Re: Authz on Collection of Repositories (was: Expansion of authz policy name leak)

2012-10-23 Thread Daniel Shahaf
Daniel Shahaf wrote on Wed, Oct 24, 2012 at 06:07:45 +0200: > Roderich Schupp wrote on Wed, Oct 24, 2012 at 00:54:07 +0200: > > On Wed, Oct 24, 2012 at 12:08 AM, Thomas Åkesson wrote: > > > Are you saying that SVN 1.7 always allows browsing the root but it is > > > empty > > > when the user lacks

Re: Authz on Collection of Repositories (was: Expansion of authz policy name leak)

2012-10-23 Thread Daniel Shahaf
Roderich Schupp wrote on Wed, Oct 24, 2012 at 00:54:07 +0200: > On Wed, Oct 24, 2012 at 12:08 AM, Thomas Åkesson wrote: > > Are you saying that SVN 1.7 always allows browsing the root but it is empty > > when the user lacks authz? > > Yes - for a "standalone" repository (i.e. one specified with S

Re: Authz on Collection of Repositories (was: Expansion of authz policy name leak)

2012-10-23 Thread Roderich Schupp
On Wed, Oct 24, 2012 at 12:08 AM, Thomas Åkesson wrote: > Are you saying that SVN 1.7 always allows browsing the root but it is empty > when the user lacks authz? Yes - for a "standalone" repository (i.e. one specified with SVNPath, _not_ with SVNParentPath) Cheers, Roderich

Re: Authz on Collection of Repositories (was: Expansion of authz policy name leak)

2012-10-23 Thread Thomas Åkesson
On 23 okt 2012, at 14:22, roderich.sch...@gmail.com wrote: > I'm working on the patch to list only readable repositories. There is > already TODO comment in the code by cmpilato: > subversion\mod_dav_svn\repos.c:3461 > Thanks Ivan for looking into it. Let's see if it is feasible to address.

Re: [Issue 4225] Add --include-externals option to 'svn list'

2012-10-23 Thread Ben Reser
On Tue, Oct 23, 2012 at 9:58 AM, vijay wrote: > Hi, > > I am working on patch to add '--include-externals' option to 'svn list' > [Issue #4225]. > > Let me try to answer few questions in the issue comment [1]. > Please correct me if I am wrong. > > 1. What happens with externals inside of external

Re: [Issue 4225] Add --include-externals option to 'svn list'

2012-10-23 Thread C. Michael Pilato
On 10/23/2012 01:46 PM, Bert Huijben wrote: > Before looking at the details some questions about the issue space: > > How do you handle externals that are stored in svn:externals many directory > levels up? (Or even defined from above the current external) > > How do you handle externals between

RE: [Issue 4225] Add --include-externals option to 'svn list'

2012-10-23 Thread Bert Huijben
> -Original Message- > From: vijay [mailto:vi...@collab.net] > Sent: dinsdag 23 oktober 2012 16:59 > To: Subversion Development > Subject: [Issue 4225] Add --include-externals option to 'svn list' > > Hi, > > I am working on patch to add '--include-externals' option to 'svn list' > [Iss

[Issue 4225] Add --include-externals option to 'svn list'

2012-10-23 Thread vijay
Hi, I am working on patch to add '--include-externals' option to 'svn list' [Issue #4225]. Let me try to answer few questions in the issue comment [1]. Please correct me if I am wrong. 1. What happens with externals inside of externals? Are they also listed? Does recursion stop at some point?

Re: svn commit: r1400423 - /subversion/trunk/subversion/libsvn_fs_fs/structure

2012-10-23 Thread Stefan Fuhrmann
On Sun, Oct 21, 2012 at 10:33 PM, Daniel Shahaf wrote: > stef...@apache.org wrote on Sat, Oct 20, 2012 at 11:47:11 -: > > Author: stefan2 > > Date: Sat Oct 20 11:47:10 2012 > > New Revision: 1400423 > > > > URL: http://svn.apache.org/viewvc?rev=1400423&view=rev > > Log: > > * subversion/libsvn

Re: svnserve, virtual hosts, and an open ticket from 2008

2012-10-23 Thread Stefan Fuhrmann
On Wed, Oct 10, 2012 at 6:30 PM, C. Michael Pilato wrote: > On 10/10/2012 11:44 AM, Stefan Fuhrmann wrote: > > That ticket provides "virtual hosts" for svnserve (in the spirit of > > HTTP's Host: header). The patch looks pretty straightforward; it > seems > > that all the information i

Re: Authz on Collection of Repositories (was: Expansion of authz policy name leak)

2012-10-23 Thread Branko Čibej
On 23.10.2012 13:48, Stefan Sperling wrote: > On Tue, Oct 23, 2012 at 04:29:51PM +0400, Ivan Zhakov wrote: I'm working on the patch to list only readable repositories. There is already TODO comment in the code by cmpilato: subversion\mod_dav_svn\repos.c:3461 [[[ /* ###

Re: Authz on Collection of Repositories (was: Expansion of authz policy name leak)

2012-10-23 Thread C. Michael Pilato
On 10/23/2012 08:48 AM, Stefan Sperling wrote: > On Tue, Oct 23, 2012 at 04:29:51PM +0400, Ivan Zhakov wrote: I'm working on the patch to list only readable repositories. There is already TODO comment in the code by cmpilato: subversion\mod_dav_svn\repos.c:3461 [[[ /* #

Re: Authz on Collection of Repositories (was: Expansion of authz policy name leak)

2012-10-23 Thread Stefan Sperling
On Tue, Oct 23, 2012 at 04:29:51PM +0400, Ivan Zhakov wrote: > >> I'm working on the patch to list only readable repositories. There is > >> already TODO comment in the code by cmpilato: > >> subversion\mod_dav_svn\repos.c:3461 > >> [[[ > >> /* ### TODO: We could test for readability of the ro

Re: Authz on Collection of Repositories (was: Expansion of authz policy name leak)

2012-10-23 Thread Ivan Zhakov
On Tue, Oct 23, 2012 at 4:23 PM, C. Michael Pilato wrote: > On 10/23/2012 07:24 AM, Ivan Zhakov wrote: >> I'm working on the patch to list only readable repositories. There is >> already TODO comment in the code by cmpilato: >> subversion\mod_dav_svn\repos.c:3461 >> [[[ >> /* ### TODO: We cou

Re: Authz on Collection of Repositories (was: Expansion of authz policy name leak)

2012-10-23 Thread C. Michael Pilato
On 10/23/2012 07:24 AM, Ivan Zhakov wrote: > I'm working on the patch to list only readable repositories. There is > already TODO comment in the code by cmpilato: > subversion\mod_dav_svn\repos.c:3461 > [[[ > /* ### TODO: We could test for readability of the root > directory of eac

Re: Authz on Collection of Repositories (was: Expansion of authz policy name leak)

2012-10-23 Thread roderich.sch...@gmail.com
> > I'm working on the patch to list only readable repositories. There is > already TODO comment in the code by cmpilato: > subversion\mod_dav_svn\repos.c:3461 > Please keep in mind that the problem is not restricted to parent-path collections of repositories: Since SVN 1.7 any user can "list

Re: Authz on Collection of Repositories (was: Expansion of authz policy name leak)

2012-10-23 Thread Ivan Zhakov
On Thu, Oct 18, 2012 at 2:06 PM, Thomas Åkesson wrote: > There was a discussion in April 2010 regarding the "fix" for issue 2753. > http://svn.haxx.se/dev/archive-2010-04/0277.shtml > [...] > > During the 2010 discussion Mike suggested something that we (Simonsoft) > would be very happy to see im

Re: PGP Keys

2012-10-23 Thread Ben Reser
On Fri, Oct 5, 2012 at 5:10 PM, Ben Reser wrote: > Given that we're coming up on a couple of opportunities for various > developers to get together an potentially sign keys I thought I'd > bring this subject up. > > 1) SHA-1 based keys should be migrated off of. The US Government's > requirement