Antwort: RE: [opencms-dev] Authorizing intranet users as guests possible?

[Klaus.Mueller at etas.de]

Thanks everyone for your feedback!

I'm using webusers now who are members of group user. And it works fine.
The advantage of web users is that I can still use the groups in the
workplace to maintain different levels of user access for editing pages. It
seems to me that this would not be possible with the other approaches where
you create a dummy type of group...

Regards,

Klaus




                                                                                                                     
                    "Alexander Kandzior"                                                                             
                    <alex at opencms.org>            An:     <opencms-dev at www.opencms.org>                              
                    Gesendet von:                 Kopie:                                                             
                    owner-opencms-dev at www.o       Thema:  RE: [opencms-dev] Authorizing intranet users as guests     
                    pencms.org                     possible?                                                         
                                                                                                                     
                                                                                                                     
                    10.09.02 13:34                                                                                   
                    Bitte antworten an                                                                               
                    opencms-dev                                                                                      
                                                                                                                     
                                                                                                                     




Klaus,

additional to the Webuser solution already mentioned,
in the 5.0 version all access to the Workplace requires that
the User is member of the group "Users". If this is not the
case, he is not allowed to login into the workplace.

So you can simply create a group eg. "Externals",
make sure "Users" is not a parent group and protect your resources
so that only "Externals" can access it.

Regards,
Alex.

Alexander Kandzior
OpenCms Group / Alkacon Software


> -----Original Message-----
> From: owner-opencms-dev at www.opencms.org
> [mailto:owner-opencms-dev at www.opencms.org] On Behalf Of
> Klaus.Mueller at etas.de
> Sent: Tuesday, September 10, 2002 12:05 PM
> To: opencms-dev at www.opencms.org
> Subject: [opencms-dev] Authorizing intranet users as guests possible?
>
>
> Dear all,
>
> I'm using OpenCMS 4.7 on W2K with Tomcat 4 standalone to set
> up an intranet at the Fachhochschule (our university). I
> would like  to configure the OpenCMS system in such a way
> that it controls read access for  the entire site. This would
> allow our students to access the internal site via  the internet.
>
> I've played around with access control for a while now and
> I'm kind of stuck. I can control access to dynamic pages by
> setting the  page or folder group to "Users" and changing
> access rights so that only group members can read the file.
>
> The problem is, this also means that all of these users now
> have access to the OpenCMS workplace. I don't want to see any
> of them in my workplace. In fact, I'd  much prefer if they
> were guests who are not supposed to log in to the workplace at all.
>
> However, the problem with guests on the other hand is that
> they don't have to log in to the intranet either (browsers
> does not request login). So as soon as I set the group for
> all pages and folders to guests they are visible for
> everyone. And, of course, this is not  what I'm looking for either.
>
> I would just like to have an area which has limited access
> for "the world" and a workspace which is accessible only for
> a subset of those who may read the pages.
>
> Am I making a mistake somewhere? Or has anyone ever
> successfully set up something like this?
>
> Your hints and suggestions are more than welcome.
>
> Kind regards,
>
> Klaus Müller
>
>
>
>