版本管理：Subversion Edge：权限设定示例

谁借莪１个温暖的怀抱￠ 2022-12-01 05:12 312阅读 0赞

![在这里插入图片描述][20160803220353774_pic_center_pic_center_pic_center_pic_center]

### 目录 ###

*  内置角色和权限
 *  多仓库权限配置
 *  环境和事前准备
 *  权限设定规则
 *  权限设定示例
 *  设定权限验证
 *  总结

--------------------

# 内置角色和权限 #

*  [https://liumiaocn.blog.csdn.net/article/details/108212941][https_liumiaocn.blog.csdn.net_article_details_108212941]

# 多仓库权限配置 #

Subversion的多仓库权限配置方式可参看如下文章，简单来说权限控制的文件是放在仓库内还是仓库外，放在仓库内不会影响其他项目，放在仓库外能避免重复操作，比如同一个用户在多个仓库中都有权限的情况。

*  [https://blog.csdn.net/liumiaocn/article/details/82013614][https_blog.csdn.net_liumiaocn_article_details_82013614]

Subversion Edge显然是放到外边的。Access Roles和Repository List是并列的并不是点击进入特定的Repository之后才能够进行设定的。从安装目录中也可以看到, svn\_access\_file文件的内容就是从Access Roles页面能够看到和修改的全部。

[root@liumiaocn data]# ls
    certs                               csvn-production-hsqldb.tmp               dumps
    conf                                csvn-stats-production-hsqldb.data        logs
    csvn-backup-hsqldb-5f41326f.tar.gz  csvn-stats-production-hsqldb.lck         repositories
    csvn-production-hsqldb.lck          csvn-stats-production-hsqldb.log         run
    csvn-production-hsqldb.log          csvn-stats-production-hsqldb.properties  svn_client_config
    csvn-production-hsqldb.properties   csvn-stats-production-hsqldb.script      teamforge
    csvn-production-hsqldb.script       csvn-stats-production-hsqldb.tmp
    [root@liumiaocn data]# cd conf
    [root@liumiaocn conf]# ls
    csvn-wrapper.conf             ctf_httpd.conf                                 security.properties.org
    csvn.conf                     httpd.conf                                     svn_access_file
    csvn.conf.dist                init_as_integration_server.properties.example  svn_auth_file
    csvn_default_dirs_httpd.conf  magic                                          svn_viewvc_httpd.conf
    csvn_logging.conf             mime.types                                     teamforge.properties
    csvn_main_httpd.conf          mimetypes.conf                                 viewvc.conf
    csvn_misc_httpd.conf          mimetypes.conf.dist
    csvn_modules_httpd.conf       security.properties
    [root@liumiaocn conf]#

*  [https://blog.csdn.net/liumiaocn/article/details/82013614][https_blog.csdn.net_liumiaocn_article_details_82013614]

--------------------

# 环境和事前准备 #

Subversion Edge环境准备和仓库创建的操作可参看如下文章：

*  [https://liumiaocn.blog.csdn.net/article/details/108212511][https_liumiaocn.blog.csdn.net_article_details_108212511]
 *  准备如下两个仓库  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpdW1pYW9jbg_size_16_color_FFFFFF_t_70_pic_center]
 *  准备如下三个用户  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpdW1pYW9jbg_size_16_color_FFFFFF_t_70_pic_center 1]

--------------------

# 权限设定规则 #

权限设定非常简单，主要的相关知识点如下所示：

*  权限设定分为两种：按用户权限设定或者按组权限设定
 *  用户的创建通过Subversion Edge的页面进行，直接使用svn的相应的命令创建
 *  组在配置文件\[groups\]段中进行设定
 *  组文件设定的格式为：组名 = 用户1,用户2,用户3
 *  组文件中的用户名需要是实际事先存在的用户
 *  权限设定的格式为在不同的仓库的段中进行
 *  权限设定的代码仓库的段的格式为：\[仓库名:目录名\]
 *  权限设定中的目录名为相对于仓库根目录的目录
 *  权限设定中的目录在实际使用中可以设定为不同的子目录
 *  权限设定中如果对不同目录设定不同权限，某一特定用户或者组对某子目录进行操作，首先必须拥有其父目录的权限，因为此处容易被设定为不一致，导致用户无法正常访问
 *  权限设定中组和用户的设定格式为：组或者用户名 = 权限列表
 *  权限设定中的权限列表一般只有：r、rw两种
 *  权限设定中的组在使用时，对某一个特定组设定权限时需要加上@，用户设定时不需要
 *  权限设定时可使用\*表示所有的用户或者组
 *  权限设定时可在第一句使用\*=将右项设空来将所有人的权限取消，然后其后的权限就是所有权限
 *  权限设定时的\[仓库名:目录名\]，可以用\[/\]表示为对于所有仓库

--------------------

# 权限设定示例 #

[/]
    @group_admin = r
    
    [demo-repo:/]
    *=
    admin = rw
    dev_user_001 = r
    
    [test-repo:/]
    @group_dev = rw
    
    [groups]
    group_dev = dev_user_001, dev_user_002
    group_admin = admin

进入到平台之中，会发现上述设定内容正是如下文件的内容：

[root@liumiaocn ~]# cd /opt/subversion/csvn/d
    data/ dist/ 
    [root@liumiaocn ~]# cd /opt/subversion/csvn/data/conf
    [root@liumiaocn conf]# ls
    csvn-wrapper.conf             ctf_httpd.conf                                 security.properties.org
    csvn.conf                     httpd.conf                                     svn_access_file
    csvn.conf.dist                init_as_integration_server.properties.example  svn_auth_file
    csvn_default_dirs_httpd.conf  magic                                          svn_viewvc_httpd.conf
    csvn_logging.conf             mime.types                                     teamforge.properties
    csvn_main_httpd.conf          mimetypes.conf                                 viewvc.conf
    csvn_misc_httpd.conf          mimetypes.conf.dist
    csvn_modules_httpd.conf       security.properties
    [root@liumiaocn conf]# cat svn_access_file 
    [/]
    @group_admin = r
    
    [demo-repo:/]
    *=
    admin = rw
    dev_user_001 = r
    
    [test-repo:/]
    @group_dev = rw
    
    [groups]
    group_dev = dev_user_001, dev_user_002
    group_admin = admin[root@liumiaocn conf]#

--------------------

# 设定权限验证 #

*  admin权限确认：demo-repo的读写，test-repo的只读

[root@liumiaocn ~]# svn checkout http://192.168.163.121/svn/test-repo/trunk test-repo --username admin
    svn: warning: cannot set LC_CTYPE locale
    svn: warning: environment variable LC_CTYPE is UTF-8
    svn: warning: please check that your locale name is correct
    Authentication realm: <http://192.168.163.121:80> CollabNet Subversion Repository
    Password for 'admin': 
    
    -----------------------------------------------------------------------
    ATTENTION!  Your password for authentication realm:
    
       <http://192.168.163.121:80> CollabNet Subversion Repository
    
    can only be stored to disk unencrypted!  You are advised to configure
    your system so that Subversion can store passwords encrypted, if
    possible.  See the documentation for details.
    
    You can avoid future appearances of this warning by setting the value
    of the 'store-plaintext-passwords' option to either 'yes' or 'no' in
    '/root/.subversion/servers'.
    -----------------------------------------------------------------------
    Store password unencrypted (yes/no)? yes
    Checked out revision 1.
    [root@liumiaocn ~]# svn checkout http://192.168.163.121/svn/demo-repo/trunk demo-repo --username admin
    A    demo-repo/ReadME.md
    Checked out revision 5.
    [root@liumiaocn demo-repo]# echo "add for root test " >> ReadME.md 
    [root@liumiaocn demo-repo]# svn commit -m "add for root test"
    [root@liumiaocn demo-repo]# cd ..
    [root@liumiaocn ~]# cd test-repo/
    [root@liumiaocn test-repo]# ls
    [root@liumiaocn test-repo]# touch TEST
    [root@liumiaocn test-repo]# svn add TEST
    A         TEST
    [root@liumiaocn test-repo]# svn commit -m "add for admin test"
    svn: E175013: Commit failed (details follow):
    svn: E175013: Access to '/svn/test-repo/!svn/me' forbidden
    [root@liumiaocn test-repo]#

*  dev\_user\_001权限验证

[root@liumiaocn user001]# svn checkout http://192.168.163.121/svn/test-repo/trunk test-repo --username dev_user_001
    Authentication realm: <http://192.168.163.121:80> CollabNet Subversion Repository
    Password for 'dev_user_001': 
    
    -----------------------------------------------------------------------
    ATTENTION!  Your password for authentication realm:
    
       <http://192.168.163.121:80> CollabNet Subversion Repository
    
    can only be stored to disk unencrypted!  You are advised to configure
    your system so that Subversion can store passwords encrypted, if
    possible.  See the documentation for details.
    
    You can avoid future appearances of this warning by setting the value
    of the 'store-plaintext-passwords' option to either 'yes' or 'no' in
    '/root/.subversion/servers'.
    -----------------------------------------------------------------------
    Store password unencrypted (yes/no)? yes
    Checked out revision 1.
    [root@liumiaocn user001]# svn checkout http://192.168.163.121/svn/demo-repo/trunk demo-repo --username dev_user_001
    A    demo-repo/ReadME.md
    Checked out revision 6.
    [root@liumiaocn user001]#

*  dev\_user\_002权限验证

[root@liumiaocn user001]# cd ../user002
    [root@liumiaocn user002]# ls
    [root@liumiaocn user002]# svn checkout http://192.168.163.121/svn/demo-repo/trunk demo-repo --username dev_user_002
    Authentication realm: <http://192.168.163.121:80> CollabNet Subversion Repository
    Password for 'dev_user_002': 
    svn: E175013: Unable to connect to a repository at URL 'http://192.168.163.121/svn/demo-repo/trunk'
    svn: E175013: Access to 'http://192.168.163.121/svn/demo-repo/trunk' forbidden
    [root@liumiaocn user002]# 
    [root@liumiaocn user002]# svn checkout http://192.168.163.121/svn/test-repo/trunk test-repo --username dev_user_002
    Authentication realm: <http://192.168.163.121:80> CollabNet Subversion Repository
    Password for 'dev_user_002': 
    
    -----------------------------------------------------------------------
    ATTENTION!  Your password for authentication realm:
    
       <http://192.168.163.121:80> CollabNet Subversion Repository
    
    can only be stored to disk unencrypted!  You are advised to configure
    your system so that Subversion can store passwords encrypted, if
    possible.  See the documentation for details.
    
    You can avoid future appearances of this warning by setting the value
    of the 'store-plaintext-passwords' option to either 'yes' or 'no' in
    '/root/.subversion/servers'.
    -----------------------------------------------------------------------
    Store password unencrypted (yes/no)? yes
    Checked out revision 1.
    [root@liumiaocn user002]#

# 总结 #

[20160803220353774_pic_center_pic_center_pic_center_pic_center]: /images/20221123/acccd896f5e14cb484dfb22da3b720b3.png
[https_liumiaocn.blog.csdn.net_article_details_108212941]: https://liumiaocn.blog.csdn.net/article/details/108212941
[https_blog.csdn.net_liumiaocn_article_details_82013614]: https://blog.csdn.net/liumiaocn/article/details/82013614
[https_liumiaocn.blog.csdn.net_article_details_108212511]: https://liumiaocn.blog.csdn.net/article/details/108212511
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpdW1pYW9jbg_size_16_color_FFFFFF_t_70_pic_center]: /images/20221123/dfdd113c5dee40a3aefca666d6e3a519.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpdW1pYW9jbg_size_16_color_FFFFFF_t_70_pic_center 1]: /images/20221123/99b2360c6dc24b98aac776c26d94e264.png