Trac doesn't care about SVN authz permission

[ploum@…]

You can set a subversion repository so that some users have no read-access in some subfolders.

This can be useful if, for example, you want to work secretely on some part of the project or if you have to store password and things like that or simply that some part of the project are just too personnal.

But Trac does not care about that svn.authz file and every trac user that has browse_source right can see the whole svn repository.

This is, IMHO, a bug and it could be very annoying if the user is not aware of this bug and doesn't test his trac installation.

[Noah Kantrowitz <coderanger@…>]

Just use the authz_file option in trac.ini.

[anonymous]

And is documented in FineGrainedPermissions. That page probably needs to be made easier to find in the documation. Possibly using a small section in TracPermissions instead of a see also note at the bottom? Or maybe an entry on the main index?

[ploum@…]

indeed, I was not aware about this option. It works very well, thanks :-)