[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

path-based access control issues

From: chris burgess <xurizaemon_at_gmail.com>
Date: Wed, 25 Nov 2009 00:32:15 +1300

I've been accessing Subversion fine by both HTTP (apache2) and SSH until
today, when I had a need to restrict a user to a specific directory. I can't
work out how to configure SVN to do this and have it work. I'm basing my
config on the instructions at
http://svnbook.red-bean.com/en/1.4/svn.serverconfig.pathbasedauthz.html

If I use a path directive like [reponame:/] it works as expected. If I use a
path directive like [/] it works as expected.

But if I use a path directive like [reponame:/path/to/dir/] then it returns
a 403 against the OPTIONS request when auth details are provided. I can
reliably reproduce the issue by removing any path elements beyond a simple
[reponame:/].

System is Debian Etch. Apache is 2.2.3-4+etch11. SVN is 1.4.2dfsg1-3. Tested
with various SVN clients on OSX and Ubuntu.

/home/www-home/svn.example.org/control reads -
[groups]
example = chris
client = sally, fred
[example:/]
chris = rw
[client:/sites/example.com/]
sally = rw
[client:/]
fred = rw

Sally will not have access to
http://svn.example.org/client/sites/example.com/ but Fred will.

Apache config reads -
<VirtualHost *>
ServerAdmin info_at_svn.example.org
ServerName svn.example.org
<Location /repos>
Options Indexes FollowSymLinks MultiViews
DAV svn
SVNParentPath /home/SVN
SVNListParentPath on
SVNIndexXSLT "http://svn.example.org/svnindex.xsl"
AuthzSVNAccessFile /home/www-home/svn.example.org/control
# anonymous first
Satisfy Any
Require valid-user
# authenticating them valid ones
AuthType Basic
AuthName "EO Subversion"
AuthUserFile /home/www-home/svn.example.org/passwd
</Location>
Alias /svnindex.xsl /var/www/apache2-default/svnindex.xsl
Alias /svnindex.css /var/www/apache2-default/svnindex.css
ErrorLog /var/log/apache2/error.log
CustomLog /var/log/apache2/sites/svn.log combined
        CustomLog /var/log/apache2/svn_log "%t %u %{SVN-ACTION}e"
env=SVN-ACTION
# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel warn
ServerSignature On
php_value sendmail_from info_at_example.org
</VirtualHost>

Can anyone point me in the right direction please?

I did spot this which reports similar symptoms, but doesn't shed much
light: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504710

Thanks in advance!

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2423776

Please start new threads on the <users_at_subversion.apache.org> mailing list.
To subscribe to the new list, send an empty e-mail to <users-subscribe_at_subversion.apache.org>.
Received on 2009-11-24 12:33:55 CET

This is an archived mail posted to the Subversion Users mailing list.