[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Sanity-check tool for authz file?

From: Ben Reser <ben_at_reser.org>
Date: Thu, 22 Jan 2015 16:30:33 -0800

On 1/22/15 1:00 PM, Les Mikesell wrote:
> Are there any tools to help find syntax issues or mismatches in paths
> between an authz file and the associated repo? I just spent some
> time tracking down a typo that had the weird effect of some users
> being able to create directories that they subsequently could not move
> or delete. Turned out to be a path missing the leading / in a
> section considerably below what I thought should the relevant entry,
> and the log of 'reparent ....' without any mention of a problem (just
> no commit) on the denied action wasn't very helpful. Is there a good
> way to avoid such problems or find them after the fact?

The validate subcommand of svnauthz (1.8 or newer) or svnauthz-validate before
that.

Comes in the tools/server-side directory of the source distribution. You may
or may not have it depending on how you're getting Subversion.

An authz file with this in it:
[abc/be/de]
* = r

Will generate this:
svnauthz: E220003: Section name 'abc/be/de' contains non-canonical fspath
'abc/be/de'
Received on 2015-01-23 01:31:07 CET

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.