[opencms-dev] Permissions problem with subfolders within asingle site

[Stefan Uldum Grinsted]

Hi Patrick

As far as I know, there is no such documentation.

But taking a wild gues, I would think "Control" means the ability to 
change properties and permissions for a given resource.

/ Stefan 




"Patrick Early" <pearly at icomponent.com> 
Sent by: opencms-dev-bounces at opencms.org
19-07-2005 16:22
Please respond to
The OpenCms mailing list <opencms-dev at opencms.org>


To
"'The OpenCms mailing list'" <opencms-dev at opencms.org>
cc

Subject
RE: [opencms-dev] Permissions problem with subfolders within    asingle 
site






Hi Stefan, 
 
Your suggestion worked great ? thank you!  I didn?t see the ?Override 
Inherited? option.  When that is checked, the ACL is set up correctly. 
Incidentally, is there any documentation about what each type of 
permission means?  For example, ?View? appears to mean that the site can 
be viewed from outside of the admin interface and ?Read? within.  ?Write? 
and ?Direct Publish? also make sense, but what is ?Control??
 
Thanks again for the help!
 
Regards,
 
- patrick
 

From: opencms-dev-bounces at opencms.org 
[mailto:opencms-dev-bounces at opencms.org] On Behalf Of Stefan Uldum 
Grinsted
Sent: Tuesday, July 19, 2005 3:24 AM
To: The OpenCms mailing list
Subject: Re: [opencms-dev] Permissions problem with subfolders within 
asingle site
 

Hi Patrick 

It is my experience that the groups you create, somehow, always has to 
inherit from Users. Otherwise it might give trouble. 
So in your case you will have to make Users the parent of both your 
project-groups. But that will deny them access to your folders as Deny for 
users overrule the Allow for the project-group. Therefore you also have to 
change the permissions of the project-folders to nothing for Users and 
check the override inherited. Meaning that neither allow or deny is set 
for the Users-group for those folders. 

I hope this helps. 

Best Regards
Stefan Uldum Grinsted
---------------------------------
Par No 1 Interactive a|s
sug at interactive.as



"Patrick Early" <pearly at icomponent.com> 
Sent by: opencms-dev-bounces at opencms.org 
18-07-2005 20:48 


Please respond to
The OpenCms mailing list <opencms-dev at opencms.org>



To
"OpenCMS DEV Mailing List" <opencms-dev at opencms.org> 
cc
 
Subject
[opencms-dev] Permissions problem with subfolders within a single site
 


 
 




Hello, 
  
I am a new OpenCMS user (version 6.0, Tomcat 5.1, MySQL 4.1, Trustix 
Linux) and would first like to say what an impressive product it is!  I 
am, however, having a problem with security regarding subfolders within a 
single site.  I?ve checked the archive list with little success and can 
only assume I?m doing something wrong (or missing something basic.)  J 
  
Anyway, I have a single site with a projects subfolder.  Within this 
projects subfolder, I want to create a subfolder for project A and project 
B.  So, we have: 
  
            /sites/default/projects/projectA 
/sites/default/projects/projectB 
  
I would then like to secure the folders by group to only allow access to 
that folder to that group (and Administrators, of course.)  So, I created 
two groups: 
  
            ProjectA 
            ProjectB 
  
And users to occupy those groups: 
  
            UserA (member of ProjectA group, not member of Users) 
            UserB (member of ProjectB group, not member of Users) 
  
The ACLs on the folders are: 
  
            ProjectA 
-        Administrators group: FULL access 
-        Users group: No access (explicitly denied in ACL) 
-        Guests group: No access (explicitly denied in ACL) 
-        ProjectA group: FULL access 
  
ProjectB 
-        Administrators group: FULL access 
-        Users group: No access (explicitly denied in ACL) 
-        Guests group: No access (explicitly denied in ACL) 
-        ProjectB group: FULL access 
  
What I am finding is that the user is continually prompted for username 
and password when trying to access the resource, meaning that 
authorization failed.  The only way I was able to get it to work is to 
allow access to the folders to the Users group and then put each user in 
the Users group.  This defeats the purpose of using the project-related 
groups in the first place.  It seems maybe that membership in the default 
Users group is required? 
  
Any advice you have is appreciated! 
  
Regards, 
  
- patrick 
  
_________________________________________________________ 
patrick early
principal software engineer           icomponent software 
 

_______________________________________________
This mail is send to you from the opencms-dev mailing list
To change your list options, or to unsubscribe from the list, please visit
http://mail.opencms.org/mailman/listinfo/opencms-dev 

_______________________________________________
This mail is send to you from the opencms-dev mailing list
To change your list options, or to unsubscribe from the list, please visit
http://mail.opencms.org/mailman/listinfo/opencms-dev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://webmail.opencms.org/pipermail/opencms-dev/attachments/20050720/231606f6/attachment.htm>