You are viewing a plain text version of this content. The canonical link for it is here.
Posted to slide-user@jakarta.apache.org by Peder Nordvaller <pe...@vitaminapplications.se> on 2004/01/08 13:26:26 UTC
Some newbie Security questions
Hello,
I'm writing an app that uses Slide, and I have some troubles understanding
the ACL/Security. What I would like to do is the following:
I have some users, for example:
/users/joe
/users/mary
That both have /actions/read on /files (not inherited). This works just
fine, they can read the /files but no nodes below. Now I have a "user
group": /users/MyGroup under which I have created a link /users/MyGroup/joe
to /users/joe. What I want to do is be able to grant /actions/read on
/files/somenode to /users/MyGroup (not inherited)- and with this make every
linked user in this group also get this permission, so that in this case joe
will also get /actions/read on /files/somenode. I would also like to be able
to link users in this manner to several user groups with permissions so that
the users get permissions from several groups. Is this possible? If so, what
could I be missing if it's not working? I'm currently using the1.0.16 build.
Regards, Peder
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: using a browser to edit documents
Posted by "E.A.Holmes" <e....@t-online.at>.
On Tue, 2004-01-13 at 22:02, Julian Reschke wrote:
> E.A.Holmes wrote:
> > I also tried to get the file protocol to work (
> > href="file://webdav.somedomain.com/filepath/file.doc">document</a> ) but
> > couldn't seem to make it happen for me. If anyone does I would be
> > interested to hear how.
>
> I'm not sure why you bring up file: URLs here? "file:" URLs always refer
> to locally accessibly files and have nothing to do with HTTP or WebDAV.
>
> Julian
The file protocol was an idea mentioned on this list, just wanted to
give my status on the tip.
>A friend of mine told me that he saw this sort of thing working, where
>he did not use a link object with the http protocol, but with the file
>protocol. So <a
>href="file://webdav.somedomain.com/filepath/file.doc">document</a>
>worked for him. This has not been tested by me though.
Eric
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: using a browser to edit documents
Posted by Julian Reschke <ju...@gmx.de>.
E.A.Holmes wrote:
> Julian,
>
> Thanks for the tip! The <a href="http://foobar" folder="http://foobar"
> style="behavior: url(#default#AnchorClick)">...</a> is exactly what I
> was looking for.
> I usually try to keep my code as browser independent as possible, but
> this is one of those cases when I'm glad I can use the added
> functionality.
>
> I also tried to get the file protocol to work (
> href="file://webdav.somedomain.com/filepath/file.doc">document</a> ) but
> couldn't seem to make it happen for me. If anyone does I would be
> interested to hear how.
I'm not sure why you bring up file: URLs here? "file:" URLs always refer
to locally accessibly files and have nothing to do with HTTP or WebDAV.
Julian
--
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: using a browser to edit documents
Posted by "E.A.Holmes" <e....@t-online.at>.
Julian,
Thanks for the tip! The <a href="http://foobar" folder="http://foobar"
style="behavior: url(#default#AnchorClick)">...</a> is exactly what I
was looking for.
I usually try to keep my code as browser independent as possible, but
this is one of those cases when I'm glad I can use the added
functionality.
I also tried to get the file protocol to work (
href="file://webdav.somedomain.com/filepath/file.doc">document</a> ) but
couldn't seem to make it happen for me. If anyone does I would be
interested to hear how.
Thanks again,
Eric
On Mon, 2004-01-12 at 16:37, Julian Reschke wrote:
> Julian wrote:
> > Eric,
> >
> > In order to save a document from MS Office to a webdav
> > location you will have to add the webdav folder as a
> > network place (this avoids having to enter the URL
> > every time on save). The other option is to have the
> > document open in the browser via embedded office (i.e.
> > office opens in IE) and save the document. I believe
> > this second option should automatically remember the
> > webdav location and save properly. As far as
> > launching the MS "Webfolder" from IE, you must use the
> > following script:
> >
> > <HTML>
> > <HEAD>
> > <title>MS Webfolder</title>
> > <STYLE>
> > .hFolder{behavior:url(#default#httpFolder);}
> > </STYLE>
> > <SCRIPT>
> > function fnNavigate(){
> > oViewFolder.navigate(URL);
> > }
> > </SCRIPT>
> > </HEAD>
> > <BODY onload="fnNavigate()" ID="oViewFolder"
> > CLASS="hFolder" >
> > </BODY>
> > </HTML>
>
> Or simply:
>
> <a href="http://foobar" folder="http://foobar" style="behavior:
> url(#default#AnchorClick)">...</a>
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: using a browser to edit documents
Posted by Julian Reschke <ju...@gmx.de>.
Julian wrote:
> Eric,
>
> In order to save a document from MS Office to a webdav
> location you will have to add the webdav folder as a
> network place (this avoids having to enter the URL
> every time on save). The other option is to have the
> document open in the browser via embedded office (i.e.
> office opens in IE) and save the document. I believe
> this second option should automatically remember the
> webdav location and save properly. As far as
> launching the MS "Webfolder" from IE, you must use the
> following script:
>
> <HTML>
> <HEAD>
> <title>MS Webfolder</title>
> <STYLE>
> .hFolder{behavior:url(#default#httpFolder);}
> </STYLE>
> <SCRIPT>
> function fnNavigate(){
> oViewFolder.navigate(URL);
> }
> </SCRIPT>
> </HEAD>
> <BODY onload="fnNavigate()" ID="oViewFolder"
> CLASS="hFolder" >
> </BODY>
> </HTML>
Or simply:
<a href="http://foobar" folder="http://foobar" style="behavior:
url(#default#AnchorClick)">...</a>
--
<green/>bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: using a browser to edit documents
Posted by Julian <ce...@yahoo.com>.
Eric,
In order to save a document from MS Office to a webdav
location you will have to add the webdav folder as a
network place (this avoids having to enter the URL
every time on save). The other option is to have the
document open in the browser via embedded office (i.e.
office opens in IE) and save the document. I believe
this second option should automatically remember the
webdav location and save properly. As far as
launching the MS "Webfolder" from IE, you must use the
following script:
<HTML>
<HEAD>
<title>MS Webfolder</title>
<STYLE>
.hFolder{behavior:url(#default#httpFolder);}
</STYLE>
<SCRIPT>
function fnNavigate(){
oViewFolder.navigate(URL);
}
</SCRIPT>
</HEAD>
<BODY onload="fnNavigate()" ID="oViewFolder"
CLASS="hFolder" >
</BODY>
</HTML>
--- Mike Oliver <ol...@matrix-media.com> wrote:
> Yes and there is also a way to open a web folder
> from a link, but I
> don't have that syntax handy.
>
> Ollie
>
> J�rgen Hoffmann wrote:
>
> > Hi,
> >
> > A friend of mine told me that he saw this sort of
> thing working, where
> > he did not use a link object with the http
> protocol, but with the file
> > protocol. So <a
> >
>
href="file://webdav.somedomain.com/filepath/file.doc">document</a>
>
> > worked for him. This has not been tested by me
> though.
> >
> > if it works, please give a shout.
> >
> > kind regards
> >
> > J�rgen Hoffmann
> >
> > e.holmes@t-online.at wrote:
> >
> >> Thanks.
> >>
> >> I understand why it's not working, I was just
> hoping against all hopes
> >> that their might be some way into 'tricking' IE
> and/or Windows into
> >> passing an URL to the Office product instead of
> saving the file locally
> >> and then passing the local file name. There are
> so many situations
> >> when this kind of behavior would be desirable.
> >>
> >> Eric
> >>
> >> Mike Oliver schrieb:
> >>
> >>
> >>> When you open it with IE you are NOT using
> WebDAV, you
> >>> are just doing an HTTP get of the file, no
> different really than
> >>> from any
> >>> other HTTP server. To use WebDAV you need to
> open it from a Web
> >>> Folder (Technically you could do it from the
> File->Open in
> >>> Word....but I digress).
> >>>
> >>> To do that you go to your "Network Places", then
> "Add New
> >>> Network Place" and put in the URL you were using
> to the Slide folder
> >>> where your document is.
> >>>
> >>> After you authenticate you will be able to use
> Microsoft
> >>> Office products to open then with WebDAV and
> save your changes
> >>> back. The
> >>> document will be locked while you have it open
> and will be unlocked
> >>> when you close it.
> >>>
> >>> Ollie
> >>>
> >>>
> >>> E.A.Holmes wrote:
> >>>
> >>>
> >>>
> >>>> Hi,
> >>>>
> >>>> Excuse me if this question isn't 100% slide
> related, but
> >>>>
> >>>
> >>> perhaps someone
> >>>
> >>>
> >>>> can give me some help.
> >>>>
> >>>> I'm trying to use slide and webdav to access
> documents
> >>>>
> >>>
> >>> through a browser
> >>>
> >>>
> >>>> (specifically Internet Explorer 5 +, although I
> haven't
> >>>>
> >>>
> >>> had much luck
> >>>
> >>>
> >>>> using Konqueror either). The problem is, is
> that when I
> >>>>
> >>>
> >>> click on a link
> >>>
> >>>
> >>>> to retrieve an MS Office document, the correct
> >>>>
> >>>
> >>> application is opened but
> >>>
> >>>
> >>>> the MS Office application is editing a
> temporary file
> >>>>
> >>>
> >>> (e.g.
> >>>
> >>>
> >>>> /tmp/MyDoc.doc) instead of a webdav url
> >>>> (https://slide.mydomain.org/myDocs/MyDoc.doc).
> That
> >>>>
> >>>
> >>> means that you can
> >>>
> >>>
> >>>> view and edit the document, but when you save
> it it is
> >>>>
> >>>
> >>> simply saved in
> >>>
> >>>
> >>>> the local file system instead of being sent
> back to the
> >>>>
> >>>
> >>> server.
> >>>
> >>>
> >>>> Ideally I would like to click on the link, edit
> the
> >>>>
> >>>
> >>> document in the
> >>>
> >>>
> >>>> proper application and then save it directly
> back to the
> >>>>
> >>>
> >>> server.
> >>>
> >>>
> >>>> Is there any way to get this to work? Perhaps
> by
> >>>>
> >>>
> >>> sending some kind of
> >>>
> >>>
> >>>> special information in the header? Or is there
> some way
> >>>>
> >>>
> >>> to configure
> >>>
> >>>
> >>>> Windoze to handle things differently?
> >>>>
> >>>> Thanks for any help anyone can give me,
> >>>>
> >>>> Eric
> >>>>
> >>>>
> >>>>
> >>>
> >>>
>
---------------------------------------------------------------------
> >>>
> >>>
> >>>> To unsubscribe, e-mail:
> >>>>
> >>>
> >>> slide-user-unsubscribe@jakarta.apache.org
> >>>
> >>>
> >>>> For additional commands, e-mail:
> >>>>
> >>>
> >>> slide-user-help@jakarta.apache.org
> >>>
> >>>
> >>>>
> >>>>
>
=== message truncated ===
=====
Live simply so others may simply live.
�
-Ghandi
�
Pluralitas non est ponenda sine neccesitate.
"Entities should not be multiplied unneccesarily"
�
-William of Occam
__________________________________
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: using a browser to edit documents
Posted by Mike Oliver <ol...@matrix-media.com>.
Yes and there is also a way to open a web folder from a link, but I
don't have that syntax handy.
Ollie
Jürgen Hoffmann wrote:
> Hi,
>
> A friend of mine told me that he saw this sort of thing working, where
> he did not use a link object with the http protocol, but with the file
> protocol. So <a
> href="file://webdav.somedomain.com/filepath/file.doc">document</a>
> worked for him. This has not been tested by me though.
>
> if it works, please give a shout.
>
> kind regards
>
> Jürgen Hoffmann
>
> e.holmes@t-online.at wrote:
>
>> Thanks.
>>
>> I understand why it's not working, I was just hoping against all hopes
>> that their might be some way into 'tricking' IE and/or Windows into
>> passing an URL to the Office product instead of saving the file locally
>> and then passing the local file name. There are so many situations
>> when this kind of behavior would be desirable.
>>
>> Eric
>>
>> Mike Oliver schrieb:
>>
>>
>>> When you open it with IE you are NOT using WebDAV, you
>>> are just doing an HTTP get of the file, no different really than
>>> from any
>>> other HTTP server. To use WebDAV you need to open it from a Web
>>> Folder (Technically you could do it from the File->Open in
>>> Word....but I digress).
>>>
>>> To do that you go to your "Network Places", then "Add New
>>> Network Place" and put in the URL you were using to the Slide folder
>>> where your document is.
>>>
>>> After you authenticate you will be able to use Microsoft
>>> Office products to open then with WebDAV and save your changes
>>> back. The
>>> document will be locked while you have it open and will be unlocked
>>> when you close it.
>>>
>>> Ollie
>>>
>>>
>>> E.A.Holmes wrote:
>>>
>>>
>>>
>>>> Hi,
>>>>
>>>> Excuse me if this question isn't 100% slide related, but
>>>>
>>>
>>> perhaps someone
>>>
>>>
>>>> can give me some help.
>>>>
>>>> I'm trying to use slide and webdav to access documents
>>>>
>>>
>>> through a browser
>>>
>>>
>>>> (specifically Internet Explorer 5 +, although I haven't
>>>>
>>>
>>> had much luck
>>>
>>>
>>>> using Konqueror either). The problem is, is that when I
>>>>
>>>
>>> click on a link
>>>
>>>
>>>> to retrieve an MS Office document, the correct
>>>>
>>>
>>> application is opened but
>>>
>>>
>>>> the MS Office application is editing a temporary file
>>>>
>>>
>>> (e.g.
>>>
>>>
>>>> /tmp/MyDoc.doc) instead of a webdav url
>>>> (https://slide.mydomain.org/myDocs/MyDoc.doc). That
>>>>
>>>
>>> means that you can
>>>
>>>
>>>> view and edit the document, but when you save it it is
>>>>
>>>
>>> simply saved in
>>>
>>>
>>>> the local file system instead of being sent back to the
>>>>
>>>
>>> server.
>>>
>>>
>>>> Ideally I would like to click on the link, edit the
>>>>
>>>
>>> document in the
>>>
>>>
>>>> proper application and then save it directly back to the
>>>>
>>>
>>> server.
>>>
>>>
>>>> Is there any way to get this to work? Perhaps by
>>>>
>>>
>>> sending some kind of
>>>
>>>
>>>> special information in the header? Or is there some way
>>>>
>>>
>>> to configure
>>>
>>>
>>>> Windoze to handle things differently?
>>>>
>>>> Thanks for any help anyone can give me,
>>>>
>>>> Eric
>>>>
>>>>
>>>>
>>>
>>> ---------------------------------------------------------------------
>>>
>>>
>>>> To unsubscribe, e-mail:
>>>>
>>>
>>> slide-user-unsubscribe@jakarta.apache.org
>>>
>>>
>>>> For additional commands, e-mail:
>>>>
>>>
>>> slide-user-help@jakarta.apache.org
>>>
>>>
>>>>
>>>>
>>>>
>>>
>>>
>>>
>>
>> ---------------------------------------------------------------------
>>
>>
>>> To unsubscribe, e-mail:
>>> slide-user-unsubscribe@jakarta.apache.org
>>> For additional commands, e-mail:
>>> slide-user-help@jakarta.apache.org
>>>
>>>
>>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
>> For additional commands, e-mail: slide-user-help@jakarta.apache.org
>>
>>
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: slide-user-help@jakarta.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: using a browser to edit documents
Posted by Jürgen Hoffmann <jh...@byteaction.de>.
Hi,
A friend of mine told me that he saw this sort of thing working, where
he did not use a link object with the http protocol, but with the file
protocol. So <a
href="file://webdav.somedomain.com/filepath/file.doc">document</a>
worked for him. This has not been tested by me though.
if it works, please give a shout.
kind regards
Jürgen Hoffmann
e.holmes@t-online.at wrote:
>Thanks.
>
>I understand why it's not working, I was just hoping against all hopes
>that their might be some way into 'tricking' IE and/or Windows into
>passing an URL to the Office product instead of saving the file locally
>and then passing the local file name. There are so many situations
>when this kind of behavior would be desirable.
>
>Eric
>
>Mike Oliver schrieb:
>
>
>>When you open it with IE you are NOT using WebDAV, you
>>are just doing an
>>HTTP get of the file, no different really than from any
>>other HTTP
>>server. To use WebDAV you need to open it from a Web
>>Folder
>>(Technically you could do it from the File->Open in
>>Word....but I digress).
>>
>>To do that you go to your "Network Places", then "Add New
>>Network Place"
>>and put in the URL you were using to the Slide folder
>>where your
>>document is.
>>
>>After you authenticate you will be able to use Microsoft
>>Office products
>>to open then with WebDAV and save your changes back. The
>>document will
>>be locked while you have it open and will be unlocked
>>when you close it.
>>
>>Ollie
>>
>>
>>E.A.Holmes wrote:
>>
>>
>>
>>>Hi,
>>>
>>>Excuse me if this question isn't 100% slide related, but
>>>
>>>
>>perhaps someone
>>
>>
>>>can give me some help.
>>>
>>>I'm trying to use slide and webdav to access documents
>>>
>>>
>>through a browser
>>
>>
>>>(specifically Internet Explorer 5 +, although I haven't
>>>
>>>
>>had much luck
>>
>>
>>>using Konqueror either). The problem is, is that when I
>>>
>>>
>>click on a link
>>
>>
>>>to retrieve an MS Office document, the correct
>>>
>>>
>>application is opened but
>>
>>
>>>the MS Office application is editing a temporary file
>>>
>>>
>>(e.g.
>>
>>
>>>/tmp/MyDoc.doc) instead of a webdav url
>>>(https://slide.mydomain.org/myDocs/MyDoc.doc). That
>>>
>>>
>>means that you can
>>
>>
>>>view and edit the document, but when you save it it is
>>>
>>>
>>simply saved in
>>
>>
>>>the local file system instead of being sent back to the
>>>
>>>
>>server.
>>
>>
>>>Ideally I would like to click on the link, edit the
>>>
>>>
>>document in the
>>
>>
>>>proper application and then save it directly back to the
>>>
>>>
>>server.
>>
>>
>>>Is there any way to get this to work? Perhaps by
>>>
>>>
>>sending some kind of
>>
>>
>>>special information in the header? Or is there some way
>>>
>>>
>>to configure
>>
>>
>>>Windoze to handle things differently?
>>>
>>>Thanks for any help anyone can give me,
>>>
>>>Eric
>>>
>>>
>>>
>>>
>>---------------------------------------------------------------------
>>
>>
>>>To unsubscribe, e-mail:
>>>
>>>
>>slide-user-unsubscribe@jakarta.apache.org
>>
>>
>>>For additional commands, e-mail:
>>>
>>>
>>slide-user-help@jakarta.apache.org
>>
>>
>>>
>>>
>>>
>>>
>>
>>
>>
>---------------------------------------------------------------------
>
>
>>To unsubscribe, e-mail:
>>slide-user-unsubscribe@jakarta.apache.org
>>For additional commands, e-mail:
>>slide-user-help@jakarta.apache.org
>>
>>
>>
>>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
>For additional commands, e-mail: slide-user-help@jakarta.apache.org
>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: using a browser to edit documents
Posted by e....@t-online.at.
Thanks.
I understand why it's not working, I was just hoping against all hopes
that their might be some way into 'tricking' IE and/or Windows into
passing an URL to the Office product instead of saving the file locally
and then passing the local file name. There are so many situations
when this kind of behavior would be desirable.
Eric
Mike Oliver schrieb:
> When you open it with IE you are NOT using WebDAV, you
> are just doing an
> HTTP get of the file, no different really than from any
> other HTTP
> server. To use WebDAV you need to open it from a Web
> Folder
> (Technically you could do it from the File->Open in
> Word....but I digress).
>
> To do that you go to your "Network Places", then "Add New
> Network Place"
> and put in the URL you were using to the Slide folder
> where your
> document is.
>
> After you authenticate you will be able to use Microsoft
> Office products
> to open then with WebDAV and save your changes back. The
> document will
> be locked while you have it open and will be unlocked
> when you close it.
>
> Ollie
>
>
> E.A.Holmes wrote:
>
> >Hi,
> >
> >Excuse me if this question isn't 100% slide related, but
> perhaps someone
> >can give me some help.
> >
> >I'm trying to use slide and webdav to access documents
> through a browser
> >(specifically Internet Explorer 5 +, although I haven't
> had much luck
> >using Konqueror either). The problem is, is that when I
> click on a link
> >to retrieve an MS Office document, the correct
> application is opened but
> >the MS Office application is editing a temporary file
> (e.g.
> >/tmp/MyDoc.doc) instead of a webdav url
> >(https://slide.mydomain.org/myDocs/MyDoc.doc). That
> means that you can
> >view and edit the document, but when you save it it is
> simply saved in
> >the local file system instead of being sent back to the
> server.
> >Ideally I would like to click on the link, edit the
> document in the
> >proper application and then save it directly back to the
> server.
> >
> >Is there any way to get this to work? Perhaps by
> sending some kind of
> >special information in the header? Or is there some way
> to configure
> >Windoze to handle things differently?
> >
> >Thanks for any help anyone can give me,
> >
> >Eric
> >
> >
>
>---------------------------------------------------------------------
> >To unsubscribe, e-mail:
> slide-user-unsubscribe@jakarta.apache.org
> >For additional commands, e-mail:
> slide-user-help@jakarta.apache.org
> >
> >
> >
> >
>
>
>
---------------------------------------------------------------------
> To unsubscribe, e-mail:
> slide-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail:
> slide-user-help@jakarta.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: using a browser to edit documents
Posted by Mike Oliver <ol...@matrix-media.com>.
When you open it with IE you are NOT using WebDAV, you are just doing an
HTTP get of the file, no different really than from any other HTTP
server. To use WebDAV you need to open it from a Web Folder
(Technically you could do it from the File->Open in Word....but I digress).
To do that you go to your "Network Places", then "Add New Network Place"
and put in the URL you were using to the Slide folder where your
document is.
After you authenticate you will be able to use Microsoft Office products
to open then with WebDAV and save your changes back. The document will
be locked while you have it open and will be unlocked when you close it.
Ollie
E.A.Holmes wrote:
>Hi,
>
>Excuse me if this question isn't 100% slide related, but perhaps someone
>can give me some help.
>
>I'm trying to use slide and webdav to access documents through a browser
>(specifically Internet Explorer 5 +, although I haven't had much luck
>using Konqueror either). The problem is, is that when I click on a link
>to retrieve an MS Office document, the correct application is opened but
>the MS Office application is editing a temporary file (e.g.
>/tmp/MyDoc.doc) instead of a webdav url
>(https://slide.mydomain.org/myDocs/MyDoc.doc). That means that you can
>view and edit the document, but when you save it it is simply saved in
>the local file system instead of being sent back to the server.
>Ideally I would like to click on the link, edit the document in the
>proper application and then save it directly back to the server.
>
>Is there any way to get this to work? Perhaps by sending some kind of
>special information in the header? Or is there some way to configure
>Windoze to handle things differently?
>
>Thanks for any help anyone can give me,
>
>Eric
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
>For additional commands, e-mail: slide-user-help@jakarta.apache.org
>
>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
using a browser to edit documents
Posted by "E.A.Holmes" <e....@t-online.at>.
Hi,
Excuse me if this question isn't 100% slide related, but perhaps someone
can give me some help.
I'm trying to use slide and webdav to access documents through a browser
(specifically Internet Explorer 5 +, although I haven't had much luck
using Konqueror either). The problem is, is that when I click on a link
to retrieve an MS Office document, the correct application is opened but
the MS Office application is editing a temporary file (e.g.
/tmp/MyDoc.doc) instead of a webdav url
(https://slide.mydomain.org/myDocs/MyDoc.doc). That means that you can
view and edit the document, but when you save it it is simply saved in
the local file system instead of being sent back to the server.
Ideally I would like to click on the link, edit the document in the
proper application and then save it directly back to the server.
Is there any way to get this to work? Perhaps by sending some kind of
special information in the header? Or is there some way to configure
Windoze to handle things differently?
Thanks for any help anyone can give me,
Eric
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: Some newbie Security questions
Posted by Peder Nordvaller <pe...@vitaminapplications.se>.
Thanks Martin, that solved the problem - now setting permissions for groups
works just fine!
Another (related) question though: How can I enumerate the permissions for a
certain SubjectNode? The security.enumeratePermissions only seems to give me
what permissions affect a certain Object (for example
security.enumeratePermissions(slideToken, "/users") gives me an Enumeration
of all permissions that have object = /users). How can I do the reverse -
get an Enumeration of all permissions that have subject = *something* so
that I can list all permissions that a certain group has been granted for
example?
Regards, Peder
----- Original Message -----
From: "Martin Holz" <ho...@fiz-chemie.de>
To: <sl...@jakarta.apache.org>
Sent: Friday, January 09, 2004 3:25 PM
Subject: Re: Some newbie Security questions
> "Peder Nordvaller" <pe...@vitaminapplications.se> writes:
>
> > What do you mean by authentication? I'm doing most of the stuff towards
> > slide using the api, so I'm creating a domain via Domain.init() and
using
> > the helpers to check for permissions.
>
> I thought you use webdav and there was a mistake.
>
> > Given the following Domain.xml the
> > user /users/joe (which is linked to in /users/MyGroup/joe) should be
able to
> > have /actions/read on /files/test - correct?
> >
> > After initializing slide, however:
> >
> > security.checkPermission(new SubjectNode("/files/test"), new
> > SubjectNode("/users/joe), new ActionNode("/actions/read"));
> >
> > throws an AccessDeniedException, but the following two does not:
> >
> > security.checkPermission(new SubjectNode("/files/test"), new
> > SubjectNode("/users/MyGroup), new ActionNode("/actions/read"));
> > security.checkPermission(new SubjectNode("/files/test"), new
> > SubjectNode("/users/MyGroup/joe), new ActionNode("/actions/read"));
> >
> >
> > Following is my Domain.xml (which contains some other stuff used by my
> > application):
> >
> > <?xml version="1.0"?>
> >
> > <slide logger="org.apache.slide.util.logger.SimpleLogger"
logger-level="6"
> > default="slide">
> >
> > <namespace name="fs">
> >
> > <definition>
> [...]
> > </definition>
> >
> > <configuration>
> [...]
> >
> > <!-- Paths configuration -->
> > <userspath>/users</userspath>
> > <guestpath>guest</guestpath>
> > <filespath>/files</filespath>
> > <parameter name="dav">true</parameter>
> > <parameter name="standalone">true</parameter>
> >
> > <!-- Roles definition -->
> > <role name="root">slideroles.basic.RootRole</role>
> > <role name="user">slideroles.basic.UserRole</role>
> > <role name="guest">slideroles.basic.GuestRole</role>
> >
> > <!-- Users management -->
> > <auto-create-users>true</auto-create-users>
> >
> >
> > </configuration>
> >
> > <data>
> >
> > <objectnode classname="org.apache.slide.structure.SubjectNode"
> > uri="/">
> >
> > <!-- Permissions for this Node-->
> > <permission action="/actions" subject="root"/>
> >
> > <objectnode classname="org.apache.slide.structure.SubjectNode"
> > uri="/users">
> > <revision>
> > <property name="rootgroup">true</property>
> > </revision>
> >
> >
> > <objectnode classname="slideroles.basic.RootRoleImpl"
> > uri="/users/root">
> > <revision>
> > <property name="password"
> > namespace="http://jakarta.apache.org/slide/">root</property>
> > <property name="rootgroup">/users</property>
> > <property name="role">Root</property>
> > </revision>
> > </objectnode><!-- End /user/root -->
> >
> > <objectnode classname="slideroles.basic.GuestRoleImpl"
> > uri="/users/guest">
> > <revision>
> > <property name="password"
> > namespace="http://jakarta.apache.org/slide/">guest</property>
> > <property name="rootgroup">/users</property>
> > <property name="role">Guest</property>
> > </revision>
> > </objectnode><!-- End /user/guest -->
> >
> > <objectnode classname="slideroles.basic.UserRoleImpl"
uri="/users/joe">
> > <revision>
> > <property name="password"
> > namespace="http://jakarta.apache.org/slide/">joe</property>
> > <property name="rootgroup">/users</property>
> > <property name="role">User</property>
> > </revision>
> > </objectnode>
> >
> > <objectnode classname="org.apache.slide.structure.SubjectNode"
> > uri="/users/MyGroup">
>
> This should be a GroupNode, not a SubjectNode.
>
> > <objectnode classname="org.apache.slide.structure.LinkNode"
> > uri="/users/MyGroup/joe" linkedUri="/users/joe"/>
> >
> > </objectnode>
> >
> > </objectnode><!-- End /users -->
> >
> > <objectnode classname="org.apache.slide.structure.ActionNode"
> > uri="/actions">
> >
> > <objectnode classname="org.apache.slide.structure.ActionNode"
> > uri="/actions/read"/>
> > <objectnode classname="org.apache.slide.structure.ActionNode"
> > uri="/actions/write"/>
> > <objectnode classname="org.apache.slide.structure.ActionNode"
> > uri="/actions/manage"/>
> >
> > </objectnode><!-- End /actions -->
> >
> > <objectnode classname="org.apache.slide.structure.SubjectNode"
> > uri="/files">
> >
> > <permission action="/actions" subject="guest"/>
> >
> > <objectnode classname="org.apache.slide.structure.SubjectNode"
> > uri="/files/test">
> >
> > <permission action="/actions/read" subject="/users/MyGroup"
> > inherit="true" negative="false"/>
> >
> Add a + here, because it is group.
> subject="+/users/MyGroup"
>
> > </objectnode>
> >
> > </objectnode><!-- End /files -->
> >
> >
> > <objectnode classname="org.apache.slide.structure.SubjectNode"
> > uri="/meta">
> >
> > <objectnode classname="org.apache.slide.structure.SubjectNode"
> > uri="/meta/ContentType"/>
> > <objectnode classname="org.apache.slide.structure.SubjectNode"
> > uri="/meta/ActionTemplate"/>
> > <objectnode classname="org.apache.slide.structure.SubjectNode"
> > uri="/meta/PropertyTemplate"/>
> > <objectnode classname="org.apache.slide.structure.SubjectNode"
> > uri="/meta/ImageMacro"/>
> >
> > </objectnode><!-- End /meta -->
> >
> > </objectnode><!-- End / -->
> >
> > </data>
> >
> > </namespace>
> >
> > </slide>
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: slide-user-help@jakarta.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: Some newbie Security questions
Posted by Martin Holz <ho...@fiz-chemie.de>.
"Peder Nordvaller" <pe...@vitaminapplications.se> writes:
> What do you mean by authentication? I'm doing most of the stuff towards
> slide using the api, so I'm creating a domain via Domain.init() and using
> the helpers to check for permissions.
I thought you use webdav and there was a mistake.
> Given the following Domain.xml the
> user /users/joe (which is linked to in /users/MyGroup/joe) should be able to
> have /actions/read on /files/test - correct?
>
> After initializing slide, however:
>
> security.checkPermission(new SubjectNode("/files/test"), new
> SubjectNode("/users/joe), new ActionNode("/actions/read"));
>
> throws an AccessDeniedException, but the following two does not:
>
> security.checkPermission(new SubjectNode("/files/test"), new
> SubjectNode("/users/MyGroup), new ActionNode("/actions/read"));
> security.checkPermission(new SubjectNode("/files/test"), new
> SubjectNode("/users/MyGroup/joe), new ActionNode("/actions/read"));
>
>
> Following is my Domain.xml (which contains some other stuff used by my
> application):
>
> <?xml version="1.0"?>
>
> <slide logger="org.apache.slide.util.logger.SimpleLogger" logger-level="6"
> default="slide">
>
> <namespace name="fs">
>
> <definition>
[...]
> </definition>
>
> <configuration>
[...]
>
> <!-- Paths configuration -->
> <userspath>/users</userspath>
> <guestpath>guest</guestpath>
> <filespath>/files</filespath>
> <parameter name="dav">true</parameter>
> <parameter name="standalone">true</parameter>
>
> <!-- Roles definition -->
> <role name="root">slideroles.basic.RootRole</role>
> <role name="user">slideroles.basic.UserRole</role>
> <role name="guest">slideroles.basic.GuestRole</role>
>
> <!-- Users management -->
> <auto-create-users>true</auto-create-users>
>
>
> </configuration>
>
> <data>
>
> <objectnode classname="org.apache.slide.structure.SubjectNode"
> uri="/">
>
> <!-- Permissions for this Node-->
> <permission action="/actions" subject="root"/>
>
> <objectnode classname="org.apache.slide.structure.SubjectNode"
> uri="/users">
> <revision>
> <property name="rootgroup">true</property>
> </revision>
>
>
> <objectnode classname="slideroles.basic.RootRoleImpl"
> uri="/users/root">
> <revision>
> <property name="password"
> namespace="http://jakarta.apache.org/slide/">root</property>
> <property name="rootgroup">/users</property>
> <property name="role">Root</property>
> </revision>
> </objectnode><!-- End /user/root -->
>
> <objectnode classname="slideroles.basic.GuestRoleImpl"
> uri="/users/guest">
> <revision>
> <property name="password"
> namespace="http://jakarta.apache.org/slide/">guest</property>
> <property name="rootgroup">/users</property>
> <property name="role">Guest</property>
> </revision>
> </objectnode><!-- End /user/guest -->
>
> <objectnode classname="slideroles.basic.UserRoleImpl" uri="/users/joe">
> <revision>
> <property name="password"
> namespace="http://jakarta.apache.org/slide/">joe</property>
> <property name="rootgroup">/users</property>
> <property name="role">User</property>
> </revision>
> </objectnode>
>
> <objectnode classname="org.apache.slide.structure.SubjectNode"
> uri="/users/MyGroup">
This should be a GroupNode, not a SubjectNode.
> <objectnode classname="org.apache.slide.structure.LinkNode"
> uri="/users/MyGroup/joe" linkedUri="/users/joe"/>
>
> </objectnode>
>
> </objectnode><!-- End /users -->
>
> <objectnode classname="org.apache.slide.structure.ActionNode"
> uri="/actions">
>
> <objectnode classname="org.apache.slide.structure.ActionNode"
> uri="/actions/read"/>
> <objectnode classname="org.apache.slide.structure.ActionNode"
> uri="/actions/write"/>
> <objectnode classname="org.apache.slide.structure.ActionNode"
> uri="/actions/manage"/>
>
> </objectnode><!-- End /actions -->
>
> <objectnode classname="org.apache.slide.structure.SubjectNode"
> uri="/files">
>
> <permission action="/actions" subject="guest"/>
>
> <objectnode classname="org.apache.slide.structure.SubjectNode"
> uri="/files/test">
>
> <permission action="/actions/read" subject="/users/MyGroup"
> inherit="true" negative="false"/>
>
Add a + here, because it is group.
subject="+/users/MyGroup"
> </objectnode>
>
> </objectnode><!-- End /files -->
>
>
> <objectnode classname="org.apache.slide.structure.SubjectNode"
> uri="/meta">
>
> <objectnode classname="org.apache.slide.structure.SubjectNode"
> uri="/meta/ContentType"/>
> <objectnode classname="org.apache.slide.structure.SubjectNode"
> uri="/meta/ActionTemplate"/>
> <objectnode classname="org.apache.slide.structure.SubjectNode"
> uri="/meta/PropertyTemplate"/>
> <objectnode classname="org.apache.slide.structure.SubjectNode"
> uri="/meta/ImageMacro"/>
>
> </objectnode><!-- End /meta -->
>
> </objectnode><!-- End / -->
>
> </data>
>
> </namespace>
>
> </slide>
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: Some newbie Security questions
Posted by Peder Nordvaller <pe...@vitaminapplications.se>.
What do you mean by authentication? I'm doing most of the stuff towards
slide using the api, so I'm creating a domain via Domain.init() and using
the helpers to check for permissions. Given the following Domain.xml the
user /users/joe (which is linked to in /users/MyGroup/joe) should be able to
have /actions/read on /files/test - correct?
After initializing slide, however:
security.checkPermission(new SubjectNode("/files/test"), new
SubjectNode("/users/joe), new ActionNode("/actions/read"));
throws an AccessDeniedException, but the following two does not:
security.checkPermission(new SubjectNode("/files/test"), new
SubjectNode("/users/MyGroup), new ActionNode("/actions/read"));
security.checkPermission(new SubjectNode("/files/test"), new
SubjectNode("/users/MyGroup/joe), new ActionNode("/actions/read"));
Following is my Domain.xml (which contains some other stuff used by my
application):
<?xml version="1.0"?>
<slide logger="org.apache.slide.util.logger.SimpleLogger" logger-level="6"
default="slide">
<namespace name="fs">
<definition>
<store name="mysql">
<nodestore classname="slidestore.reference.JDBCDescriptorsStore">
<parameter name="driver">com.mysql.jdbc.Driver</parameter>
<parameter name="url">jdbc:mysql://localhost/filestore</parameter>
<parameter name="user">root</parameter>
<parameter name="password"></parameter>
</nodestore>
<securitystore>
<reference store="nodestore" />
</securitystore>
<lockstore>
<reference store="nodestore" />
</lockstore>
<revisiondescriptorsstore>
<reference store="nodestore" />
</revisiondescriptorsstore>
<revisiondescriptorstore>
<reference store="nodestore" />
</revisiondescriptorstore>
<contentstore classname="slidestore.reference.JDBCContentStore">
<parameter name="driver">com.mysql.jdbc.Driver</parameter>
<parameter name="url">jdbc:mysql://localhost/filestore</parameter>
<parameter name="user">root</parameter>
<parameter name="password"></parameter>
</contentstore>
</store>
<scope match="/" store="mysql" />
</definition>
<configuration>
<!-- Actions mapping -->
<default-action>/actions</default-action>
<read-object>/actions/read</read-object>
<create-object>/actions/write</create-object>
<remove-object>/actions/write</remove-object>
<grant-permission>/actions/manage</grant-permission>
<revoke-permission>/actions/manage</revoke-permission>
<read-permissions>/actions/manage</read-permissions>
<lock-object>/actions/write</lock-object>
<kill-lock>/actions/manage</kill-lock>
<read-locks>/actions/read</read-locks>
<read-revision-metadata>/actions/read</read-revision-metadata>
<create-revision-metadata>/actions/write</create-revision-metadata>
<modify-revision-metadata>/actions/write</modify-revision-metadata>
<remove-revision-metadata>/actions/write</remove-revision-metadata>
<read-revision-content>/actions/read</read-revision-content>
<create-revision-content>/actions/write</create-revision-content>
<modify-revision-content>/actions/write</modify-revision-content>
<remove-revision-content>/actions/write</remove-revision-content>
<!-- Paths configuration -->
<userspath>/users</userspath>
<guestpath>guest</guestpath>
<filespath>/files</filespath>
<parameter name="dav">true</parameter>
<parameter name="standalone">true</parameter>
<!-- Roles definition -->
<role name="root">slideroles.basic.RootRole</role>
<role name="user">slideroles.basic.UserRole</role>
<role name="guest">slideroles.basic.GuestRole</role>
<!-- Users management -->
<auto-create-users>true</auto-create-users>
</configuration>
<data>
<objectnode classname="org.apache.slide.structure.SubjectNode"
uri="/">
<!-- Permissions for this Node-->
<permission action="/actions" subject="root"/>
<objectnode classname="org.apache.slide.structure.SubjectNode"
uri="/users">
<revision>
<property name="rootgroup">true</property>
</revision>
<objectnode classname="slideroles.basic.RootRoleImpl"
uri="/users/root">
<revision>
<property name="password"
namespace="http://jakarta.apache.org/slide/">root</property>
<property name="rootgroup">/users</property>
<property name="role">Root</property>
</revision>
</objectnode><!-- End /user/root -->
<objectnode classname="slideroles.basic.GuestRoleImpl"
uri="/users/guest">
<revision>
<property name="password"
namespace="http://jakarta.apache.org/slide/">guest</property>
<property name="rootgroup">/users</property>
<property name="role">Guest</property>
</revision>
</objectnode><!-- End /user/guest -->
<objectnode classname="slideroles.basic.UserRoleImpl" uri="/users/joe">
<revision>
<property name="password"
namespace="http://jakarta.apache.org/slide/">joe</property>
<property name="rootgroup">/users</property>
<property name="role">User</property>
</revision>
</objectnode>
<objectnode classname="org.apache.slide.structure.SubjectNode"
uri="/users/MyGroup">
<objectnode classname="org.apache.slide.structure.LinkNode"
uri="/users/MyGroup/joe" linkedUri="/users/joe"/>
</objectnode>
</objectnode><!-- End /users -->
<objectnode classname="org.apache.slide.structure.ActionNode"
uri="/actions">
<objectnode classname="org.apache.slide.structure.ActionNode"
uri="/actions/read"/>
<objectnode classname="org.apache.slide.structure.ActionNode"
uri="/actions/write"/>
<objectnode classname="org.apache.slide.structure.ActionNode"
uri="/actions/manage"/>
</objectnode><!-- End /actions -->
<objectnode classname="org.apache.slide.structure.SubjectNode"
uri="/files">
<permission action="/actions" subject="guest"/>
<objectnode classname="org.apache.slide.structure.SubjectNode"
uri="/files/test">
<permission action="/actions/read" subject="/users/MyGroup"
inherit="true" negative="false"/>
</objectnode>
</objectnode><!-- End /files -->
<objectnode classname="org.apache.slide.structure.SubjectNode"
uri="/meta">
<objectnode classname="org.apache.slide.structure.SubjectNode"
uri="/meta/ContentType"/>
<objectnode classname="org.apache.slide.structure.SubjectNode"
uri="/meta/ActionTemplate"/>
<objectnode classname="org.apache.slide.structure.SubjectNode"
uri="/meta/PropertyTemplate"/>
<objectnode classname="org.apache.slide.structure.SubjectNode"
uri="/meta/ImageMacro"/>
</objectnode><!-- End /meta -->
</objectnode><!-- End / -->
</data>
</namespace>
</slide>
Any ideas? Thanks for helping me!
Regards, Peder
----- Original Message -----
From: "Martin Holz" <ho...@fiz-chemie.de>
To: <sl...@jakarta.apache.org>
Sent: Thursday, January 08, 2004 2:01 PM
Subject: Re: Some newbie Security questions
> "Peder Nordvaller" <pe...@vitaminapplications.se> writes:
>
> > Hello,
> >
> > I'm writing an app that uses Slide, and I have some troubles
understanding
> > the ACL/Security. What I would like to do is the following:
> >
> > I have some users, for example:
> > /users/joe
> > /users/mary
> >
> > That both have /actions/read on /files (not inherited). This works just
> > fine, they can read the /files but no nodes below. Now I have a "user
> > group": /users/MyGroup under which I have created a link
/users/MyGroup/joe
> > to /users/joe. What I want to do is be able to grant /actions/read on
> > /files/somenode to /users/MyGroup (not inherited)- and with this make
every
> > linked user in this group also get this permission, so that in this case
joe
> > will also get /actions/read on /files/somenode. I would also like to be
able
> > to link users in this manner to several user groups with permissions so
that
> > the users get permissions from several groups. Is this possible? If so,
what
> > could I be missing if it's not working? I'm currently using the1.0.16
build.
>
> This should work with 1.0.16 (but not the CVS HEAD). Could you send your
> Domain.xml? Also how do you do the authentication ?
>
>
> Martin
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: slide-user-help@jakarta.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
Re: Some newbie Security questions
Posted by Martin Holz <ho...@fiz-chemie.de>.
"Peder Nordvaller" <pe...@vitaminapplications.se> writes:
> Hello,
>
> I'm writing an app that uses Slide, and I have some troubles understanding
> the ACL/Security. What I would like to do is the following:
>
> I have some users, for example:
> /users/joe
> /users/mary
>
> That both have /actions/read on /files (not inherited). This works just
> fine, they can read the /files but no nodes below. Now I have a "user
> group": /users/MyGroup under which I have created a link /users/MyGroup/joe
> to /users/joe. What I want to do is be able to grant /actions/read on
> /files/somenode to /users/MyGroup (not inherited)- and with this make every
> linked user in this group also get this permission, so that in this case joe
> will also get /actions/read on /files/somenode. I would also like to be able
> to link users in this manner to several user groups with permissions so that
> the users get permissions from several groups. Is this possible? If so, what
> could I be missing if it's not working? I'm currently using the1.0.16 build.
This should work with 1.0.16 (but not the CVS HEAD). Could you send your
Domain.xml? Also how do you do the authentication ?
Martin
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org