Hi Daniel,
thank for your reply,
i was able to confirm this behaviour on both svn server versions 1.12.2 and
1.14.1
current apache server
Apache/2.4.25 (Debian) SVN/1.14.1 OpenSSL/1.0.2u mod_wsgi/4.5.11 Python/2.7
configured -- resuming normal operations

the user that reported it first is having most recent client
SVN/1.14.1 (x64-microsoft-windows) serf/1.3.9 TortoiseSVN-1.14.1.29085
i have following client
SVN/1.13.0 (x86_64-apple-darwin19.0.0) serf/1.3.9


On Thu, Jul 22, 2021 at 4:51 PM Daniel Sahlberg <daniel.l.sahlb...@gmail.com>
wrote:

> Den ons 21 juli 2021 kl 22:30 skrev Andrei Cusnir <and...@assembla.com>:
>
>> Hi,
>> here is my authz config file
>>
>> [groups]
>> r_users =  Alexander_Lost
>>
>> [:glob:/]
>> * = rw
>>
>> [:glob:/**/*.uasset]
>> @r_users = rw
>>
>> [:glob:/**/Source/**]
>> @r_users =
>>
>>
>> user Alexander_Lost should be able to work with uasset type of files and
>> should not see anything that has Source in the global path
>>
>> when i am trying to remove a path
>> svn rm https://"Alexander_Lost"@
>> subversion.assembla.com/svn/repo_name/branches/project_name/Projects/ShooterGame/Content/Mods/project_name/Assets/Foliage/Trees/StepeeGrass/Grass01/skwnorp_2K_Normal.uasset
>> -m "test uasset delete by andrei"
>> svn: E175013: Access to
>> '/svn/repo_name/!svn/txr/153436-3cur/branches/project_name/Projects/ShooterGame/Content/Mods/project_name/Assets/Foliage/Trees/StepeeGrass/Grass01/skwnorp_2K_Normal.uasset'
>> forbidden
>>
>> in apache logs i can see the following
>>
>> [Wed Jul 21 19:47:42.187161 2021] [authz_svn:error] [pid 1510:tid
>> 140015597156096] [client 188.26.223.19:42966] Access denied:
>> 'Alexander_Lost' DELETE
>> repo_name:/branches/project_name/Projects/ShooterGame/Content/Mods/project_name/Assets/Foliage/Trees/StepeeGrass/Grass01/skwnorp_2K_Normal.uasset
>>
>>
>> Please let me know if this is a config error or it is an authz bug.
>>
>
> Do you know what versions are you using for the server and for the client?
>
> There is an issue with the authorization rules in versions 1.10.0 until
> 1.14.0, fixed in 1.10.7 and 1.14.1. I'm not sure if it would cause problems
> for you but check the description in the release notes:
> http://subversion.apache.org/docs/release-notes/1.14.html#compat-misc-authz
> and see if it might apply.
>
> Kind regards,
> Daniel Sahlberg
>
>

Reply via email to