<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Lucida Sans Unicode";
panose-1:2 11 6 2 3 5 4 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Lucida Sans Unicode";
color:windowtext;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
/* List Definitions */
@list l0
{mso-list-id:1091393693;
mso-list-type:hybrid;
mso-list-template-ids:317383672 1827703712 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:1.25in;
mso-level-number-position:left;
margin-left:1.25in;
text-indent:-.25in;
font-family:"Lucida Sans Unicode";
mso-fareast-font-family:"Times New Roman";}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>Hello,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>I am a new OpenCMS
user (version 6.0, Tomcat 5.1, MySQL 4.1, Trustix Linux) and would first like
to say what an impressive product it is! I am, however, having a problem
with security regarding subfolders within a single site. I’ve
checked the archive list with little success and can only assume I’m
doing something wrong (or missing something basic.) </span></font><font
size=2 face=Wingdings><span style='font-size:10.0pt;font-family:Wingdings'>J</span></font><font
size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:
"Lucida Sans Unicode"'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>Anyway, I have a
single site with a projects subfolder. Within this projects subfolder, I
want to create a subfolder for project A and project B. So, we have:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'> /sites/default/projects/projectA<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-indent:.5in'><font size=2
face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>/sites/default/projects/projectB<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>I would then like to
secure the folders by group to only allow access to that folder to that group
(and Administrators, of course.) So, I created two groups:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'> ProjectA<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'> ProjectB<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>And users to occupy
those groups:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'> UserA
(member of ProjectA group, not member of Users)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'> UserB
(member of ProjectB group, not member of Users)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>The ACLs on the
folders are:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'> ProjectA<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:1.25in;text-indent:-.25in;mso-list:l0 level1 lfo1'><![if !supportLists]><font
size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:
"Lucida Sans Unicode"'><span style='mso-list:Ignore'>-<font size=1
face="Times New Roman"><span style='font:7.0pt "Times New Roman"'>
</span></font></span></span></font><![endif]><font size=2
face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>Administrators
group: FULL access<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:1.25in;text-indent:-.25in;mso-list:l0 level1 lfo1'><![if !supportLists]><font
size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:
"Lucida Sans Unicode"'><span style='mso-list:Ignore'>-<font size=1
face="Times New Roman"><span style='font:7.0pt "Times New Roman"'>
</span></font></span></span></font><![endif]><font size=2
face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>Users
group: No access (explicitly denied in ACL)<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:1.25in;text-indent:-.25in;mso-list:l0 level1 lfo1'><![if !supportLists]><font
size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:
"Lucida Sans Unicode"'><span style='mso-list:Ignore'>-<font size=1
face="Times New Roman"><span style='font:7.0pt "Times New Roman"'>
</span></font></span></span></font><![endif]><font size=2
face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>Guests
group: No access (explicitly denied in ACL)<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:1.25in;text-indent:-.25in;mso-list:l0 level1 lfo1'><![if !supportLists]><font
size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:
"Lucida Sans Unicode"'><span style='mso-list:Ignore'>-<font size=1
face="Times New Roman"><span style='font:7.0pt "Times New Roman"'>
</span></font></span></span></font><![endif]><font size=2
face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>ProjectA
group: FULL access<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='margin-left:.5in'><font size=2
face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>ProjectB<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:1.25in;text-indent:-.25in;mso-list:l0 level1 lfo1'><![if !supportLists]><font
size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:
"Lucida Sans Unicode"'><span style='mso-list:Ignore'>-<font size=1
face="Times New Roman"><span style='font:7.0pt "Times New Roman"'>
</span></font></span></span></font><![endif]><font size=2
face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>Administrators
group: FULL access<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:1.25in;text-indent:-.25in;mso-list:l0 level1 lfo1'><![if !supportLists]><font
size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:
"Lucida Sans Unicode"'><span style='mso-list:Ignore'>-<font size=1
face="Times New Roman"><span style='font:7.0pt "Times New Roman"'>
</span></font></span></span></font><![endif]><font size=2
face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>Users
group: No access (explicitly denied in ACL)<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:1.25in;text-indent:-.25in;mso-list:l0 level1 lfo1'><![if !supportLists]><font
size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:
"Lucida Sans Unicode"'><span style='mso-list:Ignore'>-<font size=1
face="Times New Roman"><span style='font:7.0pt "Times New Roman"'>
</span></font></span></span></font><![endif]><font size=2
face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>Guests
group: No access (explicitly denied in ACL)<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:1.25in;text-indent:-.25in;mso-list:l0 level1 lfo1'><![if !supportLists]><font
size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:
"Lucida Sans Unicode"'><span style='mso-list:Ignore'>-<font size=1
face="Times New Roman"><span style='font:7.0pt "Times New Roman"'>
</span></font></span></span></font><![endif]><font size=2
face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>ProjectB
group: FULL access<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>What I am finding is
that the user is continually prompted for username and password when trying to
access the resource, meaning that authorization failed. The only way I
was able to get it to work is to allow access to the folders to the Users group
and then put each user in the Users group. This defeats the purpose of
using the project-related groups in the first place. It seems maybe that
membership in the default Users group is required?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>Any advice you have
is appreciated!<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>Regards,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>- patrick<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>_________________________________________________________</span></font><o:p></o:p></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>patrick early<br>
principal software
engineer icomponent
software</span></font><o:p></o:p></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>