我怎样才能阻止访问我的颠覆存储库

Question

我想阻止人们访问我的实验分支

进行这些更改后，我重新启动并停止了颠覆服务。

我的 Authz 文件中有以下内容：

[aliases]
# joe = /C=XZ/ST=Dessert/L=Snake City/O=Snake Oil, Ltd./OU=Research Institute/CN=Joe Average

[groups]
# harry_and_sally = harry,sally
# harry_sally_and_joe = harry,sally,&joe
CMds = DL,JD,MA

# [/foo/bar]
# harry = rw
# &joe = r
# * =

# [repository:/baz/fuz]
# @harry_and_sally = rw
# * = r


[Client:/Branches/Experimental]
@CMds = ~r
@CMds = ~w

我想阻止人们访问实验分支，但他们似乎仍然可以

这是实验分支的 URL（来自 SVN Repo 浏览器）

svn://<serverIP>/Client/Branches/Experimental

所以我改变了这个：

[Client:/Branches/Experimental]
@CMds = ~r
@CMds = ~w

为此：

[Client:/Branches/Experimental]
@CMds =

而且还是没有效果？

我想知道存储库名称是否正确？应该是：

[Client:/Branches/Experimental]

或

[/Client/Branches/Experimental]

或 ??

谢谢

Answer 1

我总是为 authz 文件中的 [/] 路径定义最小 ACL，because

By default, nobody has any access to any repository at all. That means that if you're starting with an empty file, you'll probably want to give at least read permission to all users at the roots of the repositories.

无访问权限 语法良好的组是 @CMds =
有 r 和 rw 访问类型只有，~w 规则显然被忽略并且 ~r表示~~"Write access enabled"~~也无

选择是我的

In your authorization rules, prefixing a username, alias, group name, or authentication class token with a tilde character will cause Subversion to apply the rule to users who do not match the rule

即您还没有为您的路径真正定义任何 ACL

我怎样才能阻止访问我的颠覆存储库

How can I prevent access to my subversion repository

svn

authorization