[opencms-dev] Securing the system

[Michael Goodwin]

I would like to prevent people from seeing files that have not been
exported statically. Anyone achieved this?

What seems logical to me is to remove the read permission for 'others' for
the files. However when this is done there is an error when you publish the
files. What rights does the publishing process operate with?

All help appreciated.

Publishing resource ...
Publishing /system/bodies/content/just_for_fun/webcam.asp
Publishing /content/just_for_fun/webcam.asp
Static export, number of starting links is: 2
Exporting /content/just_for_fun/webcam.asp
Exception com.opencms.core.CmsException: 31 Access denied to resource.
Detailed error: [com.opencms.file.mySql.CmsResourceBroker]
/default/vfs/content/just_for_fun/webcam.asp.
at
com.opencms.file.genericSql.CmsResourceBroker.readFileHeader(CmsResourceBroker.java:5365)
at
com.opencms.file.genericSql.CmsResourceBroker.readProperty(CmsResourceBroker.java:6117)
at com.opencms.file.CmsObject.readProperty(CmsObject.java:3302)
at com.opencms.util.Utils.isHttpsResource(Utils.java:368)
at
com.opencms.launcher.CmsXmlLauncher.generateOutput(CmsXmlLauncher.java:259)
at com.opencms.launcher.CmsXmlLauncher.launch(CmsXmlLauncher.java:341)
at com.opencms.launcher.A_CmsLauncher.initlaunch(A_CmsLauncher.java:274)
at com.opencms.file.CmsStaticExport.exportLink(CmsStaticExport.java:628)
at com.opencms.file.CmsStaticExport.<init>(CmsStaticExport.java:259)
at
com.opencms.file.genericSql.CmsResourceBroker.exportStaticResources(CmsResourceBroker.java:4659)
at com.opencms.file.CmsObject.exportStaticResources(CmsObject.java:1523)
at com.opencms.file.CmsObject.publishProject(CmsObject.java:2453)
at com.opencms.file.CmsObject.publishResource(CmsObject.java:2598)
at
com.opencms.workplace.CmsPublishResourceThread.run(CmsPublishResourceThread.java:61)
Skipping /system/bodies/content/just_for_fun/webcam.asp
... static export finished
Checking filesystem links ...
.. filesystem link check finished
... the resource has been published