Hi,
since I am currently falling over this issue (see below) with
subversion 1.3.2, I wonder if this has been resolved in 1.4?
Norbert
2006/1/15, David Anderson <david.anderson@calixo.net>:
> On Monday 02 January 2006 20:16, ESSI - Billie H. Cleek wrote:
> > After 'SVNListParentPath on' does not list the repositories on our
> > server; I get a 403 Forbidden error, but the contents of each repository
> > displays fine. Permissions for the SVNParentPath are set correctly (the
> > same as for all subdir of SNVParentPath). Any ideas on why I can't just
> > flip the switch to turn on SVNListParentPath?
>
> This is a problem due to the behaviour of authz, which incorrectly takes
> authority over the root of the SVNParentPath area and denies access. This is
> a bug.
>
> I have investigated the problem and tracked it down to what I believe is an
> incorrect behaviour of dav_svn_split_uri (in mod_dav_svn/repos.c). When it
> encounters a relative (within the Location root) path equal to "/", it
> returns a 403 error and logs "No repository was given in the URI". The
> following patch corrects this, and makes it return giving a NULL repos_name,
> to indicate the URI refers to no repository.
>
> This, along with a small test in mod_authz_svn, allows the latter to disregard
> accesses to the root of the SVNParentPath.
>
> However, I ran into a problem while working on this. At first, I wanted
> mod_authz_svn to return DECLINED for requests to the ParentPath root, but
> that translated to 403 in my apache setup, and I was unable to change that.
> How would a user configure HTTPd to translate DECLINED into OK just for that
> path (and keep the default DENY for everything else) ?
>
> The patch I ended up with is attached. Notice that it currently returns OK for
> the parent path instead of DECLINED, because of the reasons stated above. I
> have not yet checked for side-effects in other places where dav_svn_split_uri
> is used, so please don't commit this patch. I'm submitting it for review and
> approval on the concept of the fix. If it seems okay, I'll wrap up the
> verifications and modifications before commiting.
>
> - Dave.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: dev-help@subversion.tigris.org
>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Fri Sep 15 10:17:03 2006