permission

[Piter Siman <pi...@stepstone.de>]

Hi !

I have a question about permission in slide,

here is my use case:
I have two users, example: /users/test and /users/test1
one directory file, example: /files/filedirectory.

in /files/filedirectory I created two directories:
/files/fileDirectory/test for /users/test and
/files/fileDirectory/test1 for /users/test1

the permissions are
/actions/read (not inheritable) for /users/test and /users/test1 in 
/files/fileDirectory

/actions (inheritable) for /users/test in /files/fileDirectory/test
/actions (inheritable) for /users/test1 in /files/fileDirectory/test1

My question is, why /users/test1 can perform /actions in 
/files/fileDirectory/test ?

as I see in SecurityImpl.java:

granted = (!permission.isNegative())
                            && (subjectUri.toString()
                                .startsWith(permission.getSubjectUri()))
                            && (actionUri.toString()
                                .startsWith(permission.getActionUri()));

denied = (permission.isNegative())
                            && (subjectUri.toString()
                                .startsWith(permission.getSubjectUri()))
                            && (actionUri.toString()
                                .startsWith(permission.getActionUri()));

subjectUri is /users/test1
permission.getSubjectUri() is /users/test. Because it used startsWith, 
/users/test1 can access /actions from /users/test.

Why it used startsWith?

thanks.

piter

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>

Re: permission

[Piter Siman <pi...@stepstone.de>]

thanks..:)
>
> I think this is a bug I fixed in HEAD, and which has been backported to
> the 1.0 branch.
>
> Michael

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>

"Connection: close" header in HTTP response

[Zhidong Yu <zh...@ipedo.com>]

I found a problem in Slide 1.0.16, and I am not sure whether it has been
fixed (if so, please excuse me kindly).

I found this problem when I using DreamWeaver MX 6.0 to connect a Slide
server. DreameWeaver responses very slowly. So I use tcpTrace.exe to
dump the request/response, and I found that DreamWeaver need wait about
1 minute after a response is sent back by Slide server. However, I found
DreamWeaver works well with Apache1.3.27+mod_dav1.0.3 in another
experiment. After comparing the response packages sent by Slide and
mod_dav (thanks to tcpTrace.exe), I found that mod_dav response has a
"Connection: close" head but Slide doesn't have. After I modify Slide
code and make it return "connection: close" too, the DreamWeaver can
work smoothly.

Is it a known problem?



--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>

"Connection: close" header in HTTP response

[Zhidong Yu <zh...@ipedo.com>]

I found a problem in Slide 1.0.16, and I am not sure whether it has been
fixed (if so, please excuse me kindly).

I found this problem when I using DreamWeaver MX 6.0 to connect a Slide
server. DreameWeaver responses very slowly. So I use tcpTrace.exe to
dump the request/response, and I found that DreamWeaver need wait about
1 minute after a response is sent back by Slide server. However, I found
DreamWeaver works well with Apache1.3.27+mod_dav1.0.3 in another
experiment. After comparing the response packages sent by Slide and
mod_dav (thanks to tcpTrace.exe), I found that mod_dav response has a
"Connection: close" head but Slide doesn't have. After I modify Slide
code and make it return "connection: close" too, the DreamWeaver can
work smoothly.

Is it a known problem?



--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>

Can XMetal work with Slide?

[Zhidong Yu <zh...@ipedo.com>]

Corel XMetal can only open file at Slide server as read-only mode. But
it can work with Apache+mod_dav. Does anybody know why?



--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>

Re: permission

[Michael Smith <ms...@xn.com.au>]

Piter Siman wrote:
> 
> Hi !
> 
> I have a question about permission in slide,

I think this is a bug I fixed in HEAD, and which has been backported to
the 1.0 branch.

Michael

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>