On 6/26/06, Jeb <jeb.beasley@penske.com> wrote:
> We are using Apache authentication/authorization to limit access, not
> subversion.
>
> Up until we got into this lock issue, this kind of authorization scheme
> is working well. The problem surfaced when users set the needs-lock
> property on files.
>
> As I understand, the mod_authz_svn mechanism does not do any pattern
> matching, and out tests indicate that if we have a rule for
> [repo/project/branches/dev]
> that is does not match
> repo/project/branches/dev/module/source.ext
>
> We have branches like dev_gh, dev_phase2, dev_pl and based on the
> parent project control access to group members for that group.
>
> When I request a lock, the apache logs show several authenticated
> propfinds, and then a LOCK request without the authentication token.
> (Log snippet attached to previous message)
Maybe:
/svn/ecomm/webprojects/autotest/branches/dev_gh/test.txt
doesn't match /ecomm/.*/webprojects? I think there's one forward slash too many?
HTH,
Erik.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Mon Jun 26 17:23:41 2006