Repository access control (authz) issues

[Joshua Oreman <or...@gmail.com>]

Hi svn-users.

I'm trying to set up an svnserve repository with the normal access
control paradigm of "anonymous access R/O, authenticated access R/W",
with an exception for one subtree: there, only one user should be able
to read or write.

My config files are set up in what seems to be a sensible way:

==> svnserve.conf <==
[general]
anon-access = read
auth-access = write
password-db = passwd
authz-db = authz

==> passwd <==
[users]
privuser = secret

==> authz <==
[groups]
committers = person1, person2, privuser

[/]
* = r
@committers = rw

[/private]
* =
privuser = rw

With this setup, access to directories outside /private works fine,
but trying to check out /private gives me an authentication challenge,
creates a local working copy of 'private', and then gives

svn: Not authorized to open root of edit operation

Googling this error message yielded
http://svn.haxx.se/users/archive-2006-02/1208.shtml, which was
informative but didn't seem to quite apply (I *am* challenged for
authentication; it just fails thereafter.)

Anyone know what might cause this behavior?

Thanks.

-- Josh

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: Repository access control (authz) issues

[Joshua Oreman <or...@gmail.com>]

On 9/1/07, Wolfgang Frisch <xo...@unfoog.de> wrote:
> On Mon, 27 Aug 2007 09:37 "Joshua Oreman" <or...@gmail.com> wrote:
> > I'm trying to set up an svnserve repository with the normal access
> > control paradigm of "anonymous access R/O, authenticated access R/W",
> > with an exception for one subtree: there, only one user should be able
> > to read or write.
> [...]
> > svn: Not authorized to open root of edit operation
>
> I recently had the exact same problem and had it solved by build the
> latest svn version of subversion.
> I've described the necessary steps to reproduce the problem and a
> workaround here: http://svn.haxx.se/users/archive-2007-08/0405.shtml

Thanks - that solved it!

-- Josh

>
> >
> > Thanks.
> >
> > -- Josh
> Cheers, Wolfgang
>
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> > For additional commands, e-mail: users-help@subversion.tigris.org
> >
>
>
> --
> Wolfgang Frisch
> Jabber: wolf@unfoog.de
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: Repository access control (authz) issues

[Wolfgang Frisch <xo...@unfoog.de>]

On Mon, 27 Aug 2007 09:37 "Joshua Oreman" <or...@gmail.com> wrote:
> I'm trying to set up an svnserve repository with the normal access
> control paradigm of "anonymous access R/O, authenticated access R/W",
> with an exception for one subtree: there, only one user should be able
> to read or write.
[...]
> svn: Not authorized to open root of edit operation

I recently had the exact same problem and had it solved by build the
latest svn version of subversion.
I've described the necessary steps to reproduce the problem and a
workaround here: http://svn.haxx.se/users/archive-2007-08/0405.shtml

> 
> Thanks.
> 
> -- Josh
Cheers, Wolfgang

> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
> 


-- 
Wolfgang Frisch
Jabber: wolf@unfoog.de