SVN authz file not working when checkout on the same server

[张乾龙]

When I create svn proj on a server, I modify authz and svnserve.conf to control the access of other users, but after I tried many times and found: On the same server, other user can use 'svn co file:///path/to/my/proj' to checkout the svn proj without passwd even I config all users have no authority to access my svn proj! Of cause, if other users on the same server using 'svn co svn://' checkout my proj, the passwd and authority are needed.


Have I missed something when using SVN? Thanks!

[Branko Čibej]

Post by 张乾龙
When I create svn proj on a server, I modify authz and svnserve.conf to control the access of other users, but after I tried many times and found: On the same server, other user can use 'svn co file:///path/to/my/proj' to checkout the svn proj without passwd even I config all users have no authority to access my svn proj! Of cause, if other users on the same server using 'svn co svn://' checkout my proj, the passwd and authority are needed.
Have I missed something when using SVN? Thanks!

This is exactly as designed. You should restrict permissions on the
filesystem where the repositories are stored so that only the 'svnserve'
process user can read and write them.

-- Brane