Web-server – mod_dav_svn user permission on the repository

apache-2.2svnweb-server

I had just build subversion repository with apache mod_dav_svn plugin, so the dev team can do any versioning process with usual port of httpd.
it works quite smoothly, they did checkout/update/commit process from other network until they found the problem when access the server ssh-ly to perform some checkout process, they need to update some working copy on the server for sample development tags in httpd doc root, only root can checkout/update some working copy on the server, every user that already allowed by "AuthUserFile" config always got denied message to do that.

I thought the only possibly config that related for this is

 AuthUserFile /etc/svn-auth-conf
 AuthzSVNAccessFile /etc/svn-acl-conf

i'd tried several times to change the config file related to that things, but no result..

Best Answer

If I understand the question correctly, you don't have any issues when performing svn via http://somehost/svn/repo/proj but when you attempt to use the locally installed svn client from the system, you are getting permission denied from any user other than root.

What are the permissions of the files that you are trying to commit/update/checkout? are they owned by a functional user account that the user doesn't have permissions to?

Try to perform checkout/update/commits from /tmp to see if its a file permissions problem.

Related Solutions

Linux – Configuring authorization for Subversion svnserve

It turns out that the conf file in the repository directory should be edited e.g. if you had a repository named /svn/repos then you would edit /svn/repos/conf/svnserve.conf - rather than /etc/subversion/config...

Svn post-commit not performing

From your hook script, call another script to do the svn updating. Limit www-data's sudo abilitys just JUST running that script. Don't accept any args.

From the script that will do the updating, make sure you su so the user that owns the local working copy you are updatin, like this:

in sudoers:

www-data ALL=(ALL) NOPASSWD:/usr/local/bin/update_my_thing

Hook script that get's called by svn and is running as www-data:

#/bin/sh
sudo /usr/local/bin/update_my_thing

Then in /usr/local/bin/update_my_thing

#/bin/sh
USER=usernam_that_owns_localsvncopy
su $USER -c 'svn up /path/to/localsvncopy'

Best Answer

Related Solutions

Linux – Configuring authorization for Subversion svnserve

Svn post-commit not performing

Related Topic