AW: [opencms-dev] access rights to resources

[Stephan Hartmann]

Hi,

first my system:
Pentium III 700MHz, 256 MByte RAM, SuSE 7.1, Tomcat 3.2.1, opencms 4.3.3, 
MySQL.

I created a site with the following structure:

/ 
|-dir1/
|-dir2/
|-dir3/
|     |-sub1/
|     |-sub2/
|     |-sub3/

each directory contains an index.html and everything belongs to user Admin 
and group Administrators. All access rights are set to rwvrwvr-v-.
The navigation was created with CmsXmlNav. 
Then i created an user hartmann who belongs to group users.
Then i gave this user the file /dir3/sub2/index.html and set its rights to 
rwv------- and published the project.

Now, if i browse this site from some client, i am able to access 
/dir3/sub3/index.html just right through the navigation without any 
restrictions.

I create a new project and just set user and group of /dir3/sub3 (not /dir3) 
to hartmann and users and change rights of this directory also to rwv-------. 
The index.html still belongs to hartmann.users with rights rwv-------. Now i 
published the project.

Now the navigation does not show the entry for /dir/sub3 with the link to its 
index.html, but calling it directly by typing it into the location bar, i can 
view the page, but the navigation in it just shows the word "ERROR!" included 
in a paragraph tag, which does not come from my template.


By the way, from my netscape on Linux it is not possible to publish the 
projects. The dialog seems to go well, but afterwards the project is still 
available and there are no changes in the online project. 
>From a windows client with IE5 it is usually no problem, but after changing 
the access rights it also took me three tries to publishing the project!

And another bug:
I set up a proxy Apache to hide the servlet path from outside using the 
directives

ProxyPass /pics/	http://my.opencms.server/pics/
ProxyPass /	http://my.opencms.server/servlet/opencms/
ProxyPassReverse /	http://my.opencms.server/servlet/opencms/

When i login i get the explorer view, but when i want to change to the 
administration view, i get the following output:

<output>

Not Found (404)

Original request: 
/servlet/opencms/servlet/opencms/system/workplace/action/administration.html/index.html

Not found request: 
/servlet/opencms/servlet/opencms/system/workplace/action/administration.html/index.html 

</output>

seems that there is somewhere the servlet path hard coded.
Anyway there is a workaround by adding 

ProxyPass /servlet/opencms/	http://my.opencms.server/servlet/opencms/

before the other directives.


And another one:
with my Netscape under Linux it is not possible to change properties (i.e. 
title) of a resource. The dialog seems to go well but after comitting the 
changes they are not done.


OK, now i will try to set up the latest version of opencms and try it again.

Regards,
Stephan

> Hi,
>
> we can't reproduce that error - could you please send more information:
>
> Owner Group of the file. The folders this ressource is located in. All the
> right informations of these folders.
>
> Please test that error with the current OpenCms version. Is the error gone?
>
> Thanx,
> Andreas
>
> -----Ursprüngliche Nachricht-----
> Von: Stephan Hartmann [mailto:beffe at beffe.de]
> Gesendet: Freitag, 11. Mai 2001 15:43
> An: opencms-dev at www.opencms.com
> Betreff: Re: AW: [opencms-dev] access rights to resources
>
>
> Hi,
>
> > this is not the right behavior for OpenCms. We cannot reproduce that bug
>
> on
>
> > our local systems. Can you give us more information?
>
> I will, but you'll have to wait until monday ;-)
>
> > Which database do you use ...
>
> MySQL
>
> bye
> Stephan
>
> > Regards,
> > Andreas
> >
> > -----Ursprüngliche Nachricht-----
> > Von: Stephan Hartmann [mailto:hartmann at waehrisch-feykes.de]
> > Gesendet: Freitag, 11. Mai 2001 14:59
> > An: opencms-dev at www.opencms.com
> > Betreff: [opencms-dev] access rights to resources
> >
> >
> > Hello,
> >
> > i discovered that a page with access rights set to rwv------- in the
>
> online
>
> > project is still available for everyone without authentication. It is
> > just not displayed in the navigation tree.
> >
> > I remember that in an early version of opencms this could be used to
> > force restricted access to users who have an account in the project.
> >
> > is this a bug in my version (4.3.3) or has this feature been removed?
> > In that way rights for unknown make no sence.
> >
> > regards
> > Stephan