Bug? -SVNSYNC - Path-based authentication is ignored

Hi,

I'm trying to run a SVNSYNC to mirror repository via http(s). Although, I've allowed access to only "Folder" within the repository via AuthzSVNAccessFile the whole repository is being synchronized. The path-based authentication works perfectly for browsing the repo, but it is ignored during the sync.

When I check the Apache logs it becomes clear to me why this might be the case - Svnsync request are handled via "/svn/replication-repo/!svn/rev/<revision>". This would basically allow to get a copy of the SVN repo and even access to locations not intended to be accessed.

version 1.13.0 (r1867053)

mod_dav.conf

<Location /svn/replication-repo>
   DAV svn
   SVNPath /.../repo
   SVNPathAuthz off
   AuthType Basic
   AuthName "Authorization SVN"
   AuthBasicProvider file
   AuthzSVNAccessFile /.../authz
   AuthUserFile /.../users
   require valid-user
</Location>


AuthzSVNAccessFile:

[groups]
roFilteredGroup = ReplicationFiltered

[replication-repo:/]
@roFilteredGroup =

[replication-repo:/Folder]
@roFilteredGroup = r



Sensitivity: Internal



[PTSports_Logo_ICE2023_blue.jpg]        Tomas Molnar | System Administrator
Tel: +43158103508303 | Mobile: +436648128247 | www.playtech.com<https://www.playtech.com>


[PlaytechSports_Sig_2023_final.png]


Sensitivity: Internal