In my apache config I currently have the following settings on an svn/dav 
folder:

  <LimitExcept GET PROPFIND OPTIONS REPORT>
    Require user admin
    Allow From all
  </LimitExcept>
  <Limit GET PROPFIND OPTIONS REPORT>
    Satisfy any
    Require valid-user
    Allow from env=ValidXForward
    Allow from env=NoXForward
  </Limit>

The XForward env's are calculated to determine where the request is coming from 
(via the proxy etc).

So the idea is that from inside, the env= rules allow all 
GET/PROPFIND/OPTIONS/REPORT requests from internal IP's with no credentials, 
and also from outside with valid credentials. This works fine.

Other requests (not GET/PROPFIND/OPTIONS/REPORT) only work for user admin. The 
problem is that when another user is specified, apache returns a 401 and the 
user gets prompted for different credentials. I don't want this. If the user is 
a valid user but is not allowed access then I want 403 to be returned and the 
user to get a DENIED.

Does anyone know how to make this happen?

Thanks

James
_______________________________________________
luv-main mailing list
[email protected]
http://lists.luv.asn.au/listinfo/luv-main

Reply via email to