Re: Revision graph fails with restricted domain auth

David W. Wilson wrote:
> I am using TSVN with Collabnet Subversion Server (Apache) +
> mod_auth_sspi + mod_authz_svn.
>
> If my SVN user access configuration files reads
>
> ----------------------------------------------------
> [/]
> mydomain\mylogid = rw
> ----------------------------------------------------
>
> Then I am able to checkout, commit and revision graph any file through TSVN.
>
> However, if my config file reads
>
> ----------------------------------------------------
> [rep:/mydirectory]
> mydomain\mylogid = rw
> ----------------------------------------------------
>
> I am able to checkout and commit files within
> http://svnhost/svn/rep/mydirectory, but when I try to look at a revision
> graph such a file, I get the popup
>
> PROPFIND request failed on ‘/svn/rep’
> PROPFIND of ‘/svn/rep’: 403 Forbidden (http://svnhost)
>
> and the graph window says “No graph available”.
>
>
>
> In the Apache access.log I see:
>
> 192.255.255.255 - mydomain\\mylogid [17/Sep/2007:15:14:43 -0400]
> "PROPFIND /svn/rep HTTP/1.1" 403 320
>
> So, in order to draw the revision graph for a URL to which I do have
> access (e.g, http://svnhost/svn/rep/mydirectory/myfile.txt), the TSVN
> code apparently does a PROPFIND on a URL to which I do not have access
> (i.e, http://svnhost/svn/rep).
>
> Although I am using mod_auth_sspi, I’m guessing that this problem is
> bad juju between TortoiseSVN and mod_authz_svn, specifically, the TSVN
> revision graph code is going where it oughtta not go for graphing
> information.
>
> This same problem happens for me with TSVN versions both prior to and
> after the recent revision graph rewrite, and so I’m guessing it has
> nothing to do with that.
>
> So, is this a TSVN bug? A feature? A stupid setting I missed? If there
> is no easy setting to avoid this, can I play games in the SVN access
> file to grant users access to the http://svnhost/svn/rep repository root
> directory without granting them global repository access?

To generate the revision graph, TSVN must fetch the verbose log of the
repository root. It isn't enough to just get the log from the path you
request the graph for, it *must* be the repository root.
So, if you prevent read access to the repository root, it's not possible
to show the revision graph.

Stefan

-- 
        ___
   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest Interface to (Sub)Version Control
    /_/   \_\     http://tortoisesvn.net
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tortoisesvn.tigris.org
For additional commands, e-mail: users-help@tortoisesvn.tigris.org