What would I put there to limit everything? To require authentication for
even reads.
-----Original Message-----
From: Ben Collins-Sussman [mailto:sussman@collab.net]
Sent: Friday, January 16, 2004 3:50 PM
To: Gonia Eric - egonia
Cc: 'users@subversion.tigris.org'
Subject: RE: Unable to open root of edit
On Fri, 2004-01-16 at 12:25, Gonia Eric - egonia wrote:
> Where would I find this directory: "on the root directory of the update"
>
> Would this problem not show up in the web browser. I require
authentication
> for read access to the repository also.
>
> I'm not specifying to load mod_authz_svn.
> Attached is my subversion.conf file from httpd.
Yup, it's a problem with your <Location> block. You're using the
LimitExcept option on only 3 of the 4 'read' methods:
<LimitExcept PROPFIND OPTIONS REPORT>
[...]
Require valid-user
</LimitExcept>
You forgot to put 'GET' in there. In other words, clients can do
REPORTS and PROPFINDs and OPTIONS requests without any authentication,
but a simple GET requires authentication.
The authorization system happening with mod_dav_svn is simply checking
whether you have "read" access or not -- it *assuming* that GET is a
read action (it tries to do a dry-run GET under the hood to test). But
you've managed to leave GET out of the set of read-actions by accident.
Anyway, put the GET back in, and you should be fine.
**********************************************************************
The information contained in this communication is
confidential, is intended only for the use of the recipient
named above, and may be legally privileged.
If the reader of this message is not the intended
recipient, you are hereby notified that any dissemination,
distribution, or copying of this communication is strictly
prohibited.
If you have received this communication in error,
please re-send this communication to the sender and
delete the original message or any copy of it from your
computer system. Thank You.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Fri Jan 16 23:34:59 2004