[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Access denied error on update

From: Svetoslav (Sunny) Milenov <sloncho_at_gmail.com>
Date: Fri, 13 Mar 2009 09:38:39 -0700 (PDT)

Hi,
there is a bug in the new 1.5.9.15518, which does not exists in 1.5.4.14259.

Bug summary:
A user with read/write permission on a project receives 403 Access Denied when trying to update to head.

Steps to reproduce:
Pre-requisites: apache2+svn(1.5.1) repository, TortoiseSVN 1.5.9.15518
1. Create a user with rw access on a project (project MyProject), but not on the root of the repository
2. Using TortoiseSVN, checkout some previous revision (not HEAD)
3. Update

Expected result: update succeeds (and it does with ver. 1.5.4)

Actual result:
fails with: Server sent unexpected return value (403 Forbidden) in response to OPTIONS

In the apache error.log I see:
"OPTIONS /svn/MyRepo/MyProject/trunk HTTP/1.1" 200 - "-" "SVN/1.5.6 (r36142)/TortoiseSVN-1.5.9.15518 neon/0.28.4"
then some lines like this:
"PROPFIND /svn/MyRepo/MyProject/trunk HTTP/1.1" 207 732 "-" "SVN/1.5.6 (r36142)/TortoiseSVN-1.5.9.15518 neon/0.28.4"

and then this:
"OPTIONS /svn/MyRepo HTTP/1.1" 401 603 "-" "SVN/1.5.6 (r36142)/TortoiseSVN-1.5.9.15518 neon/0.28.4"
"OPTIONS /svn/MyRepo HTTP/1.1" 403 415 "-" "SVN/1.5.6 (r36142)/TortoiseSVN-1.5.9.15518 neon/0.28.4"

So, for some reason TortoiseSVN tries to read the root of the repository, and that user has no read access there. Adding a read access to the user for the root solves the problem, but I do not want to do that.

Looking at the access.log file, when using the older version - 1.5.4 does not show request for the root.

Same happens if the user checks out the head, then someone else commits a change, and the first user tries to update.

------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=1317853

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2009-03-13 17:39:10 CET

This is an archived mail posted to the TortoiseSVN Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.