Permission setting for child directories

[Wong Kam Lai <kl...@onk.cintec.cuhk.edu.hk>]

I have now a filepath /cnc and a child node /cnc/cidax, I have also some
users 'anson,'wah', and a group called 'CNC'. Now, they have right to
access /cnc with different permission level, and I want to set the
permission such that only 'wah' has the right to access /cnc/cidax. How to
set this? I've tried the 'inheritable' in Domain.xml but I fail. What's
the problem?

        <objectnode classname="org.apache.slide.structure.SubjectNode" 
         uri="/cnc" >

          <!-- ### Give read/write/manage permission to guest ### 
               Uncomment the following line to give permission to do
               all actions on /cnc to guest (unauthenticated users) -->
          <!-- <permission action="/actions" subject="/users/guest"/> -->

          <permission
action="/actions/manage" subject="/users/wah" inheritable="false"/>
          <permission
action="/actions/read" subject="+/users/CNC" inheritable="false"/>
          <permission
action="/actions/write" subject="+/users/CNC" inheritable="false"/>
          <permission
action="/actions/read" subject="/users/anson" inheritable="false"/>
<!--          <permission action="/actions/read" subject="nobody"/>-->

        </objectnode>

        <objectnode classname="org.apache.slide.structure.SubjectNode" 
         uri="/cnc/cidax">

          <!-- ### Give read/write/manage permission to guest ### 
               Uncomment the following line to give permission to do
               all actions on /cnc/cidax to guest (unauthenticated
users) -->
          <!-- <permission action="/actions" subject="/users/guest"/> -->

          <permission
action="/actions/manage" subject="/users/wah" inheritable="false"/>
<!--          <permission action="/actions/read" subject="nobody"/>-->

        </objectnode>



---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org

Re: Permission setting for child directories

[Martin Holz <ho...@fiz-chemie.de>]

filespath is defined three times. I wonder, that slide is working at all.
Not sure, if this is the only reason of your problems. Domain.xml is one
of the most frightening parts of slide.

--
Martin Holz     <ho...@fiz-chemie.de>

Softwareentwicklung / Vernetztes Studium - Chemie
FIZ CHEMIE Berlin
Franklinstrasse 11
D-10587 Berlin     


---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org

Re: Permission setting for child directories

[Wong Kam Lai <kl...@onk.cintec.cuhk.edu.hk>]

> What is the behaviour of slide with this configuration? 
But I can use other user account to access the /cnc/cidax

I've now added a new line under manage permission
          <permission
action="/actions/read" subject="/users/wah" inheritable="false"/>

Maybe I attach my Domain.xml as well.. Thanks

> I would expect, that only wah has manage permissions to
> /cnc/cidax, but he has no read permissions.
> How do you manage something, you can't see?
> 
> Martin
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: slide-user-help@jakarta.apache.org
> 

Re: Permission setting for child directories

[Martin Holz <ho...@fiz-chemie.de>]

What is the behaviour of slide with this configuration? 
I would expect, that only wah has manage permissions to
/cnc/cidax, but he has no read permissions.
How do you manage something, you can't see?

Martin



---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org