Re: [viewvc-users] svnauth not working

C. Michael Pilato escribió:
> On 02/21/2011 04:11 PM, Rodolfo Cossalter wrote:
>> When using svnauth authorizer globally, subdirectories don't inherit permissions
>> as svn does, so I switched to use per-root options.
> 
> Hrm.  Can we pause here for a second?  I want to better understand this
> assertion before we just move past it and start trying to fix the workaround.
> 
> What do you mean by "subdirectories don't inherit permissions as svn does"?
>  The 'svnauthz' authorizer is designed to match Subversion's  behavior, so
> anywhere that doesn't happen I definitely want to know about and better
> understand it.
> 
In our original setup (global authorizer) with authfile as follows:

[/]
* =

[repo1:/]
user1 = rw

user1 was authenticated by apache, authorized by viewvc and had access to
http://xxx.yyy.zzz.ar/viewvc/repo1/ but got an error message trying to access
http://xxx.yyy.zzz.ar/viewvc/repo1/examplev1/
Now I realize that it was an error from apache, and not viewvc:
Access denied: 'user1' GET examplev1:/, referer: http://xxx.yyy.zzz.ar/viewvc/repo1/
To get access to http://xxx.yyy.zzz.ar/viewvc/repo1/examplev1/ it was necessary to add
either
[/]
* = r

or

[repo1:/examplev1]
user1 = rw

to authfile which we considered unacceptable.
I'm sorry but I can't reproduce that situation anymore. I believe that it was caused
by trying to authorize with *both* mod_authz_svn and viewvc and different authfiles.
Anyway, removing the trailing slash in <Location /viewvc/repo1/> and authorizing
either globally or per-root with viewvc seems to be working now.

Can you confirm that the same authfiles used by mod_authz_svn may be used by viewvc?
What is the meaning of r(ead) and w(rite) in viewvc?

Thanks,
Rodolfo

------------------------------------------------------
http://viewvc.tigris.org/ds/viewMessage.do?dsForumId=4255&dsMessageId=2707561

To unsubscribe from this discussion, e-mail: [[email protected]].