AuthzSourcePolicy

This is the name of a permission policy enforcing access control in the TracBrowser and other source code access modules, implementing the same rules as Subversion's mod_authz_svn.so Apache module.

Usage

The syntax of the file used for configuring the access permissions and the operation mode of this policy are described in the ​Path-Based Authorization section of the ​Version Control with Subversion book.

In order to enable this policy, you need to edit the <tracenv>/conf/trac.ini file, and put in your [trac] section something like:

[trac]
authz_file = svn-authz.conf
;authz_module_name = somemodule

# Trac < 1.1.2
permission_policies = AuthzSourcePolicy,
 DefaultPermissionPolicy,
 LegacyAttachmentPolicy
# In Trac 1.1.2 and later
permission_policies = AuthzSourcePolicy,
 ReadonlyWikiPolicy,
 DefaultPermissionPolicy,
 LegacyAttachmentPolicy

For more details, see TracIni#trac-section or TracFineGrainedPermissions#AuthzSourcePolicy

Known issues

Ticket	Summary	Keywords	Version	Milestone
#5246	[PATCH] Use permission system to store groups for authz access control	patch svnauthz authzsourcepolicy	0.10-stable	next-major-releases
#12442	Support per-repository authz_file	svn svn17 authzsourcepolicy		next-major-releases
#12922	AuthzSourcePolicy doesn't deny viewing changeset on restricted path	authzsourcepolicy		next-stable-1.6.x

---

See also: TracFineGrainedPermissions#AuthzSourcePolicy, AuthzPolicy (the more general one, not just for source)