You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@lenya.apache.org by juan artes rueda <ja...@hotmail.com> on 2005/01/24 16:42:34 UTC

Restricting access to some lenya pages in live

Hi :
I'm working with lenya and I wonder if it´s possible to restrict the access 
to some special pages of lenya in live mode , so login and password will be 
necesssary to access to these pages.
Thanks for your nice work
Juan

_________________________________________________________________
Acepta el reto MSN Premium: Correos más divertidos con fotos y textos 
increíbles en MSN Premium. Descárgalo y pruébalo 2 meses gratis. 
http://join.msn.com?XAPID=1697&DI=1055&HL=Footer_mailsenviados_correosmasdivertidos


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org


Re: Restricting access to some lenya pages in live

Posted by "Gregor J. Rothfuss" <gr...@apache.org>.
Sean Fulton wrote:

> Is there a fix in the mean time?
> 
> lenya/webapp/lenya/pubs/mypub/config/ac/policies/live/subtree-policy.acml
> 
> doesn't have <ac:world>...</ac:world> only:
> 
> <policy xmlns="http://apache.org/cocoon/lenya/ac/1.0">
> 
>  <world>
>    <role id="visit"/>
>  </world>
> 
> </policy>
> 
>     Sean

world is what you are looking for here. (there is no ac: prefix since 
the default namespace is ac)


-- 
Gregor J. Rothfuss
COO, Wyona       Content Management Solutions    http://wyona.com
Apache Lenya                              http://lenya.apache.org
gregor.rothfuss@wyona.com                       gregor@apache.org

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org


Re: Restricting access to some lenya pages in live

Posted by Sean Fulton <fu...@cmu.edu>.
On 2005-01-25 17:31:38 -0500, "Gregor J. Rothfuss" <gr...@apache.org> said:

> Torsten Schlabach wrote:
>>  > It seems everybody can access to the page (e.g.  document type
>>  > examples). In the AC live tab I see: inherited rights: the world . I
>>  > don´t know where unassign this property.
>> 
>> Interesting enough, I have the same requirement right now. So I tried 
>> this and you're right: The page still is accessible by anyone, not just 
>> the assigned group. This is strange because if you take a look into the 
>> policy that get's written to the filesystem, the inherited right of 
>> "the world" does not show up there.
>> 
>> Could you please file a bug for this?
> 
> http://issues.apache.org/bugzilla/show_bug.cgi?id=31244

Is there a fix in the mean time?

lenya/webapp/lenya/pubs/mypub/config/ac/policies/live/subtree-policy.acml

doesn't have <ac:world>...</ac:world> only:

<policy xmlns="http://apache.org/cocoon/lenya/ac/1.0">

  <world>
    <role id="visit"/>
  </world>

</policy>

	Sean



---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org


Re: Restricting access to some lenya pages in live

Posted by "Gregor J. Rothfuss" <gr...@apache.org>.
Torsten Schlabach wrote:
>  > It seems everybody can access to the page (e.g.  document type
>  > examples). In the AC live tab I see: inherited rights: the world . I
>  > don´t know where unassign this property.
> 
> Interesting enough, I have the same requirement right now. So I tried 
> this and you're right: The page still is accessible by anyone, not just 
> the assigned group. This is strange because if you take a look into the 
> policy that get's written to the filesystem, the inherited right of "the 
> world" does not show up there.
> 
> Could you please file a bug for this?

http://issues.apache.org/bugzilla/show_bug.cgi?id=31244

-- 
Gregor J. Rothfuss
COO, Wyona       Content Management Solutions    http://wyona.com
Apache Lenya                              http://lenya.apache.org
gregor.rothfuss@wyona.com                       gregor@apache.org

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org


Re: Restricting access to some lenya pages in live

Posted by Torsten Schlabach <ts...@apache.org>.
 > It seems everybody can access to the page (e.g.  document type
 > examples). In the AC live tab I see: inherited rights: the world . I
 > don´t know where unassign this property.

Interesting enough, I have the same requirement right now. So I tried 
this and you're right: The page still is accessible by anyone, not just 
the assigned group. This is strange because if you take a look into the 
policy that get's written to the filesystem, the inherited right of "the 
world" does not show up there.

Could you please file a bug for this?

Regards,
Torsten

juan artes rueda schrieb:
> Thanks for your information, but I don´t see the way to use such tab.
> I mean:
> It seems everybody can access to the page (e.g.  document type 
> examples). In the AC live tab I see: inherited rights: the world . I 
> don´t know where unassign this property.
> Hmm Is there any documentation where I can see an example or something 
> similar?
> Thanks again
> Juan
> 
>> From: "Gregor J. Rothfuss" <gr...@apache.org>
>> Reply-To: "Lenya Users List" <us...@lenya.apache.org>
>> To: Lenya Users List <us...@lenya.apache.org>
>> Subject: Re: Restricting access to some lenya pages in live
>> Date: Mon, 24 Jan 2005 11:34:38 -0500
>>
>> juan artes rueda wrote:
>>
>>> Hi :
>>> I'm working with lenya and I wonder if it´s possible to restrict the 
>>> access to some special pages of lenya in live mode , so login and 
>>> password will be necesssary to access to these pages.
>>> Thanks for your nice work
>>
>>
>> that's what the AC live tab in the site area is for
>>
>> -- 
>> Gregor J. Rothfuss
>> COO, Wyona       Content Management Solutions    http://wyona.com
>> Apache Lenya                              http://lenya.apache.org
>> gregor.rothfuss@wyona.com                       gregor@apache.org
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
>> For additional commands, e-mail: user-help@lenya.apache.org
>>
> 
> _________________________________________________________________
> Acepta el reto MSN Premium: Protección para tus hijos en internet. 
> Descárgalo y pruébalo 2 meses gratis. 
> http://join.msn.com?XAPID=1697&DI=1055&HL=Footer_mailsenviados_proteccioninfantil 
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
> For additional commands, e-mail: user-help@lenya.apache.org
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org


Re: Restricting access to some lenya pages in live

Posted by "Gregor J. Rothfuss" <gr...@apache.org>.
juan artes rueda wrote:
> Thanks for your information, but I don´t see the way to use such tab.
> I mean:
> It seems everybody can access to the page (e.g.  document type 
> examples). In the AC live tab I see: inherited rights: the world . I 
> don´t know where unassign this property.
> Hmm Is there any documentation where I can see an example or something 
> similar?
> Thanks again
> Juan

just noticed these comments, they may help you:

http://issues.apache.org/bugzilla/show_bug.cgi?id=31244



-
Gregor J. Rothfuss
COO, Wyona       Content Management Solutions    http://wyona.com
Apache Lenya                              http://lenya.apache.org
gregor.rothfuss@wyona.com                       gregor@apache.org

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org


Re: Restricting access to some lenya pages in live

Posted by juan artes rueda <ja...@hotmail.com>.
Thanks for your information, but I don´t see the way to use such tab.
I mean:
It seems everybody can access to the page (e.g.  document type examples). In 
the AC live tab I see: inherited rights: the world . I don´t know where 
unassign this property.
Hmm Is there any documentation where I can see an example or something 
similar?
Thanks again
Juan

>From: "Gregor J. Rothfuss" <gr...@apache.org>
>Reply-To: "Lenya Users List" <us...@lenya.apache.org>
>To: Lenya Users List <us...@lenya.apache.org>
>Subject: Re: Restricting access to some lenya pages in live
>Date: Mon, 24 Jan 2005 11:34:38 -0500
>
>juan artes rueda wrote:
>>Hi :
>>I'm working with lenya and I wonder if it´s possible to restrict the 
>>access to some special pages of lenya in live mode , so login and password 
>>will be necesssary to access to these pages.
>>Thanks for your nice work
>
>that's what the AC live tab in the site area is for
>
>--
>Gregor J. Rothfuss
>COO, Wyona       Content Management Solutions    http://wyona.com
>Apache Lenya                              http://lenya.apache.org
>gregor.rothfuss@wyona.com                       gregor@apache.org
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
>For additional commands, e-mail: user-help@lenya.apache.org
>

_________________________________________________________________
Acepta el reto MSN Premium: Protección para tus hijos en internet. 
Descárgalo y pruébalo 2 meses gratis. 
http://join.msn.com?XAPID=1697&DI=1055&HL=Footer_mailsenviados_proteccioninfantil


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org


Re: Restricting access to some lenya pages in live

Posted by "Gregor J. Rothfuss" <gr...@apache.org>.
juan artes rueda wrote:
> Hi :
> I'm working with lenya and I wonder if it´s possible to restrict the 
> access to some special pages of lenya in live mode , so login and 
> password will be necesssary to access to these pages.
> Thanks for your nice work

that's what the AC live tab in the site area is for

-- 
Gregor J. Rothfuss
COO, Wyona       Content Management Solutions    http://wyona.com
Apache Lenya                              http://lenya.apache.org
gregor.rothfuss@wyona.com                       gregor@apache.org

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org