You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@lenya.apache.org by Justus Brugman <br...@kpmg-ct.com> on 2004/03/30 14:26:41 UTC
asset management not working?
I can't upload images from bxe or the asset screen in lenya.
I don't get any errors, but neither any files are uploaded.
Anything i'm missing?
Justus
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-user-help@cocoon.apache.org
Re: asset management not working?
Posted by Michael Wechner <mi...@wyona.com>.
Justus Brugman wrote:
>>did you enable file upload in build.properties?
>>
>>
>Now i did :)
>What are the security issues with this uploading? (since it's disabled
>by default, due to security reasons) ?
>
>
If you have a publication with the default username and password (lenya
and levi)
still active, then people might upload data onto your server.
Else it should be no problem.
Michi
>Justus
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
>For additional commands, e-mail: lenya-user-help@cocoon.apache.org
>
>
>
>
--
Michael Wechner
Wyona Inc. - Open Source Content Management - Apache Lenya
http://www.wyona.com http://cocoon.apache.org/lenya/
michael.wechner@wyona.com michi@apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-user-help@cocoon.apache.org
Re: Question about Workflow
Posted by Michael Wechner <mi...@wyona.com>.
David Pinelo wrote:
>Hi,
>
>This is another of my silly questions, but I'm learning how to use lenya.
>First, I must say I've working with CMS for the last three years, and lenya
>is probably the most powerful CMS I've seen. Good work, and thanks for make
>it open source.
>
>I've see the workflow.xml file on the config directory of my publication. I
>see, it contains
>
> <state id="authoring" initial="true"/>
> <state id="review"/>
> <state id="live"/>
>
>So I suppose you can define as many states as you want on the workflow. Am I
>wrong?
>
you are not wrong, you are right ;-)
> But, how many roles can I define?
>
arbitrary
>What do I have to do to define a new
>Role?
>
>
enya/pubs/blog/config/ac/passwd/
e.g. edit.rml, visit.rml
HTH
Michi
>Thanks a lot,
>David Pinelo.
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
>For additional commands, e-mail: lenya-user-help@cocoon.apache.org
>
>
>
>
--
Michael Wechner
Wyona Inc. - Open Source Content Management - Apache Lenya
http://www.wyona.com http://cocoon.apache.org/lenya/
michael.wechner@wyona.com michi@apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-user-help@cocoon.apache.org
Question about Workflow
Posted by David Pinelo <da...@juntadeandalucia.es>.
Hi,
This is another of my silly questions, but I'm learning how to use lenya.
First, I must say I've working with CMS for the last three years, and lenya
is probably the most powerful CMS I've seen. Good work, and thanks for make
it open source.
I've see the workflow.xml file on the config directory of my publication. I
see, it contains
<state id="authoring" initial="true"/>
<state id="review"/>
<state id="live"/>
So I suppose you can define as many states as you want on the workflow. Am I
wrong? But, how many roles can I define? What do I have to do to define a new
Role?
Thanks a lot,
David Pinelo.
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-user-help@cocoon.apache.org
Re: Elements or attributes requireds on custom document types
Posted by Michael Wechner <mi...@wyona.com>.
David Pinelo wrote:
>Hi,
>
>I think this is a very stupid question.... ;) but, what is the lenya metadata
>framework for? What are the features of that? I mean, is the lenya metadata
>the information necessary to make lenya management that content?
>
>
not really. it's rather a standard way to describe the metadata and
make it searchable in a standard way (see DublinCore:
http://www.dublincore.org).
Of course DublinCore it not the only standard with regard to metadata
but quite common. Lenya could also use other standards, but the default
implementation is using DublinCore.
HTH
Michi
>Thanks
>
>
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
>For additional commands, e-mail: lenya-user-help@cocoon.apache.org
>
>
>
>
--
Michael Wechner
Wyona Inc. - Open Source Content Management - Apache Lenya
http://www.wyona.com http://cocoon.apache.org/lenya/
michael.wechner@wyona.com michi@apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-user-help@cocoon.apache.org
Re: Elements or attributes requireds on custom document types
Posted by David Pinelo <da...@juntadeandalucia.es>.
Hi,
I think this is a very stupid question.... ;) but, what is the lenya metadata
framework for? What are the features of that? I mean, is the lenya metadata
the information necessary to make lenya management that content?
Thanks
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-user-help@cocoon.apache.org
Re: Elements or attributes requireds on custom document types
Posted by "Gregor J. Rothfuss" <gr...@apache.org>.
David Pinelo wrote:
> Hi,
>
> When you define a new custom document type, do yo need to include some
> elements or attributes defined or used by lenya? If you see the relax ng for
> the simple document type yo find
>
> <element name="lenya:meta">
> <element name="dc:title">
> <text/>
> </element>
> <element name="dc:creator">
> <text/>
> </element>
> <element name="dc:subject">
> <text/>
> </element>
> <element name="dc:description">
> <text/>
> </element>
> <element name="dc:publisher">
> <empty/>
> </element>
> <element name="dc:contributor">
>
> Are this elements compulsory?
they are not. if you want to use the lenya metadata framework, they are.
--
Gregor J. Rothfuss
Wyona Inc. - Open Source Content Management - Apache Lenya
http://wyona.com http://cocoon.apache.org/lenya
gregor.rothfuss@wyona.com gregor@apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-user-help@cocoon.apache.org
Elements or attributes requireds on custom document types
Posted by David Pinelo <da...@juntadeandalucia.es>.
Hi,
When you define a new custom document type, do yo need to include some
elements or attributes defined or used by lenya? If you see the relax ng for
the simple document type yo find
<element name="lenya:meta">
<element name="dc:title">
<text/>
</element>
<element name="dc:creator">
<text/>
</element>
<element name="dc:subject">
<text/>
</element>
<element name="dc:description">
<text/>
</element>
<element name="dc:publisher">
<empty/>
</element>
<element name="dc:contributor">
Are this elements compulsory?
Regards,
David.
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-user-help@cocoon.apache.org
Re: asset management not working?
Posted by Michael Wechner <mi...@wyona.com>.
Jann Forrer wrote:
>On Thu, 1 Apr 2004, Christian Egli wrote:
>
>
>
>>Justus Brugman <br...@kpmg-ct.com> writes:
>>
>>
>>
>>>>did you enable file upload in build.properties?
>>>>
>>>>
>>>What are the security issues with this uploading? (since it's disabled
>>>by default, due to security reasons) ?
>>>
>>>
>>Anyone can upload arbitrary files to your server and fill the
>>disk. You could probably craft a denial of service attack that way.
>>
>>
>>
>
>But as Michi wrote, this is only possible if you know the the id and the
>password of the user or am i wrong?
>
yes, but if you don't change the default values, then everybody
can login, that's why upload is disabled by default, such that this
can't happen.
btw, you can shutdown any Tomcat on port 8005 if one forgets to close
it ;-)
Michi
>Jann
>
>---------------------------------------------------------------
>Jann Forrer
>Informatikdienste
>Universität Zürich
>Winterthurerstr. 190
>CH-8057 Zuerich
>
>oooO mail: jann.forrer@id.unizh.ch
>( ) phone: +41 1 63 56772
> \ ( fax: +41 1 63 54505
> \_) http://www.id.unizh.ch
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
>For additional commands, e-mail: lenya-user-help@cocoon.apache.org
>
>
>
>
--
Michael Wechner
Wyona Inc. - Open Source Content Management - Apache Lenya
http://www.wyona.com http://cocoon.apache.org/lenya/
michael.wechner@wyona.com michi@apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-user-help@cocoon.apache.org
Re: asset management not working?
Posted by Jann Forrer <ja...@id.unizh.ch>.
On Thu, 1 Apr 2004, Christian Egli wrote:
> Justus Brugman <br...@kpmg-ct.com> writes:
>
> > > did you enable file upload in build.properties?
>
> > What are the security issues with this uploading? (since it's disabled
> > by default, due to security reasons) ?
>
> Anyone can upload arbitrary files to your server and fill the
> disk. You could probably craft a denial of service attack that way.
>
But as Michi wrote, this is only possible if you know the the id and the
password of the user or am i wrong?
Jann
---------------------------------------------------------------
Jann Forrer
Informatikdienste
Universität Zürich
Winterthurerstr. 190
CH-8057 Zuerich
oooO mail: jann.forrer@id.unizh.ch
( ) phone: +41 1 63 56772
\ ( fax: +41 1 63 54505
\_) http://www.id.unizh.ch
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-user-help@cocoon.apache.org
Re: asset management not working?
Posted by Christian Egli <ch...@wyona.net>.
Justus Brugman <br...@kpmg-ct.com> writes:
> > did you enable file upload in build.properties?
> What are the security issues with this uploading? (since it's disabled
> by default, due to security reasons) ?
Anyone can upload arbitrary files to your server and fill the
disk. You could probably craft a denial of service attack that way.
--
Christian Egli christian.egli@wyona.net +41 1 272 9161
Wyona AG, Hardstrasse 219, CH-8005 Zurich
Open Source CMS http://www.wyona.org http://www.wyona.com
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-user-help@cocoon.apache.org
Re: asset management not working?
Posted by Justus Brugman <br...@kpmg-ct.com>.
> did you enable file upload in build.properties?
Now i did :)
What are the security issues with this uploading? (since it's disabled
by default, due to security reasons) ?
Justus
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-user-help@cocoon.apache.org
AW: asset management not working?
Posted by Christian Kreutz <sc...@gmx.de>.
> -----Ursprüngliche Nachricht-----
> Von: Gregor J. Rothfuss [mailto:gregor@apache.org]
> Gesendet: Dienstag, 30. März 2004 16:31
> An: Lenya Users List
> Betreff: Re: asset management not working?
>
>
> Justus Brugman wrote:
> > I can't upload images from bxe or the asset screen in
> lenya. I don't
> > get any errors, but neither any files are uploaded. Anything i'm
> > missing?
>
> did you enable file upload in build.properties?
Where can I find this build.properties when using the binary version?
Thanks
Christian
>
>
> --
> Gregor J. Rothfuss
> Wyona Inc. - Open Source Content Management - Apache Lenya
> http://wyona.com http://cocoon.apache.org/lenya
> gregor.rothfuss@wyona.com gregor@apache.org
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
> For additional commands, e-mail: lenya-user-help@cocoon.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-user-help@cocoon.apache.org
Re: asset management not working?
Posted by "Gregor J. Rothfuss" <gr...@apache.org>.
Justus Brugman wrote:
> I can't upload images from bxe or the asset screen in lenya.
> I don't get any errors, but neither any files are uploaded.
> Anything i'm missing?
did you enable file upload in build.properties?
--
Gregor J. Rothfuss
Wyona Inc. - Open Source Content Management - Apache Lenya
http://wyona.com http://cocoon.apache.org/lenya
gregor.rothfuss@wyona.com gregor@apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-user-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-user-help@cocoon.apache.org