain MyLocalDomain
>
> SSPIOfferBasic On
>
> SSPIOmitDomain Off
>
> SSPIBasicPreferred On
>
> Require valid-user
>
> </Location>
>
>
>
> #Include e:/etc/subversion.conf
>
>
>
> ===============================
>
> In the e:/etc/subversion.conf file:
>
>
>
> <Location /ARES>
>
> DAV svn
>
> SVNPath E:/svn_repository/ARES
>
> AuthType Basic
>
> AuthName "Subversion ARES repository"
>
> Require valid-user
>
> ErrorDocument 404 default
>
> </Location>
>
>
>
>
>
> Svn repo for which a TRAC project has been created is
> E:\svn_repository\ARES.
>
>
>
> On the server, E:\svn_repository\ARES contains the following folders:
>
> Conf
>
> Dav
>
> Db
>
> Hooks
>
> Locks
>
>
>
> And the following files:
>
>
>
> Format
>
> Readme.txt
>
>
>
> ===============================
>
>
>
> In the svn access control file, e:\etc\.svnaccess, is:
>
>
>
> # Groups are defined.
>
> [groups]
>
> admin = domain\beth, domain\eric
>
> ARES_team = domain\beth, domain\eric, domain\greg, domain\joseph
>
>
>
> # Access to the top-level / directory is only for the admin group.
>
> [/]
>
> @admin = rw
>
>
>
> # Access to the ARES folder is forbidden for all.
>
> [ARES:/]
>
> * =
>
>
>
> # Access to subfolders under the ARES area is allowed.
>
> [ARES:/ComponentLibrary]
>
> @ARES_team = rw
>
>
>
> ===============================
>
>
>
> Access to the repositories works as it should for all users when using
> TortoiseSVN. Only admins have access to the slash repo. No one can access
> the ARES repo. Members of the ARES_team can access the
> ARES/ComponentLibrary repo.
>
>
>
> We want a TRAC project which points to the ARES/ComponentLibrary area. The
> following TRAC project is set up associated with the svn repo:
>
>
>
> [components]
>
> tracopt.versioncontrol.svn.* = enabled
>
> tracstats.* = enabled
>
> trac.versioncontrol.api.repositorymanager = enabled
>
> trac.versioncontrol.svn_authz.svnauthzoptions = enabled
>
>
>
> # This is an optional 'project root'
>
> [stats]
>
> root = e:\svn_repository\ARES\ComponentLibrary
>
>
>
> [repositories]
>
> #
>
> # It should be noted that the path below doesn't actually exist.
>
> # There is no ComponentLibrary subfolder on the server, but it is
>
> # accessible from the TortoiseSVN repo browser at
>
> # https://<myserver>/ARES/ComponentLibrary.
> #
>
> ARES_ComponentLibrary.dir = e:\svn_repository\ARES\ComponentLibrary
>
> ARES_ComponentLibrary.description = This is the 'ARES Component Library'
> project repository.
>
> ARES_ComponentLibrary.type = svn
>
> ARES_ComponentLibrary.url = https://<myserver>/svn/ARES/ComponentLibrary
>
> ARES_ComponentLibrary.hidden = true
>
> tsvn = tsvn: Interact with TortoiseSvn
>
>
>
> [trac]
>
> authz_file = E:\etc\.svnaccess
>
> authz_module_name = ARES
>
> permission_policies = AuthzSourcePolicy, DefaultPermissionPolicy,
> LegacyAttachmentPolicy
>
> permission_store = DefaultPermissionStore
>
> #
>
> # It should be noted that the path below doesn't actually exist.
>
> # There is no ComponentLibrary subfolder on the server, but it is
>
> # accessible from the TortoiseSVN repo browser at
>
> # https://<myserver>/ARES/ComponentLibrary.
> #
>
> repository_dir = e:\svn_repository\ARES\ComponentLibrary
>
> repository_sync_per_request = (default)
>
> repository_type = svn
>
>
>
> TRAC does not seem to follow the svn access controls. Users can only
> access the TRAC repository associated with ARES/ComponentLibrary if their
> userids are in the admin group. In this case, greg and joseph cannot access
> the ARES/ComponentLibrary TRAC project, even though they are in the
> ARES_team group which is allowed to access it. (They can access it fine
> through TortoiseSVN.)
>
>
>
> If I add greg and joseph to the admin group, then they can access the TRAC
> ARES/ComponentLibrary project. This is not how the authorization should
> work. The behavior should be the same that subversion uses.
>
>
>
> Am I missing a setting or have a setting wrong? Thanks in advance.
>
--
You received this message because you are subscribed to the Google Groups "Trac \
Users" group. To unsubscribe from this group and stop receiving emails from it, send \
an email to trac-users+unsubscribe@googlegroups.com. To post to this group, send \
email to trac-users@googlegroups.com. Visit this group at \
https://groups.google.com/group/trac-users. For more options, visit \
https://groups.google.com/d/optout.
[Attachment #5 (text/html)]
<div dir="ltr"><div>I tried changing the [repositories] section to remove the \
ARES_ComponentLibrary prefix. Same error.</div><div><br></div><div>When I am not a \
member of the admin group and therefore do not have read access to the slash (/) \
directory, this is the error in the error.log file. (A replaced server and ip \
addresses with <my_server> and <my_ip>.)</div><div><br></div><div><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">[Thu Apr 14 \
08:40:38 2016] [info] Subsequent (No.2) HTTPS request received for child 245 (server \
<myserver.com>:443)</font></p><font color="#000000" face="Times New Roman" \
size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">[Thu Apr 14 \
08:40:38 2016] [debug] mod_authz_svn.c(195): [client <my_ip>] Path to authz \
file is E:/etc/.svnaccess, referer: \
https://<myserver.com>/trac/</font></p><font color="#000000" face="Times New \
Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">[Thu Apr 14 \
08:40:38 2016] [error] [client <my_ip>] Access denied: \
'utcaus\\loftism' GET ARES_ComponentLibrary:/, referer: \
https://<myserver.com>/trac/</font></p><font color="#000000" face="Times New \
Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">[Thu Apr 14 \
08:40:43 2016] [debug] ssl_engine_io.c(1908):
OpenSSL: I/O error, 5 bytes expected to read on BIO#b870e0 [mem: \
10dc55b]</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font size="3"><font color="#000000">[Thu Apr \
14 08:40:43 2016] [info] [client <my_ip>] (OS 10060)A connection attempt failed \
because the connected party did not properly respond after a period of time, or \
established connection failed because connected host has failed to respond.<span \
style="mso-spacerun: yes;"> </span></font></font><font color="#000000" size="3">: \
SSL input filter read failed.</font></p><font color="#000000" face="Times New Roman" \
size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">[Thu Apr 14 \
08:40:43 2016] [debug] ssl_engine_kernel.c(1910): OpenSSL: Write: SSL negotiation \
finished successfully</font></p><font color="#000000" face="Times New Roman" \
size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">[Thu Apr 14 \
08:40:43 2016] [info] [client <my_ip>] Connection closed to child 245 with \
standard shutdown (server <myserver.com>:443)</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font></div><div><br></div><div>When I am a member of the admin group and have read \
access to the slash (/) directory, this is what I see in the error.log file - a \
successful connection:</div><div><br></div><div><font color="#000000" face="Times New \
Roman" size="3">
</font></div><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">[Thu Apr \
14 08:43:48 2016] [debug] mod_authz_svn.c(195): [client <my_ip>] Path to authz \
file is E:/etc/.svnaccess, referer: \
https://<myserver.com>/trac/ARES_ComponentLibrary</font></p><div><font \
color="#000000" face="Times New Roman" size="3">
</font></div><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">[Thu Apr \
14 08:43:48 2016] [info] [client <my_ip>] Access granted: \
'utcaus\\loftism' GET \
ARES_ComponentLibrary:/chrome/common/extlink.gif,
referer: https://<myserver.com>/trac/ARES_ComponentLibrary</font></p><div><font \
color="#000000" face="Times New Roman" size="3">
</font></div><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">[Thu Apr \
14 08:43:48 2016] [debug] ssl_engine_io.c(1908):
OpenSSL: I/O error, 5 bytes expected to read on BIO#b870e0 [mem: \
cbcf3e3]</font></p><div><font color="#000000" face="Times New Roman" size="3">
</font></div><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">[Thu Apr \
14 08:43:48 2016] [info] [client <my_ip>] (70014)End of file found: SSL input \
filter read failed.</font></p><div><font color="#000000" face="Times New Roman" \
size="3">
</font></div><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">[Thu Apr \
14 08:43:48 2016] [debug] ssl_engine_kernel.c(1910): OpenSSL: Write: SSL negotiation \
finished successfully</font></p><div><font color="#000000" face="Times New Roman" \
size="3">
</font></div><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">[Thu Apr \
14 08:43:48 2016] [info] [client <my_ip>] Connection closed to child 249 with \
standard shutdown (server <myserver.com>:443)</font></p><div><font \
color="#000000" face="Times New Roman" size="3">
</font></div><p style="margin: 0in 0in 0pt;"><font color="#000000" \
size="3"><br></font></p><div><font color="#000000" face="Times New Roman" size="3">
I am going to attempt to create a top-level svn repo (call it ACompLib) and have \
it contain a subversion external to the ARES\ComponentLibrary area. I will set the \
permission on ACompLib to use the same access control group used at the \
ARES\ComponentLibrary. I will then create a TRAC project called ACompLib which \
points to the svn repo ACompLib. I'm hoping that by having the TRAC project point \
to a top-level svn repo, and having that svn repo have the same permissions as the \
lower-level directory in the other subversion repo with an subversion external to it, \
that TRAC will use the correct permissions.</font></div><div><br><br>On Monday, April \
11, 2016 at 11:03:19 AM UTC-4, Mary Loftis wrote:</div><blockquote \
class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; padding-left: 1ex; \
border-left-color: rgb(204, 204, 204); border-left-width: 1px; border-left-style: \
solid;"><div dir="ltr"><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">I am having an \
issue with TRAC not adhering to the Subversion access control permissions. \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" \
size="3">Platform/Authentication Info</font></p><font color="#000000" face="Times New \
Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3">OS: \
Windows Server 2008 R2 Standard SP1 (64 bit)</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3">Service: \
CollabNet Subversion Apache 2.2.23 (win32)</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3">Service: \
CollabNet Subversion Client svnserver v1.7.8</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3">Client \
App: Tortoise SVN v1.8.11.26382 (64 bit)</font></p><font color="#000000" face="Times \
New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">Authentication: Apache using SSPI</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3">==============================<wbr>=</font></span></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3">In the \
httpd.conf file:</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"># Among \
other load modules used are the following:</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">LoadModule authn_default_module modules/mod_authn_default.so</font></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">LoadModule authn_file_module modules/mod_authn_file.so</font></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">LoadModule authz_default_module modules/mod_authz_default.so</font></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">LoadModule authz_groupfile_module \
modules/mod_authz_groupfile.so</font></p><font color="#000000" face="Times New Roman" \
size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">LoadModule authz_host_module modules/mod_authz_host.so</font></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">LoadModule authz_user_module modules/mod_authz_user.so</font></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">LoadModule sspi_auth_module modules/mod_auth_sspi.so</font></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font size="3"><font \
color="#000000">LoadModule<span> </span></font></font><font color="#000000" \
size="3">authz_svn_module</font><span><font color="#000000" size="3"> \
</font></span><font color="#000000" size="3">modules/mod_authz_svn.so</font></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"><Location
/svn/></font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> DAV svn</font></span></p><font color="#000000" face="Times New Roman" \
size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3">
SVNParentPath e:/svn_repository</font></span></p><font color="#000000" face="Times \
New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> SVNIndexXSLT
/manual/style/xsl/svnindex.xsl </font></span></p><font color="#000000" face="Times \
New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> AuthType SSPI</font></span></p><font color="#000000" face="Times New \
Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> SSPIAuth On</font></span></p><font color="#000000" face="Times New \
Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> SSPIOfferSSPI Off</font></span></p><font color="#000000" face="Times \
New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> SSPIAuthoritative On</font></span></p><font color="#000000" face="Times \
New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> SSPIDomain <domaincontroller></font></span></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> # Specify domain\userid in .svnaccess file so set SSPIOmitDomain to \
off.</font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> SSPIOmitDomain Off</font></span></p><font color="#000000" face="Times \
New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> SSPIUsernameCase lower</font></span></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> SSPIPerRequestAuth On</font></span></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> SSPIOfferBasic On</font></span></p><font color="#000000" face="Times \
New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> AuthName " Subversion Login (Use domain\userid \
format)"</font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> # Specify which users are allowed to access which svn \
projects</font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> AuthzSVNAccessFile "E:/etc/.svnaccess"</font></span></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> Require valid-user</font></span></p><font color="#000000" face="Times \
New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"></Location></font></span></p><font color="#000000" face="Times New \
Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> </font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"><Location /trac></font></span></p><font color="#000000" face="Times \
New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">SVNParentPath \
e:/svn_repository</font></span></p><font color="#000000" face="Times New Roman" \
size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">AuthzSVNAccessFile \
"E:/etc/.svnaccess"</font></span></p><font color="#000000" face="Times New \
Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> </font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">SetHandler mod_python</font></span></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">PythonHandler \
trac.web.modpython_frontend</font></span></p><font color="#000000" face="Times New \
Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">PythonOption TracEnvParentDir \
e:\trac</font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3"># Location and TracUriRoot have the same \
path</font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3"># TracUriRoot may or may not be necessary in \
your setup.</font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">PythonOption TracUriRoot \
/trac</font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><span style="color: black;"><font size="3"> \
</font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">AuthType SSPI</font></span></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">SSPIAuth On</font></span></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">SSPIOfferSSPI Off</font></span></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">SSPIAuthoritative On</font></span></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">SSPIDomain \
<domaincontroller></font></span></p><font color="#000000" face="Times New \
Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">SSPIOmitDomain Off</font></span></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">SSPIUsernameCase \
lower</font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">SSPIPerRequestAuth On</font></span></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">SSPIOfferBasic On</font></span></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">AuthName "TRAC Login (Use domain\userid \
format)"</font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"><span> </span><span> </span></font><font size="3">Require \
valid-user</font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"></Location></font></span></p><font color="#000000" face="Times New \
Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> </font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"><Location
/trac/login></font></span></p><font color="#000000" face="Times New Roman" \
size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">AuthType SSPI</font></span></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">AuthName "Trac \
Login"</font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">SSPIAuth On</font></span></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">SSPIAuthoritative On</font></span></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">SSPIDomain \
MyLocalDomain</font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">SSPIOfferBasic On</font></span></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">SSPIOmitDomain Off</font></span></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">SSPIBasicPreferred On</font></span></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">Require valid-user</font></span></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"></Location></font></span></p><font color="#000000" face="Times New \
Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><span style="color: black;"><font size="3"> \
</font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3">#Include e:/etc/subversion.conf</font></span></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> </font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3">==============================<wbr>=</font></span></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3">In the e:/etc/subversion.conf file:</font></span></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"> </font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"><Location /ARES> </font></span></p><font color="#000000" face="Times \
New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">DAV svn </font></span></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"><span> </span><span> </span></font><font size="3">SVNPath \
E:/svn_repository/ARES</font></span></p><font color="#000000" face="Times New Roman" \
size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">AuthType Basic </font></span></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">AuthName "Subversion ARES \
repository" </font></span></p><font color="#000000" face="Times New Roman" \
size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">Require valid-user </font></span></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><span><font \
size="3"> </font></span><font size="3">ErrorDocument 404 default \
</font></span></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3"></Location></font></span></p><font color="#000000" face="Times New \
Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">Svn repo for \
which a TRAC project has been created is E:\svn_repository\ARES.</font></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">On the server, \
E:\svn_repository\ARES contains the following folders:</font></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><span><font color="#000000" size="3"> \
</font></span><font color="#000000" size="3">Conf</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><span><font color="#000000" size="3"> \
</font></span><font color="#000000" size="3">Dav</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><span><font color="#000000" size="3"> \
</font></span><font color="#000000" size="3">Db</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><span><font color="#000000" size="3"> \
</font></span><font color="#000000" size="3">Hooks</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><span><font color="#000000" size="3"> \
</font></span><font color="#000000" size="3">Locks</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><span><font color="#000000" size="3"> \
</font></span><font color="#000000" size="3">And the following files:</font></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><span><font color="#000000" size="3"> \
</font></span><font color="#000000" size="3">Format</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><span><font color="#000000" size="3"> \
</font></span><font color="#000000" size="3">Readme.txt</font></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3">==============================<wbr>=</font></span></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">In the svn \
access control file, e:\etc\.svnaccess, is:</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.25in;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"># Groups \
are defined.</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">[groups]</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3">admin = \
domain\beth, domain\eric</font></p><font color="#000000" face="Times New Roman" \
size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3">ARES_team \
= domain\beth, domain\eric, domain\greg, domain\joseph</font></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"># Access \
to the top-level / directory is only for the admin group.</font></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">[/]</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3">@admin = \
rw</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"># Access \
to the ARES folder is forbidden for all.</font></p><font color="#000000" face="Times \
New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">[ARES:/]</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3">* \
=</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"># Access \
to subfolders under the ARES area is allowed.</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">[ARES:/ComponentLibrary]</font></p><font color="#000000" face="Times New \
Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">@ARES_team = rw</font></p><font color="#000000" face="Times New Roman" \
size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><span style="color: black;"><font \
size="3">==============================<wbr>=</font></span></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">Access to the \
repositories works as it should for all users when using TortoiseSVN. Only admins \
have access to the slash repo. No one can access the ARES repo. Members of the \
ARES_team can access the ARES/ComponentLibrary repo.</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">We want a TRAC \
project which points to the ARES/ComponentLibrary area. The following TRAC project is \
set up associated with the svn repo:</font></p><font color="#000000" face="Times New \
Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">[components]</font></p><font color="#000000" face="Times New Roman" \
size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">tracopt.versioncontrol.svn.* = enabled</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">tracstats.* = enabled</font></p><font color="#000000" face="Times New Roman" \
size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">trac.versioncontrol.api.<wbr>repositorymanager = enabled</font></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">trac.versioncontrol.svn_authz.<wbr>svnauthzoptions = enabled</font></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"># This is \
an optional 'project root'</font></p><font color="#000000" face="Times New \
Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">[stats]</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3">root =
e:\svn_repository\ARES\<wbr>ComponentLibrary</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">[repositories]</font></p><font color="#000000" face="Times New Roman" \
size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">#</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"># It \
should be noted that the path below doesn't actually exist.</font></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"># There \
is no ComponentLibrary subfolder on the server, but it is </font></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"># \
accessible from the TortoiseSVN repo browser at </font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"># \
https://<myserver>/ARES/<wbr>ComponentLibrary.<br></font><font color="#000000" \
size="3"> #</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">ARES_ComponentLibrary.dir = \
e:\svn_repository\ARES\<wbr>ComponentLibrary</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">ARES_ComponentLibrary.<wbr>description = This is the 'ARES Component \
Library' project repository.</font></p><font color="#000000" face="Times New \
Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">ARES_ComponentLibrary.type = svn</font></p><font color="#000000" face="Times \
New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">ARES_ComponentLibrary.url = \
https://<myserver>/svn/ARES/<wbr>ComponentLibrary</font></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">ARES_ComponentLibrary.hidden = true</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3">tsvn = \
tsvn: Interact with TortoiseSvn</font></p><font color="#000000" face="Times New \
Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">[trac]</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">authz_file = E:\etc\.svnaccess</font></p><font color="#000000" face="Times \
New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">authz_module_name = ARES</font></p><font color="#000000" face="Times New \
Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">permission_policies = AuthzSourcePolicy, DefaultPermissionPolicy, \
LegacyAttachmentPolicy</font></p><font color="#000000" face="Times New Roman" \
size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">permission_store = DefaultPermissionStore</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">#</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"># It \
should be noted that the path below doesn't actually exist.</font></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"># There \
is no ComponentLibrary subfolder on the server, but it is </font></p><font \
color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"># \
accessible from the TortoiseSVN repo browser at </font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" size="3"># \
https://<myserver>/ARES/<wbr>ComponentLibrary.<br></font><font color="#000000" \
size="3"> #</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">repository_dir = \
e:\svn_repository\ARES\<wbr>ComponentLibrary</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">repository_sync_per_request = (default)</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt 0.5in;"><font color="#000000" \
size="3">repository_type = svn</font></p><font color="#000000" face="Times New Roman" \
size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">TRAC does not \
seem to follow the svn access controls. Users can only access the TRAC repository \
associated with ARES/ComponentLibrary if their userids are in the admin group. In \
this case, greg and joseph cannot access the ARES/ComponentLibrary TRAC project, even \
though they are in the ARES_team group which is allowed to access it. (They can \
access it fine through TortoiseSVN.)</font></p><font color="#000000" face="Times New \
Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">If I add greg \
and joseph to the admin group, then they can access the TRAC ARES/ComponentLibrary \
project. This is not how the authorization should work. The behavior should be the \
same that subversion uses.</font></p><font color="#000000" face="Times New Roman" \
size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3"> \
</font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin: 0in 0in 0pt;"><font color="#000000" size="3">Am I missing a \
setting or have a setting wrong? Thanks in advance.</font></p><font color="#000000" \
face="Times New Roman" size="3">
</font></div></blockquote></div>
<p></p>
-- <br />
You received this message because you are subscribed to the Google Groups "Trac \
Users" group.<br /> To unsubscribe from this group and stop receiving emails \
from it, send an email to <a \
href="mailto:trac-users+unsubscribe@googlegroups.com">trac-users+unsubscribe@googlegroups.com</a>.<br \
/> To post to this group, send email to <a \
href="mailto:trac-users@googlegroups.com">trac-users@googlegroups.com</a>.<br /> \
Visit this group at <a \
href="https://groups.google.com/group/trac-users">https://groups.google.com/group/trac-users</a>.<br \
/> For more options, visit <a \
href="https://groups.google.com/d/optout">https://groups.google.com/d/optout</a>.<br \
/>
------=_Part_145_1278613179.1460639032263--
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic