[viewvc-users] authz rules not being followed when folder name doesn't match Location name.

Hi all,

I've just upgraded from a very long-standing 1.0.7 install to 1.1.6 and I'm having a bit of trouble with the authz support.

Our environment is largeish: Apache 2.2 serving 4 virtual hosts with around 20 subversion repositories spread between them; each one set using a Location directive much like this:

  <Location /proj>
    DAV svn
    SVNPath "/var/svn/proj"
    AuthName "Acme Project Repository"
    AuthUserFile "/path/to/svn-passwords"
    AuthzSVNAccessFile "/path/to/authz-file"
    Require valid-user
  </Location>

- In viewvc.conf, I've set the following:

root_parents = /var/svn : svn
authorizer = svnauthz

[authz-svnauthz]
authzfile = /path/to/authz-file
force_username_case = lower

Everything works well and the authz is being applied correctly, but the index isn't showing a couple of the repositories. (I'm logged in and have the relevant permissions.)  It took me a while, but I realised the two that weren't showing had a Location directive that differed from the repository path. So where the working ones were:

<Location /proj>
	SVNPath /var/svn/proj 

The missing two were set like this:

<Location /svn>
	SVNPath /var/svn/proj12

This happens where a vhost has a single repository called 'svn' but has to have a unique path to fit in to /var/svn with the others. 

The authz file uses the Location name

[svn:/]
@group = rw

But I think ViewVC is using the repo path component (proj12) in deciding on permissions and hence not allowing me to see, or enter it. (Manually adding /proj12 to the URL results in a 404). 

Is this a bug, or I have I just highlighted an unsupported svn setup?

Thanks in advance for any help,

Terry.

------------------------------------------------------
http://viewvc.tigris.org/ds/viewMessage.do?dsForumId=4255&dsMessageId=2619202

To unsubscribe from this discussion, e-mail: [[email protected]].