Access control with apache SVNParentPath on win XP

[Rodney Schuler <rs...@gmail.com>]

I am trying to set up access control over several repositories served
by apache running on a Win XP pro machine.  I have apache running svn
just fine using a location block like:

<Location /svn/>
# using subversion for WebDAV
  DAV svn
# point to the directory of the subversion repositories
  SVNParentPath D:\svn
  SVNListParentPath on
# enable DeltaV autoversioning, this allows WebDAV clients (ie windows explorer)
#   to use subversion as a WebDAV server while the files are versioned.
  SVNAutoversioning on
# setup authentication / authorization through SSPI
  AuthName "Sabre subversion repositories."
  AuthType SSPI
  SSPIAuth On
  SSPIAuthoritative On
  SSPIDomain sabrenet2
  SSPIOfferBasic On
  SSPIUsernameCase lower
  Require valid-user
  AuthzSVNAccessFile D:\svn\accessfile.txt
</Location>
RewriteEngine on
RewriteRule ^(/svn)$ $1/ [R]


When the access file looks like

[/]
* = r

everybody has read access as expected

[/]
* = rw

everybody has read and write access as expected

When the access file looks like

[/]
* = r
sabrenet2\raschuler = rw

Everybody has read access, and raschuler has write access.

But, when I the access file looks like

[/]
* = r

[SandBox:/]
sabrenet2\raschuler = rw

commits from sabrenet2\raschuler fail.  I have tried tweeking
[SandBox:/] to be [SandBox:] [SandBox:\], [sandbox:\] [sandbox:/] and
[sandbox:].  Nothing I have tries gives a user write access
selectively to one repository.

The line in the error.log looks like:

[Wed Mar 15 16:30:49 2006] [error] [client 10.3.0.124] Access denied:
'sabrenet2\\raschuler' MKACTIVITY sandbox:

What am I missing here?  How do I give one user write access to one
repository (or one directory in a repository), but not the others?

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: Access control with apache SVNParentPath on win XP

[Rodney Schuler <rs...@gmail.com>]

On 3/15/06, Rodney Schuler <rs...@gmail.com> wrote:
> [details of problem]

Hmm... No response on svn-user.  Might this be the SSPI authentication
issue that I have seen discussed on the TortoiseSVN lists?  The client
is TortoiseSVN.

I admit I did not understand the SSPI issues as discussed on the
tortoisesvn-deve list.  Still, I do not understand how this could be
SSPI issue.  I thought authentication and authorization were separate
topics.

Things works as I would expect when I list users as domain\user in the
parent path [\] section of the authorization file.  Things only fail
to work as expected when there is a colon in the path
[repo:path/to/authorize].

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org