Authorization does not work on repository folders with spaces

[Derrick Glass <de...@pinstripeco.com>]

I would like to grant a group of developers access to one folder in a
repository while denying access to other folders. Intuitively, I'd
expect it to work like this (assuming groups are set up earlier in the
authz file):

 

 [/]

@svn-grp1-dev = rw

 

[repos:/tags/special folder]

@dev-grp2-dev = r

 

However, set up like that, I get:

 


Forbidden


You don't have permission to access <path>

If I use the same pattern on a folder without spaces, it seems to work
as expected.

 

Is this a known issue?

 

Derrick Glass

RE: Authorization does not work on repository folders with spaces

[Derrick Glass <de...@pinstripeco.com>]

I'm running Subversion 1.4.2 (the recent release), on Apache
2.0.59/Windows 2003 (patches up-to-date). I see the behavior accessing
the repository via http:// protocol.

Investigating my repro, I found the specific nature of the issue. It
appears that I had a trailing slash on the name of the repository
folder, and this effectively locks out any access.

Try the repro below with this modification:

[repos:/tags/special folder/]

It looks like with the trailing slash I can access neither the folder,
nor any of the files in it, nor any of the folder structure below it.
That is, if my access to that folder is totally defined by membership in
the given group. The fact of spaces appears to be a red herring.

That also brings up an interesting question: If I have access to a lower
level folder, should I be able to traverse the folder structure to
access it? Browsing the repository, unless I know the name of the folder
I have access to, I will not be able to find it. I understand this may
be a Unix/Windows philosophical discussion; but it would be handy to
have a Windows-like "traverse folder" privilege in order to locate my
allowed repositories easily.

Thanks!

Derrick Glass

-----Original Message-----
From: svnlgo@mobsol.be [mailto:svnlgo@mobsol.be] 
Sent: Tuesday, November 21, 2006 8:19 AM
To: Derrick Glass
Cc: users@subversion.tigris.org
Subject: Re: Authorization does not work on repository folders with
spaces

Can you give some more information like OS, svnserve/httpd, the exact
things you
do to get this failure etc.

I added a regression test to test the behavior of authz on directories
with
spaces yesterday, and at first sight what you're trying here works with
svn
trunk.

Lieven

Quoting Derrick Glass <de...@pinstripeco.com>:

> I would like to grant a group of developers access to one folder in a
> repository while denying access to other folders. Intuitively, I'd
> expect it to work like this (assuming groups are set up earlier in the
> authz file):
>
>
>
>  [/]
>
> @svn-grp1-dev = rw
>
>
>
> [repos:/tags/special folder]
>
> @dev-grp2-dev = r
>
>
>
> However, set up like that, I get:
>
>
>
>
> Forbidden
>
>
> You don't have permission to access <path>
>
> If I use the same pattern on a folder without spaces, it seems to work
> as expected.
>
>
>
> Is this a known issue?
>
>
>
> Derrick Glass
>
>




----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: Authorization does not work on repository folders with spaces

[sv...@mobsol.be]

Can you give some more information like OS, svnserve/httpd, the exact things you
do to get this failure etc.

I added a regression test to test the behavior of authz on directories with
spaces yesterday, and at first sight what you're trying here works with svn
trunk.

Lieven

Quoting Derrick Glass <de...@pinstripeco.com>:

> I would like to grant a group of developers access to one folder in a
> repository while denying access to other folders. Intuitively, I'd
> expect it to work like this (assuming groups are set up earlier in the
> authz file):
>
>
>
>  [/]
>
> @svn-grp1-dev = rw
>
>
>
> [repos:/tags/special folder]
>
> @dev-grp2-dev = r
>
>
>
> However, set up like that, I get:
>
>
>
>
> Forbidden
>
>
> You don't have permission to access <path>
>
> If I use the same pattern on a folder without spaces, it seems to work
> as expected.
>
>
>
> Is this a known issue?
>
>
>
> Derrick Glass
>
>




----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org