Questions tagged [authz]

authz is a shorthand for "authorization" in a variety of development contexts.

authz is an abbreviation of authorization, the concept of giving permission to do something on behalf of an authenticated user.

The term authz is frequently used in relation to Apache's authentication and authorization modules, where authentication is abbreviated "authn".

53 questions
8
votes
1 answer

Authorization and microservices

Our system is moving from a monolithic to a microservice architecture. The microservice architecture comes with technical challenges that we need to address and one of them is AuthN/AuthZ. Our approach is to have an authentication service that would…
YoRCT83
  • 131
  • 5
8
votes
1 answer

Strange behaviour of mod_authz_svn

I've configured my svn server on apache2 like this: DAV svn SVNParentPath /path/to/SvnTest AuthType Basic AuthName "Subversion repository" AuthUserFile "/path/to/passwd" AuthzSVNAccessFile…
yihuang
  • 329
  • 2
  • 7
7
votes
3 answers

SVN authz, path-based authentication woes

[groups] developer = a,b,c doc = r,x [/doc] @doc = rw @developer = rw [/] @developer = rw * = If now a member of the group doc tries to check out the documentation, it does not work. I want members of doc just to be able to check out the sub-dir…
Ronny Brendel
  • 4,777
  • 5
  • 35
  • 55
6
votes
4 answers

VisualSVN Server password change

Has anyone come up with a way to allow remote users to change their own passwords in VisualSVN server? We have it running in 'stand-alone' (non-ActiveDirectory) mode and the only down side that I've found to this excellent product is that users…
Tim Long
  • 13,508
  • 19
  • 79
  • 147
4
votes
1 answer

SVN authz, path-based authentication on trunk / branch

I use authz files to restrict access to a svn server (projA, projB). I would like to use the same restrictions for the trunk and the branches. Is there a nice way of doing it, instead of copy/pasting the configurations: [/]
* =…
David
  • 41
  • 2
4
votes
1 answer

Keycloak uma-grant type tickets for service accounts do not seem to work with policies

I am trying to use the Keycloak AuthzClient to register resources and related permissions in a resource server. I have a resource server "resourceserver" with authz service enabled. Using the AuthzClient, initialized with the json file containing…
4
votes
2 answers

SVN Restrict File Access using Wildcards

I took over as software lead on a project and am now managing the SVN repository for said project. Access to different parts are being controlled with an authz file. Groups have been set up for developers, leads, testers and cm control. A file…
Steve Ankeny
  • 335
  • 5
  • 18
4
votes
1 answer

Linux : How to set up "global" user / passwords / groups file in svn

I'm trying to set up global user / group access to all my svn repositories on Linux. Since I am very new to svn / linux stuff can someone take a look at what I have set up. I still get a "Invalid authz configuration". Here is how I proceed : Svn…
Simmoniz
  • 1,080
  • 15
  • 27
3
votes
2 answers

Subversion Authz - Full Access to all except one

I have a subversion server for a client which uses a MySQL database to authenticate employees, and an AuthUserFile (htpasswd) to authenticate other users (vendors) into their repository. I need to grant full access to the employees * = rw and access…
Excalibur
  • 3,258
  • 2
  • 24
  • 32
3
votes
1 answer

svnedge: how to Discover Multiple "Repository Directory" locations and Authz files

I am implementing SVNEdge from collabnet in my organization. Currently, I have 80+ repositories scattered across 4 different locations on linux server. SVNEdge provides a field, named "Repository Directory:", to mention parent-location where all…
rohit
  • 485
  • 1
  • 7
  • 12
2
votes
0 answers

Subversion's path-based authorization Project Hosting

Is there any free project hosing service that provides path-based authorization ? Google code and Xp-Dev do not seem to support this feature. I need this feature since I'm teaching a subject where students can upload their assignments. However, one…
thd
  • 2,380
  • 1
  • 25
  • 33
2
votes
1 answer

PInvoke AuthzAccessCheck from c# giving error 87 : invalid parameter

I'm trying to a PInvoke of AuthzAccessCheck to work in my c# application and keep running into the error code 87 : invalid parameter. As an initial test I've been trying to follow the basic structure of the GetAccess routine from the example code…
mark
  • 213
  • 2
  • 9
2
votes
1 answer

SVN restrict access to everything but subdirectory

I have apache subversion 1.7.14 hosted on CentOS 7.4 and am having trouble getting path based authorization such that a restricted group to a specific branch, can navigate to the branch from the apache web server. The example structure…
Jacob Block
  • 435
  • 5
  • 15
2
votes
2 answers

SVN's authz and folder renaming

Say I want to prevent certain users form accessing certain folders in my SVN repo. I just do: [/] * = rw [/NewSecretFolder] * = rw some_poor_sap = But what if that folder was renamed from SecretFolder to NewSecretFolder? Will user some_poor_sap…
Simplex
  • 930
  • 1
  • 9
  • 20
2
votes
0 answers

svn checkout and r-w for collection of subdirectories

I need to give read-write access for a non-engineering group to certain directories inside our repository. Ideally, I would like for them to only have to check out this collection of directories as well, as opposed to the whole tree (but that part…
tanager
  • 189
  • 2
  • 10
1
2 3 4