You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@sling.apache.org by Craig Ganoe <cg...@psu.edu> on 2011/07/27 18:33:14 UTC
creating or giving users full write access?
How can I create a user that has full write access (including adding
nodes and modifying their properties)?
I followed the instructions here under "Create user":
http://sling.apache.org/site/managing-users-and-groups-jackrabbitusermanager.html
But the users I create using the instructions seem to have read-only
access. I even tried adding "-u admin:admin" to the curl command which
seemed to let me get around the Self-Registration Enabled setting (I
was hoping this would make the accounts non-anonymous), but they still
end up with read-only access.
The Jackrabbit docs talk about 3 classes of users: anonymous, normal
and system the latter 2 of which have full read/write, but I don't see
anywhere there about how to control that either.
Sorry if this is already explained somewhere that I'm missing. Thanks!
Craig
Re: creating or giving users full write access?
Posted by Julian Sedding <js...@gmail.com>.
Hi Craig
1. Child nodes do inherit permissions from parent nodes.
2. The admin user is special (in Jackrabbit) and therefore not a good
example to look at. It has access to everything and cannot be
restricted AFAIK. I don't know about default groups/users in
Jackrabbit, since I work with CRX, but I suspect that there are none.
You probably want to start by creating a group and granting it full
access to the root node. Then assign your user to the group and check
if that works as expected.
Regards
Julian
On Wed, Jul 27, 2011 at 7:17 PM, Craig Ganoe <cg...@psu.edu> wrote:
>
> I did look at that page which seems to suggest that I would need to
> individually set permissions for each and every node. That isn't what I
> want, unless child nodes inherit parent permissions.
>
> I did the "list users" on the page I linked and even the admin user does not
> seem to be a member of anything. Is there a group that has full write access
> by default that I could add the users to?
>
> On Jul 27, 2011, at 12:39 PM, Julian Sedding wrote:
>
>> Hi Craig
>>
>> Your newly created user is probably doesn't have any permissions and
>> is not in a group from which it could inherit permissions. Did you see
>> the documentation about managing permissions[0] in Sling?
>>
>> Regards
>> Julian
>>
>> [0]
>> http://sling.apache.org/site/managing-permissions-jackrabbitaccessmanager.html
>>
>>
>>
>>
>> On Wed, Jul 27, 2011 at 6:33 PM, Craig Ganoe <cg...@psu.edu> wrote:
>>>
>>> How can I create a user that has full write access (including adding
>>> nodes
>>> and modifying their properties)?
>>>
>>> I followed the instructions here under "Create user":
>>>
>>> http://sling.apache.org/site/managing-users-and-groups-jackrabbitusermanager.html
>>>
>>> But the users I create using the instructions seem to have read-only
>>> access.
>>> I even tried adding "-u admin:admin" to the curl command which seemed to
>>> let
>>> me get around the Self-Registration Enabled setting (I was hoping this
>>> would
>>> make the accounts non-anonymous), but they still end up with read-only
>>> access.
>>>
>>> The Jackrabbit docs talk about 3 classes of users: anonymous, normal and
>>> system the latter 2 of which have full read/write, but I don't see
>>> anywhere
>>> there about how to control that either.
>>>
>>> Sorry if this is already explained somewhere that I'm missing. Thanks!
>>>
>>> Craig
>>>
>>>
>>
>
>
Re: creating or giving users full write access?
Posted by Eric Norman <er...@gmail.com>.
Hi Craig,
The permissions in the jackrabbit implementation are inherited from the
parent, so if you grant the permissions at the root or some other parent
folder, it applies to the children as well.
A quick way to see what privileges in effect for a node to to view the
effective permissions json as described [1]
1.
http://sling.apache.org/site/managing-permissions-jackrabbitaccessmanager.html
Regards,
Eric
On Wed, Jul 27, 2011 at 10:17 AM, Craig Ganoe <cg...@psu.edu> wrote:
>
> I did look at that page which seems to suggest that I would need to
> individually set permissions for each and every node. That isn't what I
> want, unless child nodes inherit parent permissions.
>
> I did the "list users" on the page I linked and even the admin user does
> not seem to be a member of anything. Is there a group that has full write
> access by default that I could add the users to?
>
>
> On Jul 27, 2011, at 12:39 PM, Julian Sedding wrote:
>
> Hi Craig
>>
>> Your newly created user is probably doesn't have any permissions and
>> is not in a group from which it could inherit permissions. Did you see
>> the documentation about managing permissions[0] in Sling?
>>
>> Regards
>> Julian
>>
>> [0] http://sling.apache.org/site/**managing-permissions-**
>> jackrabbitaccessmanager.html<http://sling.apache.org/site/managing-permissions-jackrabbitaccessmanager.html>
>>
>>
>>
>>
>> On Wed, Jul 27, 2011 at 6:33 PM, Craig Ganoe <cg...@psu.edu> wrote:
>>
>>>
>>> How can I create a user that has full write access (including adding
>>> nodes
>>> and modifying their properties)?
>>>
>>> I followed the instructions here under "Create user":
>>> http://sling.apache.org/site/**managing-users-and-groups-**
>>> jackrabbitusermanager.html<http://sling.apache.org/site/managing-users-and-groups-jackrabbitusermanager.html>
>>>
>>> But the users I create using the instructions seem to have read-only
>>> access.
>>> I even tried adding "-u admin:admin" to the curl command which seemed to
>>> let
>>> me get around the Self-Registration Enabled setting (I was hoping this
>>> would
>>> make the accounts non-anonymous), but they still end up with read-only
>>> access.
>>>
>>> The Jackrabbit docs talk about 3 classes of users: anonymous, normal and
>>> system the latter 2 of which have full read/write, but I don't see
>>> anywhere
>>> there about how to control that either.
>>>
>>> Sorry if this is already explained somewhere that I'm missing. Thanks!
>>>
>>> Craig
>>>
>>>
>>>
>>
>
Re: creating or giving users full write access?
Posted by Craig Ganoe <cg...@psu.edu>.
I did look at that page which seems to suggest that I would need to
individually set permissions for each and every node. That isn't what
I want, unless child nodes inherit parent permissions.
I did the "list users" on the page I linked and even the admin user
does not seem to be a member of anything. Is there a group that has
full write access by default that I could add the users to?
On Jul 27, 2011, at 12:39 PM, Julian Sedding wrote:
> Hi Craig
>
> Your newly created user is probably doesn't have any permissions and
> is not in a group from which it could inherit permissions. Did you see
> the documentation about managing permissions[0] in Sling?
>
> Regards
> Julian
>
> [0] http://sling.apache.org/site/managing-permissions-jackrabbitaccessmanager.html
>
>
>
>
> On Wed, Jul 27, 2011 at 6:33 PM, Craig Ganoe <cg...@psu.edu> wrote:
>>
>> How can I create a user that has full write access (including
>> adding nodes
>> and modifying their properties)?
>>
>> I followed the instructions here under "Create user":
>> http://sling.apache.org/site/managing-users-and-groups-jackrabbitusermanager.html
>>
>> But the users I create using the instructions seem to have read-
>> only access.
>> I even tried adding "-u admin:admin" to the curl command which
>> seemed to let
>> me get around the Self-Registration Enabled setting (I was hoping
>> this would
>> make the accounts non-anonymous), but they still end up with read-
>> only
>> access.
>>
>> The Jackrabbit docs talk about 3 classes of users: anonymous,
>> normal and
>> system the latter 2 of which have full read/write, but I don't see
>> anywhere
>> there about how to control that either.
>>
>> Sorry if this is already explained somewhere that I'm missing.
>> Thanks!
>>
>> Craig
>>
>>
>
Re: creating or giving users full write access?
Posted by Julian Sedding <js...@gmail.com>.
Hi Craig
Your newly created user is probably doesn't have any permissions and
is not in a group from which it could inherit permissions. Did you see
the documentation about managing permissions[0] in Sling?
Regards
Julian
[0] http://sling.apache.org/site/managing-permissions-jackrabbitaccessmanager.html
On Wed, Jul 27, 2011 at 6:33 PM, Craig Ganoe <cg...@psu.edu> wrote:
>
> How can I create a user that has full write access (including adding nodes
> and modifying their properties)?
>
> I followed the instructions here under "Create user":
> http://sling.apache.org/site/managing-users-and-groups-jackrabbitusermanager.html
>
> But the users I create using the instructions seem to have read-only access.
> I even tried adding "-u admin:admin" to the curl command which seemed to let
> me get around the Self-Registration Enabled setting (I was hoping this would
> make the accounts non-anonymous), but they still end up with read-only
> access.
>
> The Jackrabbit docs talk about 3 classes of users: anonymous, normal and
> system the latter 2 of which have full read/write, but I don't see anywhere
> there about how to control that either.
>
> Sorry if this is already explained somewhere that I'm missing. Thanks!
>
> Craig
>
>