Project

General

Profile

Authorize in repositories controller based on /svn/access.conf

Added by D G about 12 years ago

Hello

I'm new to redmine (fantastic tool) and ruby/rails and introduced it at work.

At work we've got a svn-repo with many subfolders and users.
Something like this:

deptOne/
deptTwo/
deptTwo/projectOne/
allDepts/
...

And our svn access.conf looks like this (redmine-usernames = svn-usernames):

[groups]
dOne = userOne, userTwo
dTwo = userThree
everyone = @dOne, @dTwo, userFour

[Repo:/]
@everyone = r

[Repo:/deptOne]
@everyone = 
@dOne = rw

[Repo:/deptTwo]
@everyone = 
@dTwo = rw

[Repo:/allDepts]
@everyone = rw

...

When I add this repository in redmine every user (member of the project, view repository rights) can see every file. Is there a way to 'hide' and forbid userOne to see files located in deptTwo/ like browsing the repository with apaches svn-browser.
I've seen this in 'websvn' (they parse the access.conf file).

  1. Is there already a way to do this?
  2. Would this make sense for other repository-types (git, ...)?
  3. What has to be done?
    1. Via plugin?
    2. How to extend authorize in repository controller?
      • Parse access.conf
    3. How to hide forbidden folders/files in redmine-repository-view?
    4. How to filter changesets/revisions in activity-view and redmine-repository-view (latest revisions)?

PS: I know that I could define multiple projects with repositories like /svn/Repo/deptOne/, but we've got 24 (!) different folders with different user-rights
PPS: Redmine is accessing svn via file:///.

Any help/comment is greatly appreciated.
Thanks in advance!