path based authorization problem

[Diederick Huijbers <d....@apollo-ict.nl>]

Hi all,

I'm testing the 'path based authorisation' feature. I started the deamon 
like this: svnserve -r /usr/local/repositories

Than I create a directory (which is the test layout for my project) like:
css
css/modules
css/modules/page
css/modules/product
HTML
HTML/modules
HTML/modules/product
HTML/modules/page
index.php
js
js/modules
js/modules/product
js/modules/page

Now, I want to create a user called "productuser", which can only 
checkout the files of the following directories:

/css/modules/product
/HTML/modules/product
js/modules/product


But when I try to checkout using the user "productuser" (which I defined 
in a password-db file) I get:
svn: Not authorized to open root of edit operation

I seem te be able to fix this by adding:
(test is the name of my repos)
[test:/]
* = r

Though than I can checkout everything.. and I'm unable to restrict 
certain directories.

I hope someon can help me...

--------- contents of config files -----------
#svnserver.conf
[general]
password-db = userfile
realm = cms
anon-access = read
auth-access = write
authz-db = authz



#userfile
[users]
productuser = test

#authz
[test:/]
* = r

#test to checkout only a product dir
[test:/css/modules/product]
productuser = rw
---------- end -----------------------------------------



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: path based authorization problem

[va...@dicampus.com]

Try, I have it on this form and it works to me.
I had the same problem that your are having now, but in a project that I
had checkout, after I change the permissions and I couldn't commit, so I
had have to do a new checkout and it works to me.

[/]
* =

#test to checkout only a product dir
[/css/modules/product]
productuser = rw



> On 2/28/07, Diederick Huijbers <d....@apollo-ict.nl> wrote:
>>
>> Hi all,
>>
>> I'm testing the 'path based authorisation' feature. I started the deamon
>> like this: svnserve -r /usr/local/repositories
>>
>> Than I create a directory (which is the test layout for my project)
>> like:
>> css
>> css/modules
>> css/modules/page
>> css/modules/product
>> HTML
>> HTML/modules
>> HTML/modules/product
>> HTML/modules/page
>> index.php
>> js
>> js/modules
>> js/modules/product
>> js/modules/page
>>
>> Now, I want to create a user called "productuser", which can only
>> checkout the files of the following directories:
>>
>> /css/modules/product
>> /HTML/modules/product
>> js/modules/product
>>
>>
>> But when I try to checkout using the user "productuser" (which I defined
>> in a password-db file) I get:
>> svn: Not authorized to open root of edit operation
>>
>> I seem te be able to fix this by adding:
>> (test is the name of my repos)
>> [test:/]
>> * = r
>>
>> Though than I can checkout everything.. and I'm unable to restrict
>> certain directories.
>>
>> I hope someon can help me...
>>
>> --------- contents of config files -----------
>> #svnserver.conf
>> [general]
>> password-db = userfile
>> realm = cms
>> anon-access = read
>> auth-access = write
>> authz-db = authz
>>
>>
>>
>> #userfile
>> [users]
>> productuser = test
>>
>> #authz
>> [test:/]
>> * = r
>>
>> #test to checkout only a product dir
>> [test:/css/modules/product]
>> productuser = rw
>> ---------- end -----------------------------------------
>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
>> For additional commands, e-mail: users-help@subversion.tigris.org
>>
>>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: path based authorization problem

[Matt Sickler <cr...@gmail.com>]

To me it would make more sense to have a /page root and /product root
both of which have (css, HTML, js, etc) inside them - assuming the page and
product are the same code

On 2/28/07, Diederick Huijbers <d....@apollo-ict.nl> wrote:
>
> Hi all,
>
> I'm testing the 'path based authorisation' feature. I started the deamon
> like this: svnserve -r /usr/local/repositories
>
> Than I create a directory (which is the test layout for my project) like:
> css
> css/modules
> css/modules/page
> css/modules/product
> HTML
> HTML/modules
> HTML/modules/product
> HTML/modules/page
> index.php
> js
> js/modules
> js/modules/product
> js/modules/page
>
> Now, I want to create a user called "productuser", which can only
> checkout the files of the following directories:
>
> /css/modules/product
> /HTML/modules/product
> js/modules/product
>
>
> But when I try to checkout using the user "productuser" (which I defined
> in a password-db file) I get:
> svn: Not authorized to open root of edit operation
>
> I seem te be able to fix this by adding:
> (test is the name of my repos)
> [test:/]
> * = r
>
> Though than I can checkout everything.. and I'm unable to restrict
> certain directories.
>
> I hope someon can help me...
>
> --------- contents of config files -----------
> #svnserver.conf
> [general]
> password-db = userfile
> realm = cms
> anon-access = read
> auth-access = write
> authz-db = authz
>
>
>
> #userfile
> [users]
> productuser = test
>
> #authz
> [test:/]
> * = r
>
> #test to checkout only a product dir
> [test:/css/modules/product]
> productuser = rw
> ---------- end -----------------------------------------
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>