Re: mod_authz_svn: Failed Authorization During COPY, RENAME, MOVE (due to extra copy?)

On Thu, Aug 03, 2006 at 02:10:04PM -0500, Ben Collins-Sussman wrote:
> On 8/3/06, C. Michael Pilato <cmpilato@collab.net> wrote:
>
> >Just a guess: one request checks write perms on the copy target, one
> >checks
> >read perms on the copy source.

Strange that we appear to check the target before the source. And the
user appears to be in a group called 'repo_SVN Administrator' that has
'rw' on the repository root. (Can groups contain spaces?)

Also, '*' has read access - is that 'all users' or 'all non-anonymous
users' (I know, I should know that), it's the hypothesised read subrequest
that appears to be failing.

>
> ... and the GET subrequest (for the read check) has no username,
> because of the <LimitExcept> block...
>

Oh, I assumed the 'COPY' text in the log was the method used in the
subrequest? The arguments in the subrequest certainly appear to contain
both source and destination -- why would we generate two subrequests?

Regards,
Malcolm

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Thu Aug 3 22:35:26 2006