When the user connects to a remote VisualSVN Server using the management console, the server uses the current credentials to authenticate the user. All administrative actions on the remote server are performed on the user's behalf. In other words, VisualSVN Server impersonates the user. This requires that user account should have appropriate permissions on the remote computer where VisualSVN Server is installed. This article describes how to configure these permissions properly.
Access denied errors
Incorrect user access rights settings are usually identified by receiving one of the following error messages when trying to connect to VisualSVN Server remotely.
When a non-administrative user is not a member of the Distributed COM Users group:
When a non-administrative user is a member of the Distributed COM Users group, but not a member of the VisualSVN Server Admins group:
Granting user access rights
Configuration steps described in this article apply to domain and non-domain environments. However, the server may require you to perform additional configuration steps in a non-domain environment.
The following permissions are required to administer VisualSVN Server remotely:
- Permissions to access DCOM and WMI remotely,
- Special permissions to manage resources related to VisualSVN Server.
Users who are local administrators on the computer where VisualSVN Server is installed automatically obtain all required permissions to administer the server remotely.
To grant all the required permission to a non-administrative user, you should include the user in the following local groups on the computer where VisualSVN Server is installed:
- VisualSVN Server Admins,
- Distributed COM Users.