<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7232.84">
<TITLE>Security problem with resources in Workplace between different Organizational Units</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P><FONT SIZE=2 FACE="Arial">Hello! </FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">I have one microsite with multiple folders inside:</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"> /sites/default/</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"> MyMicrosite/</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"> folder1/</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"> folder1/</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"> ...</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"> folderN/</FONT>
</P>
<BR>
<P><FONT SIZE=2 FACE="Arial">I have one Organizational Unit per each folder:</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"> mymicrosite_folder1_OU</FONT>
<BR><FONT SIZE=2 FACE="Arial"> </FONT>
<BR><FONT SIZE=2 FACE="Arial"> mymicrosite_folder2_OU</FONT>
<BR><FONT SIZE=2 FACE="Arial"> </FONT>
<BR><FONT SIZE=2 FACE="Arial"> ...</FONT>
<BR><FONT SIZE=2 FACE="Arial"> </FONT>
<BR><FONT SIZE=2 FACE="Arial"> mymicrosite_folderN_OU</FONT>
</P>
<BR>
<P><FONT SIZE=2 FACE="Arial">Each Organizational Unit allows access only to its corresponding folder, that is:</FONT>
<BR>
<BR><FONT SIZE=2 FACE="Arial"> mymicrosite_folder1_OU -> Only access to "/sites/default/MyMicrosite/folder1/"</FONT>
<BR><FONT SIZE=2 FACE="Arial"> </FONT>
<BR><FONT SIZE=2 FACE="Arial"> mymicrosite_folder2_OU -> Only access to "/sites/default/MyMicrosite/folder2/"</FONT>
<BR><FONT SIZE=2 FACE="Arial"> </FONT>
<BR><FONT SIZE=2 FACE="Arial"> ...</FONT>
<BR><FONT SIZE=2 FACE="Arial"> </FONT>
<BR><FONT SIZE=2 FACE="Arial"> mymicrosite_folderN_OU -> Only access to "/sites/default/MyMicrosite/folderN/"</FONT>
</P>
<BR>
<P><FONT SIZE=2 FACE="Arial">There is one user per Organizational Unit:</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"> mymicrosite_folder1_OU -> User "mymicrosite_folder1"</FONT>
<BR><FONT SIZE=2 FACE="Arial"> </FONT>
<BR><FONT SIZE=2 FACE="Arial"> mymicrosite_folder2_OU -> User "mymicrosite_folder2"</FONT>
<BR><FONT SIZE=2 FACE="Arial"> </FONT>
<BR><FONT SIZE=2 FACE="Arial"> ...</FONT>
<BR><FONT SIZE=2 FACE="Arial"> </FONT>
<BR><FONT SIZE=2 FACE="Arial"> mymicrosite_folderN_OU -> User "mymicrosite_folderN"</FONT>
</P>
<BR>
<P><FONT SIZE=2 FACE="Arial">If I log in to the OpenCms Workplace with the user "mymicrosite_folder1", all folders, except "/sites/default/MyMicrosite/folder1/" and its contents, will have gray color, which means that I cannot create or edit any resource within than folders (it is exactly what I want). For example, if I move to the folder "/sites/default/MyMicrosite/folder2/", buttons "New" and "Upload" are disabled. If I put the mouse over a resourse contained in that folder and I press the right button, the Edit option does not appear.</FONT></P>
<BR>
<P><FONT SIZE=2 FACE="Arial">The problem is the following: If I move to the folder "/sites/default/MyMicrosite/folder1/" (which I have access to), put the mouse over a resource, press the right button, select the option "Copy" and select folder "/sites/default/MyMicrosite/folder2/" (which I do not have access to) as the destination folder, the system will copy my resource to that folder.</FONT></P>
<BR>
<P><FONT SIZE=2 FACE="Arial">Something similar occurs with Image and Download Galleries. Imagine that I have one Image Gallery per each folder:</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"> /sites/default/MyMicrosite/folder1/imagegallery/</FONT>
<BR><FONT SIZE=2 FACE="Arial"> </FONT>
<BR><FONT SIZE=2 FACE="Arial"> /sites/default/MyMicrosite/folder2/imagegallery/</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"> ...</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"> /sites/default/MyMicrosite/folderN/imagegallery/</FONT>
</P>
<BR>
<P><FONT SIZE=2 FACE="Arial">If I create an Structured Content of type "News article" (or any other with image attributes) in "/sites/default/MyMicrosite/folder1/" (which I have access to) and try to add and image to it, the Image Gallery dialog will appear. It will show me the list of all Image Galleries of the system, including those which I do not have access to. If I select the gallery "/sites/default/MyMicrosite/folder2/imagegallery/", which I do not have access to, and upload a new Image using that dialog, the system will create a image file in that Image Gallery.</FONT></P>
<P><FONT SIZE=2 FACE="Arial">Thanks for reading!</FONT>
</P>
</BODY>
</HTML>