<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=gb2312">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--><o:SmartTagType
namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="Street"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="address"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="chsdate" downloadurl=""/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PersonName"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:宋体;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"\@宋体";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
p
{mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle18
{mso-style-type:personal;
font-family:Arial;
color:navy;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=ZH-CN link=blue vlink=blue>
<div class=Section1>
<p class=MsoNormal><font size=1 color=navy face=Arial><span lang=EN-US
style='font-size:9.0pt;font-family:Arial;color:navy'>Good question. I think this
should be a main reason why you want to use a cms?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=1 color=navy face=Arial><span lang=EN-US
style='font-size:9.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=1 color=navy face=Arial><span lang=EN-US
style='font-size:9.0pt;font-family:Arial;color:navy'>There is a pdf document in
OpenCMS website which explains how OpenCMS can control the relationship between
a resource and a user (or user group).<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=1 color=navy face=Arial><span lang=EN-US
style='font-size:9.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=1 color=navy face=Arial><span lang=EN-US
style='font-size:9.0pt;font-family:Arial;color:navy'>The answer to you question
is it depands. If you want anonymous user can get into OpenCMS workplace, you can
change the workplace’s security. By default, an anonymous user cannot reach there.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=1 color=navy face=Arial><span lang=EN-US
style='font-size:9.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=1 color=navy face=Arial><span lang=EN-US
style='font-size:9.0pt;font-family:Arial;color:navy'>Regards,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=1 color=navy face=Arial><span lang=EN-US
style='font-size:9.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=1 color=navy face=Arial><span lang=EN-US
style='font-size:9.0pt;font-family:Arial;color:navy'>Shi Yusen/Beijing Langhua Ltd.<o:p></o:p></span></font></p>
<div>
<p class=MsoNormal><font size=1 color=navy face=Arial><span lang=EN-US
style='font-size:9.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
</div>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span lang=EN-US style='font-size:12.0pt'>
<hr size=3 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=宋体><span style='font-size:10.0pt;
font-family:宋体;font-weight:bold'>发件人<span lang=EN-US>:</span></span></font></b><font
size=2 face=宋体><span lang=EN-US style='font-size:10.0pt;font-family:宋体'>
vijayanand.kalyanaraman@wipro.com [mailto:vijayanand.kalyanaraman@wipro.com] <br>
</span></font><b><font size=2 face=宋体><span style='font-size:10.0pt;font-family:
宋体;font-weight:bold'>发送时间<span lang=EN-US>:</span></span></font></b><font
size=2 face=宋体><span lang=EN-US style='font-size:10.0pt;font-family:宋体'> 2006</span></font><font
size=2 face=宋体><span style='font-size:10.0pt;font-family:宋体'>年<span lang=EN-US>1</span>月<span
lang=EN-US>4</span>日<span lang=EN-US> 11:31<br>
</span><b><span style='font-weight:bold'>收件人<span lang=EN-US>:</span></span></b><span
lang=EN-US> <st1:PersonName w:st="on">joe@galway.net</st1:PersonName>;
opencms-dev@opencms.org<br>
</span><b><span style='font-weight:bold'>主题<span lang=EN-US>:</span></span></b><span
lang=EN-US> RE: [opencms-dev] Clarification Reg Security in OpenCMS</span></span></font><span
lang=EN-US><o:p></o:p></span></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span lang=EN-US
style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:navy'>Kindly clarify is it
possible for an anonymous user (without a valid username/Password )to get into
OpenCMS workplace .<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:navy'>If that anonymous user
already had some knowledge on OpenCMS he must be knowing relative path/URL of
Explorer,Administration …views.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:navy'>Is it possible for him to
get into OpenCMS workplace without valid Credentials?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:navy'>Any suggestion in this
regard would be appreciated.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<p class=MsoNormal><font size=2 color=navy face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:navy'>Best Regards</span></font><font
color=navy><span lang=EN-US style='color:navy'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:navy'>VIjay Anand.K</span></font><font
color=navy><span lang=EN-US style='color:navy'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span lang=EN-US
style='font-size:10.0pt;font-family:Arial;color:navy'>(Off:30691961)</span></font><span
lang=EN-US><o:p></o:p></span></p>
</div>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span lang=EN-US style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span lang=EN-US
style='font-size:10.0pt;font-family:Tahoma;font-weight:bold'>From:</span></font></b><font
size=2 face=Tahoma><span lang=EN-US style='font-size:10.0pt;font-family:Tahoma'>
opencms-dev-bounces@opencms.org [mailto:opencms-dev-bounces@opencms.org] <b><span
style='font-weight:bold'>On Behalf Of </span></b>Joe Desbonnet<br>
<b><span style='font-weight:bold'>Sent:</span></b> Wednesday, January 04, 2006
7:13 AM<br>
<b><span style='font-weight:bold'>To:</span></b> <st1:PersonName w:st="on">The
OpenCms mailing list</st1:PersonName><br>
<b><span style='font-weight:bold'>Subject:</span></b> Re: [opencms-dev]
Clarification Reg Security in OpenCMS</span></font><span lang=EN-US><o:p></o:p></span></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span lang=EN-US
style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=3
face="Times New Roman"><span lang=EN-US style='font-size:12.0pt'>What do you
mean by end user? An anonymous website visitor without username/password? I
think that's safe. <br>
<br>
However a CMS user who can author JSP files will have full access to everything
by default. I have seen very little discussion on security so I really don't
know what is or is not safe.<br>
<br>
Any comments?<br>
<br>
Joe.<o:p></o:p></span></font></p>
<div>
<p class=MsoNormal><span class=gmailquote><font size=3 face="Times New Roman"><span
lang=EN-US style='font-size:12.0pt'>On <st1:chsdate IsROCDate="False"
IsLunarDate="False" Day="29" Month="12" Year="2005" w:st="on">12/29/05</st1:chsdate>,
<b><span style='font-weight:bold'><a
href="mailto:vijayanand.kalyanaraman@wipro.com">vijayanand.kalyanaraman@wipro.com</a></span></b>
<<a href="mailto:vijayanand.kalyanaraman@wipro.com">
vijayanand.kalyanaraman@wipro.com</a>> wrote:</span></font></span><span
lang=EN-US><o:p></o:p></span></p>
<div>
<p><font size=2 face=Arial><span lang=EN-US style='font-size:10.0pt;font-family:
Arial'>Hi all</span></font><span lang=EN-US><o:p></o:p></span></p>
<p><font size=2 face=Arial><span lang=EN-US style='font-size:10.0pt;font-family:
Arial'>Is it possible for end user to break into OpenCMs Work Place?</span></font><span
lang=EN-US><o:p></o:p></span></p>
<p><font size=2 face=Arial><span lang=EN-US style='font-size:10.0pt;font-family:
Arial'>I am giving the user the URL for the developed application say (<a
href="http://ipaddress/abcd/efgh/xxxx/index.html" target="_blank">http://ipaddress/abcd/efgh/xxxx/index.html</a>
)</span></font><span lang=EN-US><o:p></o:p></span></p>
<p><font size=2 face=Arial><span lang=EN-US style='font-size:10.0pt;font-family:
Arial'>Is there any means/configuration by which we can make sure the <st1:Street
w:st="on"><st1:address w:st="on">OpenCMS Work Place</st1:address></st1:Street>
to be highly secure and fool proof?</span></font><span lang=EN-US><o:p></o:p></span></p>
<p><font size=2 face=Arial><span lang=EN-US style='font-size:10.0pt;font-family:
Arial'> </span></font><span lang=EN-US><o:p></o:p></span></p>
<p><font size=2 face=Arial><span lang=EN-US style='font-size:10.0pt;font-family:
Arial'>Warm Regards</span></font><span lang=EN-US><o:p></o:p></span></p>
<p><font size=2 face=Arial><span lang=EN-US style='font-size:10.0pt;font-family:
Arial'>Vijay</span></font><span lang=EN-US><o:p></o:p></span></p>
</div>
<table class=MsoNormalTable border=0 cellspacing=3 cellpadding=0>
<tr>
<td bgcolor=white style='background:white;padding:.75pt .75pt .75pt .75pt'>
<p class=MsoNormal><font size=3 color=black face="Times New Roman"><span
lang=EN-US style='font-size:12.0pt;color:black'><br>
The information contained in this electronic message and any attachments to
this message are intended for the exclusive use of the addressee(s) and may contain
proprietary, confidential or privileged information. If you are not the
intended recipient, you should not disseminate, distribute or copy this
e-mail. Please notify the sender immediately and destroy all copies of this
message and any attachments. <br>
<br>
WARNING: Computer viruses can be transmitted via email. The recipient should
check this email and any attachments for the presence of viruses. The company
accepts no liability for any damage caused by any virus transmitted by this
email.<br>
<br>
<a href="http://www.wipro.com" target="_blank">www.wipro.com</a></span></font><span
lang=EN-US><o:p></o:p></span></p>
</td>
</tr>
</table>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=3
face="Times New Roman"><span lang=EN-US style='font-size:12.0pt'><br>
<br>
_______________________________________________<br>
This mail is sent to you from the opencms-dev mailing list<br>
To change your list options, or to unsubscribe from the list, please visit<br>
<a href="http://lists.opencms.org/mailman/listinfo/opencms-dev" target="_blank">http://lists.opencms.org/mailman/listinfo/opencms-dev</a><o:p></o:p></span></font></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span lang=EN-US
style='font-size:12.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>
<table><tr><td bgcolor=#ffffff><font color=#000000><br>
The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. <br>
<br>
WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.<br>
<br>
www.wipro.com<br>
</font></td></tr></table>