This is an automated email from the ASF dual-hosted git repository.
sebb pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/whimsy.git
The following commit(s) were added to refs/heads/master by this push:
new 31a1b5e2 Add some sample SVN permissions
31a1b5e2 is described below
commit 31a1b5e2502d3c64287ff593c7be52e0d5d8f8e5
Author: Sebb <[email protected]>
AuthorDate: Wed Sep 11 00:01:23 2024 +0100
Add some sample SVN permissions
---
docker-config/whimsy.conf | 47 ++++++++++++++++++++++++++++++++++++++---------
1 file changed, 38 insertions(+), 9 deletions(-)
diff --git a/docker-config/whimsy.conf b/docker-config/whimsy.conf
index c962ec41..13802e9b 100644
--- a/docker-config/whimsy.conf
+++ b/docker-config/whimsy.conf
@@ -466,23 +466,52 @@ Alias /project/icla/ /srv/whimsy/www/project/icla/public
</Directory>
# Needs libapache2-mod-svn to be installed
-# These are separate repos, as per the real ones
-<Location /repos/asf>
+# Where the repos are all located
+<Location /repos>
DAV svn
- SVNPath /srv/REPO/asf
+ SVNParentPath /srv/REPO/
SetOutputFilter DEFLATE
</Location>
+# Now define some sample permissions
+# These are not as detailed as the actual ones
+
+# The public repo
+<Location /repos/asf>
+ Require all granted
+</Location>
+
+# Committers can generally access this repo
<Location /repos/infra>
- DAV svn
- SVNPath /srv/REPO/infra
- SetOutputFilter DEFLATE
+ AuthType Basic
+ AuthName "ASF Committer"
+ AuthBasicProvider ldap
+ AuthLDAPUrl "ldaps://<%= ldaphosts %>/ou=people,dc=apache,dc=org?uid"
+ AuthLDAPBindDN <%= ldapbinddn %>
+ AuthLDAPBindPassword "<%= ldapbindpw %>"
+ Require ldap-alias-committer
</Location>
+# ASF members only
<Location /repos/private>
- DAV svn
- SVNPath /srv/REPO/private
- SetOutputFilter DEFLATE
+ AuthType Basic
+ AuthName "ASF Members"
+ AuthBasicProvider ldap
+ AuthLDAPUrl "ldaps://<%= ldaphosts %>/ou=people,dc=apache,dc=org?uid"
+ AuthLDAPBindDN <%= ldapbinddn %>
+ AuthLDAPBindPassword "<%= ldapbindpw %>"
+ Require ldap-alias-member
+</Location>
+
+# Sample directory for Secretary only
+<Location /repos/private/documents/withdrawn>
+ AuthType Basic
+ AuthName "Secretary"
+ AuthBasicProvider ldap
+ AuthLDAPUrl "ldaps://<%= ldaphosts %>/ou=people,dc=apache,dc=org?uid"
+ AuthLDAPBindDN <%= ldapbinddn %>
+ AuthLDAPBindPassword "<%= ldapbindpw %>"
+ Require ldap-alias-secretary
</Location>
</VirtualHost>
