Andrei Cusnir wrote on Sat, Jul 31, 2021 at 02:01:30 +0200: > Hi Daniel, > can you please let me know if this is a case for which I should open a bug > ticket,
Yes, please, and please link to this thread from the ticket. > or this is something that has to do with the authz file contents. As I explained, I believe the existence of ** rules is what causes the recursive authz lookup to return a different result than the non-recursive one. Note that using svnserve is a workaround (given that your *.uasset is a file, according to the output you've posted). Cheers, Daniel > Kind Regards, > Andrei > > On Thu, Jul 22, 2021 at 4:57 PM Andrei Cusnir <and...@assembla.com> wrote: > > > Hi Daniel, > > thank for your reply, > > i was able to confirm this behaviour on both svn server versions 1.12.2 > > and 1.14.1 > > current apache server > > Apache/2.4.25 (Debian) SVN/1.14.1 OpenSSL/1.0.2u mod_wsgi/4.5.11 > > Python/2.7 configured -- resuming normal operations > > > > the user that reported it first is having most recent client > > SVN/1.14.1 (x64-microsoft-windows) serf/1.3.9 TortoiseSVN-1.14.1.29085 > > i have following client > > SVN/1.13.0 (x86_64-apple-darwin19.0.0) serf/1.3.9 > > > > > > On Thu, Jul 22, 2021 at 4:51 PM Daniel Sahlberg < > > daniel.l.sahlb...@gmail.com> wrote: > > > >> Den ons 21 juli 2021 kl 22:30 skrev Andrei Cusnir <and...@assembla.com>: > >> > >>> Hi, > >>> here is my authz config file > >>> > >>> [groups] > >>> r_users = Alexander_Lost > >>> > >>> [:glob:/] > >>> * = rw > >>> > >>> [:glob:/**/*.uasset] > >>> @r_users = rw > >>> > >>> [:glob:/**/Source/**] > >>> @r_users = > >>> > >>> > >>> user Alexander_Lost should be able to work with uasset type of files and > >>> should not see anything that has Source in the global path > >>> > >>> when i am trying to remove a path > >>> svn rm https://"Alexander_Lost"@ > >>> subversion.assembla.com/svn/repo_name/branches/project_name/Projects/ShooterGame/Content/Mods/project_name/Assets/Foliage/Trees/StepeeGrass/Grass01/skwnorp_2K_Normal.uasset > >>> -m "test uasset delete by andrei" > >>> svn: E175013: Access to > >>> '/svn/repo_name/!svn/txr/153436-3cur/branches/project_name/Projects/ShooterGame/Content/Mods/project_name/Assets/Foliage/Trees/StepeeGrass/Grass01/skwnorp_2K_Normal.uasset' > >>> forbidden > >>> > >>> in apache logs i can see the following > >>> > >>> [Wed Jul 21 19:47:42.187161 2021] [authz_svn:error] [pid 1510:tid > >>> 140015597156096] [client 188.26.223.19:42966] Access denied: > >>> 'Alexander_Lost' DELETE > >>> repo_name:/branches/project_name/Projects/ShooterGame/Content/Mods/project_name/Assets/Foliage/Trees/StepeeGrass/Grass01/skwnorp_2K_Normal.uasset > >>> > >>> > >>> Please let me know if this is a config error or it is an authz bug. > >>> > >> > >> Do you know what versions are you using for the server and for the client? > >> > >> There is an issue with the authorization rules in versions 1.10.0 until > >> 1.14.0, fixed in 1.10.7 and 1.14.1. I'm not sure if it would cause problems > >> for you but check the description in the release notes: > >> http://subversion.apache.org/docs/release-notes/1.14.html#compat-misc-authz > >> and see if it might apply. > >> > >> Kind regards, > >> Daniel Sahlberg > >> > >>
