Hmm... I was hoping for something more illuminating. I'm afraid I've run
out of ideas. Anyone else out there want to take a crack at this one?
ken :-)
________________________________
From: Joost van Dongen [mailto:tsgoo_at_hotmail.com]
Sent: Thursday, March 06, 2008 1:43 AM
To: Kenneth McKnight; users_at_subversion.tigris.org
Subject: RE: Path based authorization not working
I am running SVN under Apache. I took a look at the error log and there
are some errors, but they do not seem related to me. However, I know
hardly anything of this kind of thing, so they might as well be related
after all. These are the errors:
[Thu Mar 06 10:31:49 2008] [error] [client xxx.xxx.xxx.xxx] Provider
encountered an error while streaming a REPORT response. [500, #0]
[Thu Mar 06 10:31:49 2008] [error] [client xxx.xxx.xxx.xxx] A failure
occurred while driving the update report editor [500, #190004]
[Thu Mar 06 10:32:38 2008] [error] [client xxx.xxx.xxx.xxx] Provider
encountered an error while streaming a REPORT response. [500, #0]
[Thu Mar 06 10:32:38 2008] [error] [client xxx.xxx.xxx.xxx] A failure
occurred while driving the update report editor [500, #190004]
------------------------------------------------------------------------
--------
Subject: RE: Path based authorization not working
Date: Wed, 5 Mar 2008 09:49:19 -0800
From: kmcknight_at_vitria.com
To: tsgoo_at_hotmail.com
Are you running svn under apache? Try looking at the apache error log.
It might give you some more clues as to the permission problem.
ken J
------------------------------------------------------------------------
--------
From: Joost van Dongen [mailto:tsgoo_at_hotmail.com]
Sent: Wednesday, March 05, 2008 1:07 AM
To: Kenneth McKnight; users_at_subversion.tigris.org
Subject: RE: Path based authorization not working
That seems to make sense, but I do not get it to work. The problem is
that the repository contains confidential information, so I need to go
from r to none on some folders. I tried this, but Test can now get
everything, instead of just the Banana folder:
[/]
* = rw
[SVNRepository:/Other projects/]
Test =
[SVNRepository:/Banana/]
Test = rw
What is wrong here?
------------------------------------------------------------------------
--------
Subject: RE: Path based authorization not working
Date: Tue, 4 Mar 2008 09:13:36 -0800
From: kmcknight_at_vitria.com
To: tsgoo_at_hotmail.com; users_at_subversion.tigris.org
I've seen this before a long time ago in svn 1.1.3, but after our
upgrade to 1.4.4 it went away. It turned out for our case that all users
have to be granted at least read (e.g. 'r') permission from the root,
otherwise the PROPFIND fails (we hacked the 1.1.3 code to allow anyone
to execute PROPFIND from root, even with no permissions).
Try giving user 'test' read-only permission on the root and see if that
works:
[/]
Test = r
Joost = rw
[SVNRepository:/Banana/]
Test = rw
ken J
------------------------------------------------------------------------
--------
From: Joost van Dongen [mailto:tsgoo_at_hotmail.com]
Sent: Tuesday, March 04, 2008 6:49 AM
To: users_at_subversion.tigris.org
Subject: Path based authorization not working
Hello all,
I am trying to get path based authorization to work, but so far with
little success. For a test case I have made two users, of which one
should get access to everything and the other should get access to the
"Banana" folder only. If I use the code below, though, the result is
that user Joost has access to everything, while user Test cannot access
anything at all. This is the error I get when trying to checkout with
Test:
"Error PROPFIND request failed on '/svn/SVNRespository
Error PROPFIND of '/svn/SVNRepository': 403 Forbidden
(http://xxx.xxx.xxx.xxx)"
This is the authorization file I use:
[/]
Test =
Joost = rw
[SVNRepository:/Banana/]
Test = rw
This is the folder as it should be after checking out on d:/svn:
"d:/svn/Banana". And this is the repository on the server:
"d:/SVNRepositories/SVNRepository".
If I give Test rw access to [SVNRepository:/], then he can check out
everything, including the Banana folder.
What am I doing wrong here?
Thanks in advance,
Joost
________________________________
Express yourself instantly with MSN Messenger! MSN Messenger
<http://clk.atdmt.com/AVE/go/onm00200471ave/direct/01/>
Received on 2008-03-07 06:51:12 CET