You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@lenya.apache.org by Douglas Hurbon <do...@mail.cuny.edu> on 2006/03/02 18:01:26 UTC

Xinclude Across Publications

Sorry of my previous post was to long (it never seemed to make it to  
the list (I am registered)).  Here's a shortened version:

Anyone ever tried to use xinclude to include content from one  
publication in another?

Lenya 1.2 is giving me problems with access control.  We are  
immediately logged out of the authoring section whenever viewing a  
page with an xinclude from the live section of other publications.

The (successful) authorization to retrieve the remote publication's  
content via xinclude logs us out of the authoring section of the  
pubication we are currently in.

Is this by design?  I've bypassed the authorization checks for all  
the live pages in the remote publication, and everythings fine.

Just wondering if this problem has been solved or dealt the before.   
It'd be nice to leave the live authorization control on.  Is there a  
mechanism in cinclude to handle this?

Thanks,

-doug


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org


Please subscribe (was Re: Xinclude Across Publications)

Posted by Thorsten Scherler <th...@apache.org>.
El jue, 02-03-2006 a las 12:01 -0500, Douglas Hurbon escribió:
> Sorry of my previous post was to long (it never seemed to make it to  
> the list (I am registered)).  

No, you are not subscribed, I need to moderate your mails, please
subscribe, I will reject all next postings after one last post (3
moderated posts max).

Please consider that you are causing a lot of work for moderators if you
are not subscribe.

Hope you understand this.

salu2
-- 
thorsten

"Together we stand, divided we fall!" 
Hey you (Pink Floyd)


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org


Re: Xinclude Across Publications

Posted by Michael Wechner <mi...@wyona.com>.
Douglas Hurbon wrote:

>
> On Mar 2, 2006, at 1:52 PM, Michael Wechner wrote:
>
>> Douglas Hurbon wrote:
>>
>>>
>>> Anyone ever tried to use xinclude to include content from one   
>>> publication in another?
>>>
>>> Lenya 1.2 is giving me problems with access control.  We are   
>>> immediately logged out
>>> of the authoring section whenever viewing a  page with an xinclude  
>>> from the live section of other publications.
>>
>
>>
>>
>> this is a feature ;-) which I think should be made optional.
>> A workaround is to use the same authorizer for these publications.
>
>
> It isn't possible, without major modifications to 1.2,  to tier  
> authorization across publications, is there?  For example, have a  
> single publication authorize based on its own list AND another  
> publications list?


have you tried to modify config/ac/ac.config ?

>
>> Another workaround is to open the access for localhost (127.0.0.1).
>
>
> The access for localhost would be easy and relatively closed.  I  
> hadn't thought of that.


you need to change this within the policies.

Also I thought one could do internal calls, which don't go through the 
authorizer.

Andreas, do you remember if that exists?

Michi

>
> Thanks.
>
> -doug
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
> For additional commands, e-mail: user-help@lenya.apache.org
>
>


-- 
Michael Wechner
Wyona      -   Open Source Content Management   -    Apache Lenya
http://www.wyona.com                      http://lenya.apache.org
michael.wechner@wyona.com                        michi@apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org


Re: Xinclude Across Publications

Posted by Douglas Hurbon <do...@mail.cuny.edu>.
On Mar 2, 2006, at 1:52 PM, Michael Wechner wrote:

> Douglas Hurbon wrote:
>
>>
>> Anyone ever tried to use xinclude to include content from one   
>> publication in another?
>>
>> Lenya 1.2 is giving me problems with access control.  We are   
>> immediately logged out
>> of the authoring section whenever viewing a  page with an xinclude  
>> from the live section of other publications.

>
>
> this is a feature ;-) which I think should be made optional.
> A workaround is to use the same authorizer for these publications.

It isn't possible, without major modifications to 1.2,  to tier  
authorization across publications, is there?  For example, have a  
single publication authorize based on its own list AND another  
publications list?

> Another workaround is to open the access for localhost (127.0.0.1).

The access for localhost would be easy and relatively closed.  I  
hadn't thought of that.

Thanks.

-doug

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org


Re: Xinclude Across Publications

Posted by Michael Wechner <mi...@wyona.com>.
Douglas Hurbon wrote:

> Sorry of my previous post was to long (it never seemed to make it to  
> the list (I am registered)).  Here's a shortened version:
>
> Anyone ever tried to use xinclude to include content from one  
> publication in another?
>
> Lenya 1.2 is giving me problems with access control.  We are  
> immediately logged out


this is a feature ;-) which I think should be made optional.
A workaround is to use the same authorizer for these publications.
Another workaround is to open the access for localhost (127.0.0.1).

> of the authoring section whenever viewing a  page with an xinclude 
> from the live section of other publications.
>
> The (successful) authorization to retrieve the remote publication's  
> content via xinclude logs us out of the authoring section of the  
> pubication we are currently in.
>
> Is this by design?


yes, see above, but my personal opinion is that would you try to achieve
should be possible be design

>   I've bypassed the authorization checks for all  the live pages in 
> the remote publication, and everythings fine.
>
> Just wondering if this problem has been solved or dealt the before.   
> It'd be nice to leave the live authorization control on.  Is there a  
> mechanism in cinclude to handle this?


I think Andreas might be able to explain why it is as it is at the moment.

HTH

Michi

>
> Thanks,
>
> -doug
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
> For additional commands, e-mail: user-help@lenya.apache.org
>
>


-- 
Michael Wechner
Wyona      -   Open Source Content Management   -    Apache Lenya
http://www.wyona.com                      http://lenya.apache.org
michael.wechner@wyona.com                        michi@apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@lenya.apache.org
For additional commands, e-mail: user-help@lenya.apache.org