Re: Why do you need to grant root access to subversion repository??

There were two different things that changed in Subversion 1.5 that led to this.

1. Subversion started firing of OPTIONS requests for all operations, often
against the repository root URL.

2. 'svn copy' and 'svn move' started allowing folks to copy/move multiple
items at once, and the code was a little lazy about determining the right
URL on which to base those multi-target operations.

The "incomplete fix" Bert mentions is that (1) above has been remedied on
trunk and proposed for backport to 1.6.x, but (2) has only been remedied on
trunk. The backport was just too hairy, and the number of folks affected by
the bug too small, to bother with.

Voting is limited to committers in this case (a backport means not just "I
think we should fix this bug" but also "I've reviewed the code myself, it
looks sane, doesn't appear to cause more problems, etc.".

As for a workaround besides the obvious one (granting read access at the
root), perhaps you could build the HEAD of Subversion's 1.6.x branch for
yourself. If that's not an option, then short of rolling back to the latest
1.4.x release (the last releases before the bugs were introduced), you'll
just need to wait for 1.6.10 to be released (assuming that more folks vote
the backport into that branch).

Keith Theman wrote:
> Thank You Bert,
>
> but what do you mean "an incomplete fix" ? and how can I vote for this?
> I can't believe this bug exists! Is there a work around while we wait
> for the fix?
>
> Ed
>
> ------------------------------------------------------------------------
> From: bert_at_qqmail.nl
> To: xray316_at_hotmail.com; users_at_subversion.apache.org
> Subject: RE: Why do you need to grant root access to subversion repository??
> Date: Tue, 2 Mar 2010 14:29:16 +0100
>
> Hi,
>
>
>
> See issue #3242 (http://subversion.tigris.org/issues/show_bug.cgi?id=3242)
>
>
>
> An incomplete fix should be available (if it gets enough votes) in
> 1.6.10; see
> http://svn.apache.org/repos/asf/subversion/branches/1.6.x/STATUS.
>
>
>
> Bert Huijben
>
>
>
> *From:* Keith Theman [mailto:xray316_at_hotmail.com]
> *Sent:* dinsdag 2 maart 2010 14:25
> *To:* users_at_subversion.apache.org
> *Subject:* Why do you need to grant root access to subversion repository??
>
>
>
> Hello,
>
> We had been using svn 1.3. We had multiple projects in a single
> repository, and we had apache with mod_dav as a front end. We configured
> the access control list disallow root access:
>
> [myRepo:/]
> #* = r
>
> but then allowed appropriate user access to their project folders:
>
> [myRepo:/myProject]
> jdoe = rw
>
>
> Everything worked great, but then we updated to 1.6 and now we get
> permission errors unless we grant EVERYONE read access to the root of
> the repository! Everyone can see anything in the repository.... not
> good. What is going on?
>
> Ed
>
> ------------------------------------------------------------------------
>
> Hotmail: Trusted email with powerful SPAM protection. Sign up now.
> <http://clk.atdmt.com/GBL/go/201469227/direct/01/>
>
>
> ------------------------------------------------------------------------
> Hotmail: Powerful Free email with security by Microsoft. Get it now.
> <http://clk.atdmt.com/GBL/go/201469230/direct/01/>

-- 
C. Michael Pilato <cmpilato_at_collab.net>
CollabNet   <>   www.collab.net   <>   Distributed Development On Demand