[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: Path based authorization not working

From: Joost van Dongen <tsgoo_at_hotmail.com>
Date: Thu, 6 Mar 2008 10:42:38 +0100

I am running SVN under Apache. I took a look at the error log and there are some errors, but they do not seem related to me. However, I know hardly anything of this kind of thing, so they might as well be related after all. These are the errors:
 
[Thu Mar 06 10:31:49 2008] [error] [client xxx.xxx.xxx.xxx] Provider encountered an error while streaming a REPORT response. [500, #0][Thu Mar 06 10:31:49 2008] [error] [client xxx.xxx.xxx.xxx] A failure occurred while driving the update report editor [500, #190004][Thu Mar 06 10:32:38 2008] [error] [client xxx.xxx.xxx.xxx] Provider encountered an error while streaming a REPORT response. [500, #0][Thu Mar 06 10:32:38 2008] [error] [client xxx.xxx.xxx.xxx] A failure occurred while driving the update report editor [500, #190004]
 
 
 
 
--------------------------------------------------------------------------------Subject: RE: Path based authorization not workingDate: Wed, 5 Mar 2008 09:49:19 -0800From: kmcknight_at_vitria.comTo: tsgoo_at_hotmail.com
Are you running svn under apache? Try looking at the apache error log. It might give you some more clues as to the permission problem.
 
ken J
 
--------------------------------------------------------------------------------
From: Joost van Dongen [mailto:tsgoo_at_hotmail.com] Sent: Wednesday, March 05, 2008 1:07 AMTo: Kenneth McKnight; users_at_subversion.tigris.orgSubject: RE: Path based authorization not working
 
That seems to make sense, but I do not get it to work. The problem is that the repository contains confidential information, so I need to go from r to none on some folders. I tried this, but Test can now get everything, instead of just the Banana folder: [/]* = rw[SVNRepository:/Other projects/]Test =[SVNRepository:/Banana/]Test = rw What is wrong here?
 
--------------------------------------------------------------------------------
Subject: RE: Path based authorization not workingDate: Tue, 4 Mar 2008 09:13:36 -0800From: kmcknight_at_vitria.comTo: tsgoo_at_hotmail.com; users_at_subversion.tigris.org
I’ve seen this before a long time ago in svn 1.1.3, but after our upgrade to 1.4.4 it went away. It turned out for our case that all users have to be granted at least read (e.g. ‘r’) permission from the root, otherwise the PROPFIND fails (we hacked the 1.1.3 code to allow anyone to execute PROPFIND from root, even with no permissions).
 
Try giving user ‘test’ read-only permission on the root and see if that works:
[/]Test = rJoost = rw[SVNRepository:/Banana/]Test = rw
ken J
--------------------------------------------------------------------------------
From: Joost van Dongen [mailto:tsgoo_at_hotmail.com] Sent: Tuesday, March 04, 2008 6:49 AMTo: users_at_subversion.tigris.orgSubject: Path based authorization not working
 
Hello all, I am trying to get path based authorization to work, but so far with little success. For a test case I have made two users, of which one should get access to everything and the other should get access to the "Banana" folder only. If I use the code below, though, the result is that user Joost has access to everything, while user Test cannot access anything at all. This is the error I get when trying to checkout with Test: "Error PROPFIND request failed on '/svn/SVNRespositoryError PROPFIND of '/svn/SVNRepository': 403 Forbidden (http://xxx.xxx.xxx.xxx)" This is the authorization file I use: [/]Test =Joost = rw[SVNRepository:/Banana/]Test = rw This is the folder as it should be after checking out on d:/svn: "d:/svn/Banana". And this is the repository on the server: "d:/SVNRepositories/SVNRepository". If I give Test rw access to [SVNRepository:/], then he can check out everything, including the Banana folder. What am I doing wrong here? Thanks in advance,Joost
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
Received on 2008-03-06 18:27:14 CET

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.