Trac permissions

[ssabhcew@…]

Hi,
I have this situation:
We use only one repo in svn.
The authentication for trac and svn is one file.
For keep different subproject not to be seen by everybody, I'm using:

AuthzSVNAccessFile = /srv/svn/config/authz

And I've created groups and different permissions for different developers.

But I was surprizsd that when you log into trac, you can browse the source, that is forbidden for you in svn.

How can I made trac read the AuthzSVNAccessFile file and follow its permitions.
Or should I set somehow permitions on every subfolder/project in trac configs ?

[ssabchew@…]

Well it seams that trac 'understand' only permissions by location like that

Test
@dev = rw
@all = r

If you try to specify the repo like this:

[myrepo:/Test]
@dev = rw
@all = r

it get confused

Even in the apache config I specified:

<Location /trac>
...

PythonOption? TracEnvParentDir? /srv/trac

...
</Location>

As there will be possibility for using more than one trac.
And the svn config is configured for multiple repos, instead of only one (even for now we use one).
I use SVNParentPath instead SVNPath

P.S. I put a wrong mail when i made the ticket :-(

[sid]

Did you try updating to the latest version? It seems that this may not have been integrated in your version.... See also wiki:TracDev/SecurityBranch

[hyuga <hyugaricdeau@…>]

You need to point Trac to the authz file with the authz_file option in the [trac] section of your trac.ini file. At any rate, this is a configuration issue.