[opencms-dev] Basic or forms-based authentication for folders - how?

[Claus Priisholm]

Me too :-)

I have the same idea of using the permissions as a generic access 
control for the site as well. Haven't had any luck so far though.
I can understand why I would get an error upon publishing and thus 
exporting a 'static' resource, since once exported it is really not in 
the hands of OpenCms any longer so it cannot really enforce any logic. 
But 'dynamic' pages could be enforced by OpenCms.
I guess that combining apache (possible tomcat) realms with the user 
database of OpenCms could achieve some of the wanted effect, but there 
would still be a problem with the navigation method as it returns all 
the resources independently of permissions (at least it seemed to be 
what happened when I tried).

So I would appreciate any pointers as well, to whether the access 
control of OpenCms workplace extends (or can be extended) to include 
the non-static-exported parts of a site as well.

On fredag, sep 19, 2003, at 18:57 Europe/Copenhagen, 
RReppel at burntsand.com wrote:

> Hi,
>
> I'm trying to protect a subfolder via Basic Authentication, i.e. there 
> is a
> part of my site which is available to the public and another one for 
> which
> login is required. Can this be done with the built-in security 
> mechanisms of
> OpenCMS?
>
> One approach I have tried is to go into the OpenCMS Workplace and 
> remove the
> "r" and "v" permissions for "Others" on the folder to be protected. 
> However,
> upon publishing this leads to the following error message:
>
> Exception com.opencms.core.CmsException: 31 Access denied to resource.
> Detailed error: [com.opencms.file.mySql.CmsResourceBroker]
> /default/vfs/intra/index.html.
>
> .... Where "intra" is the name of the folder I'm trying to protect.
>
>
> Is there another way of doing this?
>
> If so, is forms-based authentication supported?
>
> Thanks for your help.
>
> Regards,
>
> Robert
> _______________________________________________
> This mail is send to you from the opencms-dev mailing list
> To change your list options, or to unsubscribe from the list, please 
> visit
> http://mail.opencms.org/mailman/listinfo/opencms-dev
>
>
--
Claus Priisholm
+45 48 22 46 46, fax: +45 48 22 46 43
cpr at codedroids.com
http://www.codedroids.com