Red Hat Bugzilla – Bug 691375
subversion client demands unnecessary access to parent directories of operations
Last modified: 2015-09-13 20:22:25 EDT
Description of problem:
subversion client demands unnecessary access to parent directories of operations.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Add user1 and user2 that have access to the project foo, but not the repo underneath:
user1 = rw
user2 = rw
2. svn co https://localhost/repos/foo --username user1
3. svn co https://localhost/repos/foo --username user2
4. As user1: svn rename test.txt new-test.txt; svn commit
5. As user2: svn update
svn: Server sent unexpected return value (403 Forbidden) in response to OPTIONS request for 'https://10.65.210.16/repos/testrepo'
Upstream bug: http://subversion.tigris.org/issues/show_bug.cgi?id=3242
Some fixes for this had made it into upstream 1.6.11 that we rebased to, but a lot of other fixes came in later.
The fix that is already present in 1.6.11:
Revisions that need to be backported for the fix:
r955369 - Fix regression from r946767
r946767 - reintegrate merges
r933299 - svn update after a file rename is committed (steps to reproduce above)
r931211 - merginfo initial fixes
Apart from these, there are patches that include test cases:
r945350 - reintegrate merge
r930921 - mergeinfo tests
r896562 - Only the test case tweaks in this. The rest is already there in 1.6.11
r896219 - tweaks to test in r877983
r877983 - copy
r876530 - regression test for the fixes
Sorry, the error should obviously have read:
svn: Server sent unexpected return value (403 Forbidden) in response to OPTIONS
request for 'https://localhost/repos/foo'