<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1400" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Hi,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>In order to prevent client from reading other
module content (which is belong to other clients) from /system/, I
have apply 'rwvrwvrw--' to the whole /system/ except the client's module and the
opencms default module under /system/modules/. </FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>The client now really cannot read the content
inside system except those related to his module. But seems this make the
opencms very unstable. For example, exception about 'access
denied' when publishing pages, etc.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>The question is, should I change the access
permission of /system/ ? is it really will make the whole opencms unstable? any
thing should I do about changing /system/ permission?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Moreover, in order to let client edit his module
only, I delete the opencms pre-defined 'offline' project, therefore, the client
now can only have 'online' and his project, this mean he cannot modify other
thing beside his project. Is it okay? Will it also make the opencms
unstable?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Best regards,</FONT></DIV>
<DIV><FONT face=Arial size=2>Jessie =)</FONT></DIV></BODY></HTML>