[opencms-dev] webuser permission problem

[Stephen Turner]

I just noticed that my "Members" group is NOT a child of "Guests" so I 
sent you a bum steer there. Apologies.
So, I dont know what is wrong with you :-) but the way you are trying to 
do this is correct from by reading.

I use version 6.2.3 but I still experience the same behaviour that you do.
I think this is a bug in opencms permissions or both you and I are 
misunderstanding.

I have read and reread the parts of chapter 4 and chapter 5 of "Managing 
and Customising opencms 6" and I think that the permission control you 
are using should work.

*My conclusion is that* *if a group "Members" is a child of  group 
"Guests"  then  the permissions given to "Guests" overrides permissions 
given to the "Members".
*
The only solution is to remove the child relationship. Maybe the 
"Guests" group is special and this works if we create our own 
parent-child hierarchy or maybe it works correctly for users rather than 
webusers.

Unfortunately, I do not have time to experiment and in any case I think 
someone from Alcakon should clear up the matter as it is fundamental.


Farnaz Fotrousi wrote:
> I use opencms 6.0.3.
> If I deny all access to Guests for a file, although I give read and 
> view access to a webuser group but its members can not read the page.
> I also included "overwrite inherited" checkbox but nothing changed.
> what do you mean by "inheritance", do you mean including "overwrite 
> inherited"?
> please tell me, what's wrong with me?
>  
>
> */hideoushog <steve at bridgequarter.co.uk>/* wrote:
>
>
>     Is this a problem of inheritance?
>     I have done exactly this.
>     I have a group of webuser "Members"
>     I have a directory "memberarea"
>     I deny all access to Guests on "memberarea", including the
>     inheritance tick
>     box
>     I allow view access to all "Members", including inheritance.
>
>     The membership area disappears from menus
>
>
>     Farnaz Fotrousi wrote:
>     >
>     > Dear All,
>     >
>     > I have problem with webusers permissions.
>     >
>     > In my site, I have a registration form which guests can register
>     as a
>     > webuser. But I have some pages which just special webusers (I
>     have defined
>     > in opencms) can be accessed.
>     >
>     > So I did the following steps:
>     > 1- I defined "special group" for those special webusers as a
>     child of
>     > Guests group.
>     > 2- For those pages allowed read and view permission for my
>     "special group"
>     > but denied all permission except view for guest user.
>     > 3- define login-form for thses pages
>     >
>     > In this step, webusers in my "special group" can access to those
>     pages
>     > after login.
>     > But my problem happens when webusers register through the site
>     as they are
>     > created in Guests group.In this case they can view my special pages.
>     > If I denied permissions for Guests group, my "special group" can not
>     > access too.
>     > I should mention that the parent of my "special group" should be
>     Guests as
>     > I don't want give the pemission for accessing the opencms workplace.
>     >
>     > How can I solve this problem?
>     >
>     > Regards,
>     > Farnaz Fotrousi
>     >
>     >
>     >
>     > __________________________________________________
>     > Do You Yahoo!?
>     > Tired of spam? Yahoo! Mail has the best spam protection around
>     > http://mail.yahoo.com
>     >
>     > _______________________________________________
>     > This mail is sent to you from the opencms-dev mailing list
>     > To change your list options, or to unsubscribe from the list,
>     please visit
>     > http://lists.opencms.org/mailman/listinfo/opencms-dev
>     >
>
>     -- 
>     View this message in context:
>     http://www.nabble.com/webuser-permission-problem-tf2913182.html#a8142299
>     Sent from the OpenCMS - Dev mailing list archive at Nabble.com.
>
>
>     _______________________________________________
>     This mail is sent to you from the opencms-dev mailing list
>     To change your list options, or to unsubscribe from the list,
>     please visit
>     http://lists.opencms.org/mailman/listinfo/opencms-dev
>
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam? Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
>
> ------------------------------------------------------------------------
>
>
> _______________________________________________
> This mail is sent to you from the opencms-dev mailing list
> To change your list options, or to unsubscribe from the list, please visit
> http://lists.opencms.org/mailman/listinfo/opencms-dev
> ------------------------------------------------------------------------
>
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.5.432 / Virus Database: 268.16.2/613 - Release Date: 01/01/2007 14:50
>   

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://webmail.opencms.org/pipermail/opencms-dev/attachments/20070104/48a0efff/attachment.htm>