Apache subversion LDAP group access per folder inside 1 repo

Question

I have been messing around with WANdisco subversion for a week already. Here are the best links that helped:

http://www.jejik.com/articles/2007/06/apache_and_subversion_authentication_with_microsoft_active_directory/

http://blog.chadwestfall.com/2007/11/subversion-apache-active-directory.html

The problem is, all the information i find from internet is about Group per Repo access.

I need Group per repo folder access. By that i mean i need to limit access inside 1 repo.

Repo1\Folder1 -- Access to everyone authenticated in AD

Repo1\Folder1\Subfolder -- Access to certain AD group only - Group1

Repo1\Folder2 -- Access to certain AD group only - Group2

Repo1\Folder3 -- Access to multiple AD groups only - Group1+Group2

Is this possible and if yes, how to achieve it?

I got normal LDAP auth working but not with subfolders :(

Answer 1

This will not work out of the box.. Paths in Subversion Repositories are not known to Apache And Subversion gets only a username from Apache, so SVN does not know about the LDAP Groups.

However you can write a small script importing the LDAP groups into your SVN-authz file and write the appropriate groups into the first lines of your authz file.

You can use a cron job to import changes on LDAP groups to authz file on a timely base.