2

We're using VisualSVN Server as SVN server in Windows. But it has very limited abilities for managing rights. Also we couldn't use svn_access_file because our users are going to be authenticated using Windows Authentication method.

Is there any tool to manage rights that uses/supports Windows Authentication?

bahrep
  • 29,961
  • 12
  • 103
  • 150
Sadegh
  • 4,181
  • 9
  • 45
  • 78
  • 1
    Limited abilities for managing rights? What exactly do you miss? You can always post your feedback at http://www.visualsvn.com/server/. – bahrep Feb 04 '13 at 11:04
  • 2
    Hire **good admin**, baby! – Lazy Badger Feb 04 '13 at 11:27
  • @bahrep For example Reporting ability :) Our Project Manager need to know which user has access to which part of repository. There is such tools like http://svn-access-manager.org but we want to prevent from engaging php/apache/mysql directly :) [We're lazy and we know it] – Sadegh Feb 04 '13 at 15:08
  • 2
    @Sadegh you can use WMI in Powershell or VBScript to format such *access rules* report. Create a new StackOverflow question and specify the reporting tool requirements and I'll try to help you. – bahrep Feb 04 '13 at 15:17
  • I think i can figure it out and doesn't seems that another question is required at this time :) I'll ask for help if there is any questions in future. – Sadegh Feb 04 '13 at 15:21
  • 1
    FYI: After upgrading to VisualSVN Server 3.4 you will be able to use new PowerShell cmdlets to manage Subversion repository access rules. Check the updated answer below. E.g. `Get-SvnAccessRule` will output the list of permissions assigned on all repositories and globally. – bahrep Sep 03 '15 at 11:23

2 Answers2

5

Update 03/09/2015:

Managing path-based authorization rules for Subversion repositories is now possible through PowerShell. Check VisualSVN Server | Scripting and Automation page.

VisualSVN Server 3.4 and newer provides PowerShell cmdlets for server and Subversion repositories administration. Therefore, to manage access rules and automate such kind of tasks, you can use the following cmdlets:

There are a lot of other PowerShell cmdlets introduced in VisualSVN Server 3.4. For the complete list of PowerShell cmdlets and usage examples, read the article VisualSVN Server PowerShell Cmdlet Reference.

Check SVNBook and VisualSVN KB article for description of path-based authorization. This is not Windows Access Control, it's path-based authorization and you should understand the difference in order to configure and manage access rules correctly and effectively.

I'm confused by the question, in fact. VisualSVN Server has a nice GUI implemented as MMC snap-in, allows you to manage svn users / groups and access right via a familiar GUI. When you use Windows Authentication you manage users and groups via standard Windows / Active Directory tools.

bahrep
  • 29,961
  • 12
  • 103
  • 150
  • It seems to me that we have to write a tool for implementing features like reporting on rights for an specific user; so WMI is one of choices we have to deal with. Thanks – Sadegh Feb 04 '13 at 15:16
  • 1
    @Sadegh Upgrade to VisualSVN Server 3.4 and run the command `Get-SvnAccessRule -AccountName DOMAIN\username`. You will get the list of access rules for a user `DOMAIN\username`. – bahrep Sep 03 '15 at 11:25
2

it has very limited abilities for managing rights

It has all abilities, that Subversion has per se.

we couldn't use svn_access_file

You can and must really, because Windows Authentication define only method of authentication, svn_access_file is authorization file and can refer and use usernames, obtained at authentication stage.

bahrep
  • 29,961
  • 12
  • 103
  • 150
Lazy Badger
  • 94,711
  • 9
  • 78
  • 110
  • I know that there is authz file under %Repositories% dir, but not about authz-windows :P For limited abilities refer to comment replied to @bahrep – Sadegh Feb 04 '13 at 15:11