[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: Path based authorization not working

From: Joost van Dongen <tsgoo_at_hotmail.com>
Date: Wed, 5 Mar 2008 10:07:12 +0100

That seems to make sense, but I do not get it to work. The problem is that the repository contains confidential information, so I need to go from r to none on some folders. I tried this, but Test can now get everything, instead of just the Banana folder:
 
[/]* = rw[SVNRepository:/Other projects/]Test =[SVNRepository:/Banana/]Test = rw
 
What is wrong here?

Subject: RE: Path based authorization not workingDate: Tue, 4 Mar 2008 09:13:36 -0800From: kmcknight_at_vitria.comTo: tsgoo_at_hotmail.com; users_at_subversion.tigris.org

I’ve seen this before a long time ago in svn 1.1.3, but after our upgrade to 1.4.4 it went away. It turned out for our case that all users have to be granted at least read (e.g. ‘r’) permission from the root, otherwise the PROPFIND fails (we hacked the 1.1.3 code to allow anyone to execute PROPFIND from root, even with no permissions).
 
Try giving user ‘test’ read-only permission on the root and see if that works:
[/]Test = rJoost = rw[SVNRepository:/Banana/]Test = rw
ken J

From: Joost van Dongen [mailto:tsgoo_at_hotmail.com] Sent: Tuesday, March 04, 2008 6:49 AMTo: users_at_subversion.tigris.orgSubject: Path based authorization not working
 
Hello all, I am trying to get path based authorization to work, but so far with little success. For a test case I have made two users, of which one should get access to everything and the other should get access to the "Banana" folder only. If I use the code below, though, the result is that user Joost has access to everything, while user Test cannot access anything at all. This is the error I get when trying to checkout with Test: "Error PROPFIND request failed on '/svn/SVNRespositoryError PROPFIND of '/svn/SVNRepository': 403 Forbidden (http://xxx.xxx.xxx.xxx)" This is the authorization file I use: [/]Test =Joost = rw[SVNRepository:/Banana/]Test = rw This is the folder as it should be after checking out on d:/svn: "d:/svn/Banana". And this is the repository on the server: "d:/SVNRepositories/SVNRepository". If I give Test rw access to [SVNRepository:/], then he can check out everything, including the Banana folder. What am I doing wrong here? Thanks in advance,Joost

Express yourself instantly with MSN Messenger! MSN Messenger
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
Received on 2008-03-05 16:59:10 CET

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.