Our production SVN server is configured to not allow Anonymous access and users are always authenticated against our AD groups.
Currently, any authenticated user can read and write to the entire repo. We would like to now restrict write access to certain parts of the SVN tree. This is not a problem of not trusting our team, it is an external audit requirement and we have to comply.
Based on http://svnbook.red-bean.com/en/1.7/svn.serverconfig.pathbasedauthz.html we can only specify a list of individual users within the access control file. Instead of maintaining a long list of users within this file, we would like to simply create new AD group and mention the AD group name within this file. This way control over who gets to be part of the group is external to SVN and we don't have to keep on modifying this file every time people are added or removed. Is there a way this can be done by specifying a list of AD groups instead of user lists?
We are using SVN 1.9.5, Apache 2.2.32 (Win64) and Windows 2012 R2.