[opencms-dev] Switching the user of cmsObject/Safety

[Jonathan Woods]

Andy -
 
You can store the reference by assigning it to something to which you'll
have access when you need it.  You'll "need it" later, at times when OpenCms
calls your code in response to new user requests or other events.  The
easiest thing is to assign the CmsObject instance to a static field of
(e.g.) your module class, e.g.
 
    private static final CmsObject MY_STORED_CMSOBJECT;
 
But beware: although several people have said this works for them, it's an
undocumented approach.  It feels unsatisfactory because we're not told that
CmsObject is threadsafe, and by using a shared reference possibly to service
more than one request at the same time we're assuming that it is.  If that
worries you, synchronise on your module class.
 
Jon

  _____  

From: Andy Bicksbo [mailto:schlachtzeuger at gmail.com] 
Sent: 04 November 2006 21:31
To: jonathan.woods at scintillance.com
Subject: Re: [opencms-dev] Switching the user of cmsObject/Safety


Hi
I think this would be a good soluation. But do you know how i can store the
object to use later. Does this (the initialize method of the
I_CmsModuleAction) work for ScheduledJobs as well?
Thanks
Andy

 
2006/10/19, Jonathan Woods <jonathan.woods at scintillance.com>: 

If your module registers a class implementing I_CmsModuleAction in
opencms-modules.xml, then that class will get instantiated and called on
module initialisation time ( e.g. at system start-up).  Various methods
defined in the interface include as a parameter an instance of CmsObject,
and I believe the OpenCms runtime calls these methods (at start-up) using a
CmsObject which has administrative rights.  In your module's implementation
of I_CmsModuleAction, you can store a reference to this CmsObject to be used
later.  It doesn't feel like a neat solution, but I believe people have used
it successfully. 
 
There's been discussion on this subject on this list in the past year - you
might be able to find something else by searching e.g. at
http://www.nabble.com/OpenCMS---Dev-f654.html.
 
Jon

  _____  

From: opencms-dev-bounces at opencms.org [mailto:
<mailto:opencms-dev-bounces at opencms.org> opencms-dev-bounces at opencms.org] On
Behalf Of Andy Bicksbo
Sent: 19 October 2006 13:57
To: The OpenCms mailing list
Subject: [opencms-dev] Switching the user of cmsObject/Safety

 

Hi
 
I worked on this the last days and i didn't find a possibility the get a
readble password out of an user. The Password is decoded into md5, i think,
and as far as i k´know, there isn't any possibility the retrieve a md5 into
human readable coding and there's nothing, where opencms retrieves a
password. I'm working currently on a component for opencms, where i need to
build a cmsobject with a user with admin rights, but i don't want to write a
user with it'S password into sourcecode( cmsObject.loginuser(String
username, String password)) nor to change the permissions of every file i
have to alter before doing stuff with it and afterwards. (The user, who
should initiate this component has no adminrights, so i have to switch the
user of cmsObject) 
 
At topic:
But you can directly alter passwords in the db opencms uses(CMS_USER)
At this point, i think it#s not very save, that the db connection stuff is
written readable in the opencms.properties file
 
Does anybody know a solution?
 
Thanks for listening
Andy


_______________________________________________
This mail is sent to you from the opencms-dev mailing list
To change your list options, or to unsubscribe from the list, please visit 
http://lists.opencms.org/mailman/listinfo/opencms-dev




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://webmail.opencms.org/pipermail/opencms-dev/attachments/20061105/ac798849/attachment.htm>