[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Writing on subfolder requires read access on repository root

From: Hyrum K. Wright <hyrum_at_hyrumwright.org>
Date: Fri, 20 Nov 2009 16:32:18 -0600

On Nov 20, 2009, at 3:48 PM, Srinivas Peddi wrote:

> Hi,
>
> Really need help. We are migrating from CVS to SVN. The problem I encountering is it requiring read access at root level even when the user need write access at sub folder/directory level. So unable to restrict access to other folders/directories.
>
> Here are the details:
> SVN Version : 1.6.2
> Implementation : Apache + SVN and Active directory based authentication. (AuthType sspi and using AuthzSVNAccessFile)
> Environment : Windows 2003 server
>
> /
> /Project1
> /Subproject1
> /Project2
> /SubProject2
>
> Example :
> Two users : User1 & User2
>
> When the User1 needs write access to /Project2, I have to give him read access at root level too. Otherwise that User1 cannot even get it in to the repository. Since we need to implement strict access levels for the modules in the repository, other groups or users are not supposed to even read other modules.
>
> Here is the Authorization.conf file.
>
> [groups]
> Test1 = User1
> Test2 = User2
>
> [/]
> * = r
>
> [/Project2]
> @Test1 = rw
>
> I looked at mailing lists and archives and found that this was fixed in release 1.3.2 (Issue Id 2486). Am I doing something wrong here, why I am getting same error in 1.6.2? Any help is greatly appreciated.

Do you think this is part of issue #3242:
http://subversion.tigris.org/issues/show_bug.cgi?id=3242

There is a potential fix being developed, but there is not yet an expected release date for this fix.

-Hyrum

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2422580

Please start new threads on the <users_at_subversion.apache.org> mailing list.
To subscribe to the new list, send an empty e-mail to <users-subscribe_at_subversion.apache.org>.
Received on 2009-11-20 23:33:06 CET

This is an archived mail posted to the Subversion Users mailing list.