subversion-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Andrei Cusnir <and...@assembla.com>
Subject Re: svn authz error: Access denied issue when running svn rm resource where the user should be able to have full access
Date Sat, 31 Jul 2021 00:01:30 GMT
Hi Daniel,
can you please let me know if this is a case for which I should open a bug
ticket,
or this is something that has to do with the authz file contents.
Kind Regards,
Andrei

On Thu, Jul 22, 2021 at 4:57 PM Andrei Cusnir <andrei@assembla.com> wrote:

> Hi Daniel,
> thank for your reply,
> i was able to confirm this behaviour on both svn server versions 1.12.2
> and 1.14.1
> current apache server
> Apache/2.4.25 (Debian) SVN/1.14.1 OpenSSL/1.0.2u mod_wsgi/4.5.11
> Python/2.7 configured -- resuming normal operations
>
> the user that reported it first is having most recent client
> SVN/1.14.1 (x64-microsoft-windows) serf/1.3.9 TortoiseSVN-1.14.1.29085
> i have following client
> SVN/1.13.0 (x86_64-apple-darwin19.0.0) serf/1.3.9
>
>
> On Thu, Jul 22, 2021 at 4:51 PM Daniel Sahlberg <
> daniel.l.sahlberg@gmail.com> wrote:
>
>> Den ons 21 juli 2021 kl 22:30 skrev Andrei Cusnir <andrei@assembla.com>:
>>
>>> Hi,
>>> here is my authz config file
>>>
>>> [groups]
>>> r_users =  Alexander_Lost
>>>
>>> [:glob:/]
>>> * = rw
>>>
>>> [:glob:/**/*.uasset]
>>> @r_users = rw
>>>
>>> [:glob:/**/Source/**]
>>> @r_users =
>>>
>>>
>>> user Alexander_Lost should be able to work with uasset type of files and
>>> should not see anything that has Source in the global path
>>>
>>> when i am trying to remove a path
>>> svn rm https://"Alexander_Lost"@
>>> subversion.assembla.com/svn/repo_name/branches/project_name/Projects/ShooterGame/Content/Mods/project_name/Assets/Foliage/Trees/StepeeGrass/Grass01/skwnorp_2K_Normal.uasset
>>> -m "test uasset delete by andrei"
>>> svn: E175013: Access to
>>> '/svn/repo_name/!svn/txr/153436-3cur/branches/project_name/Projects/ShooterGame/Content/Mods/project_name/Assets/Foliage/Trees/StepeeGrass/Grass01/skwnorp_2K_Normal.uasset'
>>> forbidden
>>>
>>> in apache logs i can see the following
>>>
>>> [Wed Jul 21 19:47:42.187161 2021] [authz_svn:error] [pid 1510:tid
>>> 140015597156096] [client 188.26.223.19:42966] Access denied:
>>> 'Alexander_Lost' DELETE
>>> repo_name:/branches/project_name/Projects/ShooterGame/Content/Mods/project_name/Assets/Foliage/Trees/StepeeGrass/Grass01/skwnorp_2K_Normal.uasset
>>>
>>>
>>> Please let me know if this is a config error or it is an authz bug.
>>>
>>
>> Do you know what versions are you using for the server and for the client?
>>
>> There is an issue with the authorization rules in versions 1.10.0 until
>> 1.14.0, fixed in 1.10.7 and 1.14.1. I'm not sure if it would cause problems
>> for you but check the description in the release notes:
>> http://subversion.apache.org/docs/release-notes/1.14.html#compat-misc-authz
>> and see if it might apply.
>>
>> Kind regards,
>> Daniel Sahlberg
>>
>>

Mime
View raw message