<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Lucida Sans Unicode";
panose-1:2 11 6 2 3 5 4 2 2 4;}
@font-face
{font-family:sans-serif;
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
p
{mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman";}
tt
{font-family:"Courier New";}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Lucida Sans Unicode";
color:windowtext;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>Hi Stefan, <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>Your suggestion
worked great – thank you! I didn’t see the “Override
Inherited” option. When that is checked, the ACL is set up correctly. Incidentally,
is there any documentation about what each type of permission means? For
example, “View” appears to mean that the site can be viewed from
outside of the admin interface and “Read” within. “Write”
and “Direct Publish” also make sense, but what is “Control”?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>Thanks again for the
help!<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>Regards,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>- patrick<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Lucida Sans Unicode"><span
style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>
opencms-dev-bounces@opencms.org [mailto:opencms-dev-bounces@opencms.org] <b><span
style='font-weight:bold'>On Behalf Of </span></b>Stefan Uldum Grinsted<br>
<b><span style='font-weight:bold'>Sent:</span></b> Tuesday, July 19, 2005 3:24
AM<br>
<b><span style='font-weight:bold'>To:</span></b> The OpenCms mailing list<br>
<b><span style='font-weight:bold'>Subject:</span></b> Re: [opencms-dev]
Permissions problem with subfolders within asingle site</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'><br>
</span></font><font size=2 face=sans-serif><span style='font-size:10.0pt;
font-family:sans-serif'>Hi Patrick</span></font> <br>
<br>
<font size=2 face=sans-serif><span style='font-size:10.0pt;font-family:sans-serif'>It
is my experience that the groups you create, somehow, always has to inherit
from Users. Otherwise it might give trouble.</span></font> <br>
<font size=2 face=sans-serif><span style='font-size:10.0pt;font-family:sans-serif'>So
in your case you will have to make Users the parent of both your
project-groups. But that will deny them access to your folders as Deny for
users overrule the Allow for the project-group. Therefore you also have to
change the permissions of the project-folders to nothing for Users and check
the override inherited. Meaning that neither allow or deny is set for the Users-group
for those folders.</span></font> <br>
<br>
<font size=2 face=sans-serif><span style='font-size:10.0pt;font-family:sans-serif'>I
hope this helps.</span></font> <br>
<font size=2 face=sans-serif><span style='font-size:10.0pt;font-family:sans-serif'><br>
Best Regards<br>
Stefan Uldum Grinsted<br>
---------------------------------<br>
Par No 1 Interactive a|s<br>
sug@interactive.as<br>
</span></font><br>
<br>
<o:p></o:p></p>
<table class=MsoNormalTable border=0 cellpadding=0 width="100%"
style='width:100.0%'>
<tr>
<td width="40%" valign=top style='width:40.0%;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal><b><font size=1 face=sans-serif><span style='font-size:
7.5pt;font-family:sans-serif;font-weight:bold'>"Patrick Early"
<pearly@icomponent.com></span></font></b><font size=1 face=sans-serif><span
style='font-size:7.5pt;font-family:sans-serif'> </span></font><br>
<font size=1 face=sans-serif><span style='font-size:7.5pt;font-family:sans-serif'>Sent
by: opencms-dev-bounces@opencms.org</span></font> <o:p></o:p></p>
<p><font size=1 face=sans-serif><span style='font-size:7.5pt;font-family:
sans-serif'>18-07-2005 20:48</span></font> <o:p></o:p></p>
<table class=MsoNormalTable border=1 cellpadding=0>
<tr>
<td valign=top bgcolor=white style='background:white;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal align=center style='text-align:center'><font size=1
face=sans-serif><span style='font-size:7.5pt;font-family:sans-serif'>Please
respond to<br>
The OpenCms mailing list <opencms-dev@opencms.org></span></font><o:p></o:p></p>
</td>
</tr>
</table>
<p><font size=3 face="Times New Roman"><span style='font-size:12.0pt'><o:p></o:p></span></font></p>
</td>
<td width="59%" valign=top style='width:59.0%;padding:.75pt .75pt .75pt .75pt'>
<table class=MsoNormalTable border=0 cellpadding=0 width="100%"
style='width:100.0%'>
<tr>
<td valign=top style='padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal align=right style='text-align:right'><font size=1
face=sans-serif><span style='font-size:7.5pt;font-family:sans-serif'>To</span></font><o:p></o:p></p>
</td>
<td valign=top style='padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal><font size=1 face=sans-serif><span style='font-size:
7.5pt;font-family:sans-serif'>"OpenCMS DEV Mailing List"
<opencms-dev@opencms.org></span></font> <o:p></o:p></p>
</td>
</tr>
<tr>
<td valign=top style='padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal align=right style='text-align:right'><font size=1
face=sans-serif><span style='font-size:7.5pt;font-family:sans-serif'>cc</span></font><o:p></o:p></p>
</td>
<td valign=top style='padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'><o:p> </o:p></span></font></p>
</td>
</tr>
<tr>
<td valign=top style='padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal align=right style='text-align:right'><font size=1
face=sans-serif><span style='font-size:7.5pt;font-family:sans-serif'>Subject</span></font><o:p></o:p></p>
</td>
<td valign=top style='padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal><font size=1 face=sans-serif><span style='font-size:
7.5pt;font-family:sans-serif'>[opencms-dev] Permissions problem with
subfolders within a single site</span></font><o:p></o:p></p>
</td>
</tr>
</table>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<table class=MsoNormalTable border=0 cellpadding=0>
<tr>
<td valign=top style='padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'><o:p> </o:p></span></font></p>
</td>
<td valign=top style='padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'><o:p> </o:p></span></font></p>
</td>
</tr>
</table>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'><o:p></o:p></span></font></p>
</td>
</tr>
</table>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><br>
<br>
<br>
</span></font><font size=2 face="Lucida Sans Unicode"><span style='font-size:
10.0pt;font-family:"Lucida Sans Unicode"'>Hello,</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'> </span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>I am a new OpenCMS user (version 6.0, Tomcat
5.1, MySQL 4.1, Trustix Linux) and would first like to say what an impressive
product it is! I am, however, having a problem with security regarding
subfolders within a single site. I’ve checked the archive list with
little success and can only assume I’m doing something wrong (or missing
something basic.) </span></font><font size=2 face=Wingdings><span
style='font-size:10.0pt;font-family:Wingdings'>J</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'> </span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>Anyway, I have a single site with a projects
subfolder. Within this projects subfolder, I want to create a subfolder
for project A and project B. So, we have:</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'> </span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>
/sites/default/projects/projectA</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>/sites/default/projects/projectB</span></font>
<br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'> </span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>I would then like to secure the folders by
group to only allow access to that folder to that group (and Administrators, of
course.) So, I created two groups:</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'> </span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>
ProjectA</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>
ProjectB</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'> </span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>And users to occupy those groups:</span></font>
<br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'> </span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>
UserA (member of ProjectA group, not member of Users)</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>
UserB (member of ProjectB group, not member of Users)</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'> </span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>The ACLs on the folders are:</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'> </span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>
ProjectA</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>-</span></font><font size=1><span
style='font-size:7.5pt'> </span></font><font size=2
face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>Administrators
group: FULL access</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>-</span></font><font size=1><span
style='font-size:7.5pt'> </span></font><font size=2
face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>Users
group: No access (explicitly denied in ACL)</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>-</span></font><font size=1><span
style='font-size:7.5pt'> </span></font><font size=2
face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>Guests
group: No access (explicitly denied in ACL)</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>-</span></font><font size=1><span
style='font-size:7.5pt'> </span></font><font size=2
face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>ProjectA
group: FULL access</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'> </span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>ProjectB</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>-</span></font><font size=1><span
style='font-size:7.5pt'> </span></font><font size=2
face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>Administrators
group: FULL access</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>-</span></font><font size=1><span
style='font-size:7.5pt'> </span></font><font size=2
face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>Users
group: No access (explicitly denied in ACL)</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>-</span></font><font size=1><span
style='font-size:7.5pt'> </span></font><font size=2
face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>Guests
group: No access (explicitly denied in ACL)</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>-</span></font><font size=1><span
style='font-size:7.5pt'> </span></font><font size=2
face="Lucida Sans Unicode"><span style='font-size:10.0pt;font-family:"Lucida Sans Unicode"'>ProjectB
group: FULL access</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'> </span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>What I am finding is that the user is
continually prompted for username and password when trying to access the
resource, meaning that authorization failed. The only way I was able to
get it to work is to allow access to the folders to the Users group and then
put each user in the Users group. This defeats the purpose of using the
project-related groups in the first place. It seems maybe that membership
in the default Users group is required?</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'> </span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>Any advice you have is appreciated!</span></font>
<br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'> </span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>Regards,</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'> </span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>- patrick</span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'> </span></font> <br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>_________________________________________________________</span></font>
<br>
<font size=2 face="Lucida Sans Unicode"><span style='font-size:10.0pt;
font-family:"Lucida Sans Unicode"'>patrick early<br>
principal software engineer icomponent
software</span></font> <br>
<font size=2 face="Courier New"><span style='font-size:10.0pt;font-family:
"Courier New"'><br>
<br>
<tt><font face="Courier New">_______________________________________________</font></tt><br>
<tt><font face="Courier New">This mail is send to you from the opencms-dev
mailing list</font></tt><br>
<tt><font face="Courier New">To change your list options, or to unsubscribe
from the list, please visit</font></tt><br>
<tt><font face="Courier New">http://mail.opencms.org/mailman/listinfo/opencms-dev</font></tt></span></font>
<o:p></o:p></p>
</div>
</body>
</html>