[opencms-dev] Permissions problem with subfolders within a single site

[Patrick Early]

Hello,

 

I am a new OpenCMS user (version 6.0, Tomcat 5.1, MySQL 4.1, Trustix Linux)
and would first like to say what an impressive product it is!  I am,
however, having a problem with security regarding subfolders within a single
site.  I've checked the archive list with little success and can only assume
I'm doing something wrong (or missing something basic.)  :-)

 

Anyway, I have a single site with a projects subfolder.  Within this
projects subfolder, I want to create a subfolder for project A and project
B.  So, we have:

 

            /sites/default/projects/projectA

/sites/default/projects/projectB

 

I would then like to secure the folders by group to only allow access to
that folder to that group (and Administrators, of course.)  So, I created
two groups:

 

            ProjectA

            ProjectB

 

And users to occupy those groups:

 

            UserA (member of ProjectA group, not member of Users)

            UserB (member of ProjectB group, not member of Users)

 

The ACLs on the folders are:

 

            ProjectA

-        Administrators group: FULL access

-        Users group: No access (explicitly denied in ACL)

-        Guests group: No access (explicitly denied in ACL)

-        ProjectA group: FULL access

 

ProjectB

-        Administrators group: FULL access

-        Users group: No access (explicitly denied in ACL)

-        Guests group: No access (explicitly denied in ACL)

-        ProjectB group: FULL access

 

What I am finding is that the user is continually prompted for username and
password when trying to access the resource, meaning that authorization
failed.  The only way I was able to get it to work is to allow access to the
folders to the Users group and then put each user in the Users group.  This
defeats the purpose of using the project-related groups in the first place.
It seems maybe that membership in the default Users group is required?

 

Any advice you have is appreciated!

 

Regards,

 

- patrick

 

_________________________________________________________

patrick early
principal software engineer           icomponent software

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://webmail.opencms.org/pipermail/opencms-dev/attachments/20050718/c5e3e08b/attachment.htm>