You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by schrei5 <do...@googlemail.com> on 2008/12/15 10:06:58 UTC

server side copies with Path-Based Authorization

Hi,

I have a problem with authorization of our repository.
We use a AuthzSVNAccessFile like this

[/]
user1 = rw

[/project1]
user2 = rw

[/project2]
user3 = rw

Most things work as expected. But user2 and user3 can not make server side
copies (branches) inside of their project folder. 

C:\SVN\test\project1\trunk>svn copy
https://server.net/svn/test/project1/trunk/Textdokument.tx
t https://server.net/svn/test/project1/trunk/file.txt -m "make a copy"
svn: Server sent unexpected return value (403 Forbidden) in response to
PROPFIND request for '/svn/test'

If they execute svn copy in their working copy and commit the changes it
works. 

C:\SVN\test\project1\trunk>svn copy Textdokument.txt file2.txt
A         file2.txt

C:\SVN\test\project1\trunk>svn commit -m "local copy"
Adding         trunk\file2.txt

Committed revision 303.

In the scenario above the users can use the later approach. 
But in the case of making a branch this is not a (practical) option.

Is this a problem of the authz_svn_module or do I have to change my
configuration.

cheers
dominik
-- 
View this message in context: http://www.nabble.com/server-side-copies-with-Path-Based-Authorization-tp21011160p21011160.html
Sent from the Subversion Users mailing list archive at Nabble.com.

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=984335

To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].

Re: server side copies with Path-Based Authorization

Posted by Konstantin Kolinko <kn...@gmail.com>.
2009/1/23 schrei5 <do...@googlemail.com>:
> Thanks for your reply,
>
> yes sure if I give the users read access to the root directory it works.
> But that is not what I want.
> They should not be able to read the other projects.
>

Note, that you can disable read access for those projects explicitly, by
specifying nothing at the right side of the equal sign. E.g.

user3=

> So if nobody protests I will create a bug in the issue-tracker.

http://subversion.tigris.org/issues/show_bug.cgi?id=3242
"svn 1.5 want access to root with no reason."

Best regards,
Konstantin Kolinko

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=1044620

To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].

Re: server side copies with Path-Based Authorization

Posted by schrei5 <do...@googlemail.com>.
Thanks for your reply,

yes sure if I give the users read access to the root directory it works.
But that is not what I want.
They should not be able to read the other projects.

So if nobody protests I will create a bug in the issue-tracker.
-- 
View this message in context: http://www.nabble.com/server-side-copies-with-Path-Based-Authorization-tp21011160p21621908.html
Sent from the Subversion Users mailing list archive at Nabble.com.

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=1044601

To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].

Re: server side copies with Path-Based Authorization

Posted by Konstantin Kolinko <kn...@gmail.com>.
>> (...)
>> user2 and user3 can not make server side
>> copies (branches) inside of their project folder.
>>
>> C:\SVN\test\project1\trunk>svn copy https://server.net/svn/te
>> st/project1/trunk/Textdokument.txt https://server.net/svn/te
>> st/project1/trunk/file.txt -m "make a copy"
>> svn: Server sent unexpected return value (403 Forbidden) in response to
>> PROPFIND request for '/svn/test'
>>
>>
>> If they execute svn copy in their working copy and commit the changes it
>> works.
>>
>> C:\SVN\test\project1\trunk>svn copy Textdokument.txt file2.txt
>> A         file2.txt
>>
>> C:\SVN\test\project1\trunk>svn commit -m "local copy"
>> Adding         trunk\file2.txt
>>
>> Committed revision 303.
>>

2009/1/23 schrei5 <do...@googlemail.com>:
> Hi again,
>
> does anybody at least have a similar configuration and can shard his
> experiences?
> I tried SVNPathAuthz on/off but that didn't help.
>
> cheers
> dominik
>

Try

[/]
user1 = rw
user2 = r
user3 = r

...
(the rest is the same)

Some operations require read access for the root folder of the repository,
iirc to read repository GUID, or to get repository options, or to get
mergeinfo ... (I do not remember exactly). I would like to call it a bug,
but it is how it works for at least last half a year.

Best regards,
Konstantin Kolinko

--
View this message in context:
http://www.nabble.com/server-side-copies-with-Path-Based-Authorization-tp21011160p21621110.html

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=1044574

To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].

Re: server side copies with Path-Based Authorization

Posted by schrei5 <do...@googlemail.com>.
Hi again,

does anybody at least have a similar configuration and can shard his
experiences?
I tried SVNPathAuthz on/off but that didn't help.

cheers
dominik

-- 
View this message in context: http://www.nabble.com/server-side-copies-with-Path-Based-Authorization-tp21011160p21621110.html
Sent from the Subversion Users mailing list archive at Nabble.com.

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=1044524

To unsubscribe from this discussion, e-mail: [users-unsubscribe@subversion.tigris.org].