From: Sunil S. <sh...@bo...> - 2005-11-23 12:01:44
|
Quoting from Matthias Andree's mail on Wed, Nov 23, 2005: > > It might be better to allow anonymous HTTP read-only access to trunk > > and to a few select tags (like the release tags). Access to the > > remaining tags, branches, as well as commits to the full tree via HTTP > > can then be stopped. > > > > Note that the svn+ssh protocol does not allow anonymous read-only > > access as it requires a valid login account on the system. > > Can the server side of subversion be configured to set particular users > to "read-only"? If so, I see no problem with creating a read-only user > named "anonsvn" or similar. The user "anonsvn" will be a valid login account with a shell access. Also, the repository has to be writable by "anonsvn" even for a readonly checkout. So, it is possible to just: $ ssh -l anonsvn decoy.wox.org $ rm -rf /path/to/repository/of/fetchmail Of course, a restricted shell along with a limited set of commands (like svnserve) in PATH may be more safer. But, it would be better to avoid this completely. -- Sunil Shetye. |