[opencms-dev] User Management Problem

Mon Apr 13 07:17:56 CEST 2009

Hi,
I think you are right. This is a OpenCms bug from 7.0.4. I'm not sure the
new logic of getting permissions for resources now. 

If you did the same thing with version 7.0.4 you will see the default
permission of new user in sub-unit is read, view and direct publish. This is
absolutely wrong as publish only work when user has +w, and an error is
displayed.

I think OpenCms fixed it in 7.0.5 by simply adding +w to the permission and
remove the error but still wrong. The default permission should inherit from
Users of root org unit, or if it is set Default it should be +r +v +w. What
is interesting here is +Direct pulish permission can NOT be denied for sub
org unit.

I have no work around for this. My advice is don't use Organization unit for
workplace users as the number of workplace users are not big. I use
Organization unit for web users only.

Huy

-----Original Message-----
From: opencms-dev-bounces at opencms.org
[mailto:opencms-dev-bounces at opencms.org] On Behalf Of Thanh Ly
Sent: Monday, April 13, 2009 8:48 AM
To: opencms-dev at opencms.org
Subject: Re: [opencms-dev] User Management Problem

Thanks you very much for your reply Michael,

my user is member of "Users" group (the default "Users" group of the new
orgunit)

if I create a user in root orgunit, "Users" group, this user will unable to
publish
but if I create a user in a new orgunit, "Users" group, this user will able
to publish, event I try to set deny publish,

you can try my scenario: create a new orgunit, create a user in the orgunit
just created and member of "Users" group (the default "Users" group of the
orgunit just created). the new user able to publish, event set deny publish
permission.

waiting for your reply.

Michael Moossen wrote:
> 
> Hi,
> 
> Most likely your user is member of the "Project Managers" group, in 
> which case the user has always publish permissions.
> 
> HTH
> -- 
> Michael Moossen
> 
> -------------------
> 
> Alkacon Software GmbH  - The OpenCms Experts
> http://www.alkacon.com - http://www.opencms.org
> 
> Visit OpenCms Days 2009 Conference and Expo
> June 15 to June 16 2009 in Cologne, Germany
> http://www.opencms-days.org
> 
> 
> Thanh Ly wrote:
>> Still unable to solve the problem.
>> is this a bug in OpenCms? any OpenCms expert please help....
>> 
>> 
>> yellowtrolley wrote:
>>> Did you solve the problem?
>>>
>>> I am having the same problem. Disabling group or user permissions to
>>> publish doesn't make any difference. The user can always publish.
>>> The rest of the permissions seem to work alright
>>>
>>>
>>> Thanh Ly wrote:
>>>> I have try to set Denied for publish permission, Overwrite inherited
>>>> for
>>>> group Users (in OrgUnit news) but the user editor01 (group Users,
>>>> OrgUnit
>>>> news) still able to publish.
>>>> Then I try to set Denied for publish permission, Overwrite inherited
>>>> for
>>>> user editor01, but this editor01 still able to publish.
>>>>
>>>> is this a bug in OpenCms? do you success using OrgUnit before?
>>>>
>>>> Please guild me how to disable publish permission of a user in a new
>>>> OrgUnit.
>>>>
>>>>
>>>> Christian Steinert wrote:
>>>>> Hi 
>>>>>
>>>>> have you looked at the resource permissions for your resources?
>>>>> When you set group permissions for your resources, then you can
>>>>> explicitly allow and disallow publishing for this resource for a group
>>>>> of users.
>>>>> If you add a user group to the permission settings of a folder, set
>>>>> "disallow" for the publishing permission on a folder, and activate
>>>>> "override inherited" and "inherit to subfolders" then this user group
>>>>> should not be able anymore to publish the resources below this folder
>>>>>
>>>>> hth
>>>>> christian
>>>>>
>>>>>> I'm using OpenCms 7.0.5 (build lastest from CVS), Oracle 10g, OC4J, 
>>>>>> and have problem with user management as follow:
>>>>>>
>>>>>> I create a OrgUnit called: "news" and Assigned Content is folder
>>>>>> /news/
>>>>>> then in this "news" orgunit I create a user editor01 (Group:
>>>>>> Users(the
>>>>>> default group in "news" orgunit); Role: Workplace user  )
>>>>>>
>>>>>> I login using the user /news/editor01 just created, in found that
>>>>>> this
>>>>>> user able to publish resources.
>>>>>>
>>>>>> If I create such user editor01 (group Users; role Workplace user) in
>>>>>> root orgunit and login using this root editor01, OK this user can not
>>>>>> publish resources
>>>>>>
>>>>>> So why the user /news/editor01 able to publish resources.
>>>>>>
>>>>>> I have follow Chapter 6 of the book "OpenCms 7 Developement" but
>>>>>> still
>>>>>> don't known how to create a editor and a aprover in a new orgunit,
>>>>>> all
>>>>>> user able to publish.
>>>>>>
>>>>>> Please help me.
>>>>>>
>>>>>> Thanks you and advanced.
>>>>>>
>>>>>>
>>>>>>
>>>>>>       
>>>>>>
>>>>>> _______________________________________________
>>>>>> This mail is sent to you from the opencms-dev mailing list
>>>>>> To change your list options, or to unsubscribe from the list, please
>>>>>> visit
>>>>>> http://lists.opencms.org/mailman/listinfo/opencms-dev
>>>>>>
>>>>>
>>>>>
____________________________________________________________________________
__
>>>>> Nur bis 16.03.! DSL-Komplettanschluss inkl. WLAN-Modem für nur 17,95
>>>>> EURO/mtl.
>>>>>  + 1 Monat gratis!* http://dsl.web.de/?ac=OM.AD.AD008K15039B7069a
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> This mail is sent to you from the opencms-dev mailing list
>>>>> To change your list options, or to unsubscribe from the list, please
>>>>> visit
>>>>> http://lists.opencms.org/mailman/listinfo/opencms-dev
>>>>>
>>>>>
>>>>
>>>
>> 
> 
> _______________________________________________
> This mail is sent to you from the opencms-dev mailing list
> To change your list options, or to unsubscribe from the list, please visit
> http://lists.opencms.org/mailman/listinfo/opencms-dev
> 

-- 
View this message in context:
http://www.nabble.com/User-Management-Problem-tp22470657p23016772.html
Sent from the OpenCMS - Dev mailing list archive at Nabble.com.

_______________________________________________
This mail is sent to you from the opencms-dev mailing list
To change your list options, or to unsubscribe from the list, please visit
http://lists.opencms.org/mailman/listinfo/opencms-dev