You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Franc Marx <ib...@francmarx.de> on 2009/07/21 09:22:00 UTC

Error with Branch, Commit/Update works fine

Hello,

we are running these versions:
- Subversion version 1.6.3 (r38063) 
- TortoiseSVN 1.6.3, Build 16613 - 32 Bit , 2009/06/20 09:28:19
- Apache/2.2.8 (Ubuntu) DAV/2 SVN/1.6.3
- authentication via apache and https:// access

We use this repository style:
https://svn.xxxx.de/​svn/customer/project​/trunk

Our customer get access to the path "customer":

[svn:/customer]
@customer_peoples = rw
* =

The customers can Commit and Update without any problems, but if they try to make a Branch they get an error:

"Command: Copy D:\xxx\trunk to https://svn.xxx./bra​nches/test2, Revision 550 
Error: Der Server hat einen unerwarteten Rückgabewert (403 Forbidden) in Antwort auf 
Error: die Anfrage PROPFIND für »/svn« zurückgeliefert 
Finished!:"

In apache error.log I can read:
[Mon Jul 20 14:24:22 2009] [error] [client vvv.xxx.yyy.zzz] Access denied: 'tester' PROPFIND svn:/

So it seams, that Tortoise/SVn wants to acces the path "svn:/" but customers are not allowed to access it.

If I try the same Branch with full access rights it works fine.

What can I do? Is there somthing wrong with 
configuration or authenication?

Is it a BUG from Tortoise or SVN ?

Could someone help me?

Franc

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2372871

To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].

Re: Re: Error with Branch, Commit/Update works fine

Posted by Stefan Sperling <st...@elego.de>.
On Wed, Jul 22, 2009 at 04:06:22AM -0700, Franc Marx wrote:
> We are using this auth-file:
> 
> [groups]
> admin = superuser
> customer1 = person_xy
> customer2 = person_abc
> 
> [emv:/]
> @admin = rw
> * =
> 
> [svn:/]
> @admin = rw
> * =
> 
> [svn:/customer1]
> @customer1 = rw
> * =
> 
> [svn:/customer2]
> @customer2 = rw
> * =
> 
> 
> Commit and Update works fine for all customers, BUT Branch fails!
> 
> Branch needs to access /svn root path ... why?

See http://subversion.tigris.org/issues/show_bug.cgi?id=3242

1.5.0 has brought features which try to do things that aren't
compatible with the way authz was designed. No one noticed
this prolem before 1.5.0 release, because people don't test
our release candidates.

It's a problem that's hard to tackle right now because of lack
of developer resources.

For now, you're best off moving all your customers to separate
repostitories if you can't live with them seeing each others'
directories.

Stefan

RE: Re: Error with Branch, Commit/Update works fine

Posted by Franc Marx <ib...@francmarx.de>.
I don't want to grant all customers the root access to the repository root https://svn.xxx.de/s​vn, because they could see other customers with repo-browser (this means they can see all other customers, but can't look inside other customers path)

We are using this auth-file:

[groups]
admin = superuser
customer1 = person_xy
customer2 = person_abc

[emv:/]
@admin = rw
* =

[svn:/]
@admin = rw
* =

[svn:/customer1]
@customer1 = rw
* =

[svn:/customer2]
@customer2 = rw
* =


Commit and Update works fine for all customers, BUT Branch fails!

Branch needs to access /svn root path ... why?

Franc

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2374387

To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].

Re: Error with Branch, Commit/Update works fine

Posted by Michael Diers <md...@elego.de>.
Franc Marx wrote:
> you are right, it should be
> https://svn.xxx.de/s​vn/customer/project/​bra​nches/test​2
> 
> I removed path details from error message... sorry I removed too much.
> 
> The important thing from this error message is: ...(403 Forbidden) ... die Anfrage PROPFIND für »/svn« ...
> 
> => there is an access to "/svn" path, but the customer didn't have access rights for that.

I believe you will need to grant at least r/o access to the repository
root, https://svn.xxx.de/s​vn.

[/]
@admins = rw
* =

[svn:/]
@customer = r
@anothercustomer = r

[svn:/customer]
@customer = rw

[svn:/anothercustomer]
@anothercustomer = rw

-- 
Michael Diers, Senior Consultant/Technical Director

elego Software Solutions GmbH, http://www.elego.de

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2374372

To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].

RE: Re: Error with Branch, Commit/Update works fine

Posted by Franc Marx <ib...@francmarx.de>.
Hello Michael,

you are right, it should be
https://svn.xxx.de/s​vn/customer/project/​bra​nches/test​2

I removed path details from error message... sorry I removed too much.

The important thing from this error message is: ...(403 Forbidden) ... die Anfrage PROPFIND für »/svn« ...

=> there is an access to "/svn" path, but the customer didn't have access rights for that.

Regards Franc

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2374328

To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].

Re: Error with Branch, Commit/Update works fine

Posted by Michael Diers <md...@elego.de>.
Franc Marx wrote:
> We use this repository style:
> https://svn.xxxx.de/​svn/customer/project​/trunk
> 
> Our customer get access to the path "customer":
> 
> [svn:/customer] @customer_peoples = rw * =
> 
> The customers can Commit and Update without any problems, but if they
> try to make a Branch they get an error:
> 
> "Command: Copy D:\xxx\trunk to https://svn.xxx./bra​nches/test2,
> Revision 550 Error: Der Server hat einen unerwarteten Rückgabewert
> (403 Forbidden) in Antwort auf Error: die Anfrage PROPFIND für »/svn«
> zurückgeliefert Finished!:"
[...]

The target path of the failing svn copy operation seems rather strange.

You probably want

https://svn.xxx.de/svn/customer/project/bra​nches/test2

instead.

-- 
Michael Diers, Senior Consultant/Technical Director

elego Software Solutions GmbH, http://www.elego.de

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2373746

To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].

RE: Error with Branch, Commit/Update works fine

Posted by Franc Marx <ib...@francmarx.de>.
thanks...

so I know it is a bug and not a configuration mistake from my side.

Franc

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2374394

To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].