fisheye - subversion security

tzigone

Hi,

How and where does Fisheye keep Subversion user name and password? It is not preferred that one user logs in to Subversion and access code base in case user name and password are revealed.

How does Fisheye deal with security issues in general?

Thanks,

Felipe Kraemer

Hi Burcu,

FishEye stores repository configuration information, such as username and password, in <FishEye_Home_Directory>/config.xml. This is a sample SVN configuration found in config.xml:

<repository name="SVN" description="This is a sample SVN repo" store-diff="true" enabled="true">
   <svn url="file:///C:/Repositories/SVN" path="" follow-base="false" initial-import="none">
      <symbolic auto-rules="true"/>
      <auth username="the_repo_user_name" password="the_repo_user_pwd"/>
   </svn>
   <linker/>
   <security use-defaults="true" allow-anon="false" allow-logged-in="false" allow-anon-write="false" allow-logged-in-write="false">
      <required-groups/>
	  <required-write-groups/>
   </security>
</repository>

Cheers,
Felipe Kraemer