Subversion的权限问题。

floriawll

Subversion的用户在一台机器上第一次check out，要求输入用户名和密码，该用户名和密码就被记录下来，下次执行check out或commit等操作，不再被要求输入密码。

请问，subversion能不能像CVS那样，每执行一次操作就被要求输入密码？这样比较安全。

请指教。

dieken_qfz

Authentication
With CVS's pserver, you are required to “login” to the server before any read or write operation—you even have to login for anonymous operations. With a Subversion repository using Apache httpd or svnserve as the server, you don't provide any authentication credentials at the outset—if an operation that you perform requires authentication, the server will challenge you for your credentials (whether those credentials are username and password, a client certificate, or even both). So if your repository is world-readable, you will not be required to authenticate at all for read operations.

As with CVS, Subversion still caches your credentials on disk (in your ~/.subversion/auth/ directory) unless you tell it not to by using the --no-auth-cache switch.

The exception to this behaviors, however, is in the case of accessing an svnserve server over an SSH tunnel, using the svn+ssh:// URL schema. In that case, the ssh program unconditionally demands authentication just to start the tunnel.

// From:
Version Control with Subversion
For Subversion 1.2
(book compiled from Revision 1565)
Ben Collins-Sussman
Brian W. Fitzpatrick
C. Michael Pilato

dieken_qfz

另外此书的第七章建议你好好看看,这本书就在svn的源码树里头.

floriawll

谢谢回复。
我们的subversion是基于https://URL策略的。