You are viewing a plain text version of this content. The canonical link for it is here.
Posted to slide-user@jakarta.apache.org by irene <ir...@yahoo.es> on 2007/03/06 17:57:25 UTC
Newbie: Please help!!: acl permissions: check two roles
Hello, I have the next folders:
/folderA/ granted permission to role_A
/subfolder1/ granted permission to role_1
/subfolder2/ granted permission to role_2
/folderB/ granted permission to role_B
/subfolder1/ granted permission to role_1
/subfolder2/ granted permission to role_2
And a user A with the roles role_A and role_1
Slide doesn't allow A to access /folderB, but allows /folderB/subfolder1.
I want that only users who have role_B AND role_1 can access to
/folderB/subfolder1
How can I do this???
--
View this message in context: http://www.nabble.com/Newbie%3A-Please-help%21%21%3A-acl-permissions%3A-check-two-roles-tf3356641.html#a9335664
Sent from the Jakarta Slide - User mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
RE: Newbie: Please help!!: acl permissions: check two roles
Posted by irene <ir...@yahoo.es>.
Hi, i think that is the correct solution.
But I have been reading the ACL spec and i founded the ACL invert. It'd
solved my problem, too.
Do you know if slide support inverts in ACLs?
Thanks
Andrea Colleoni wrote:
>
> Hi,
> You can create a new role (say role_a_1) grouping the two roles:
>
> <objectnode classname="org.apache.slide.structure.SubjectNode"
> uri="/roles/role_a_1">
> <revision>
> <property name="group-member-set">
> <![CDATA[
> <D:href xmlns:D='DAV:'>/roles/role_A</D:href>
> <D:href xmlns:D='DAV:'>/roles/role1</D:href>
> ]]>
> </property>
> </revision>
> </objectnode>
>
> Then give access to /files/folderA/folder1 at /roles/role_a_1.
>
> <objectnode classname="org.apache.slide.structure.SubjectNode"
> uri="/files/folderA/folder1">
> <permission action="all" subject="/roles/role_a_1"/>
> </objectnode>
>
> I think it can work but I've never tried to do so with roles; I've done it
> with groups and it worked... I think it could not be so different.
>
> Bye.
>
> _____________________
> Andrea Colleoni
>
>> -----Original Message-----
>> From: irene [mailto:irenita_p@yahoo.es]
>> Sent: Wednesday, March 07, 2007 9:35 AM
>> To: slide-user@jakarta.apache.org
>> Subject: RE: Newbie: Please help!!: acl permissions: check two roles
>>
>>
>> Hi Andrea.
>> Doing that, a user who has role_A but doesn't have role1, has
>> access to
>> /files/folderA/folder1
>>
>> I'd wanted that slide check the two roles. And only a user
>> having roleA and
>> role1 can access.
>>
>> Is this possible?
>>
>> Thanks!!
>>
>>
>> Andrea Colleoni wrote:
>> >
>> > Hi Irene,
>> > You can use the inheritable property to propagate
>> permission of parent
>> > folder to his children.
>> > In your Domain.xml, in the data section, you can write
>> something like
>> > this:
>> >
>> > <objectnode classname="org.apache.slide.structure.SubjectNode"
>> > uri="/files/folderB">
>> > <permission action="all" subject="/roles/roleB"
>> inheritable="true"
>> > negative="false"/>
>> > </objectnode>
>> >
>> > HTH
>> >
>> > Bye.
>> >
>> > _____________________
>> > Andrea Colleoni
>> >
>> >> -----Original Message-----
>> >> From: irene [mailto:irenita_p@yahoo.es]
>> >> Sent: Tuesday, March 06, 2007 5:57 PM
>> >> To: slide-user@jakarta.apache.org
>> >> Subject: Newbie: Please help!!: acl permissions: check two roles
>> >>
>> >>
>> >> Hello, I have the next folders:
>> >>
>> >> /folderA/ granted permission to role_A
>> >> /subfolder1/ granted permission to role_1
>> >> /subfolder2/ granted permission to role_2 /folderB/ granted
>> >> permission to role_B
>> >> /subfolder1/ granted permission to role_1
>> >> /subfolder2/ granted permission to role_2
>> >>
>> >> And a user A with the roles role_A and role_1
>> >>
>> >> Slide doesn't allow A to access /folderB, but allows
>> >> /folderB/subfolder1.
>> >>
>> >> I want that only users who have role_B AND role_1 can access to
>> >> /folderB/subfolder1
>> >>
>> >> How can I do this???
>> >>
>> >>
>> >> --
>> >> View this message in context:
>> >> http://www.nabble.com/Newbie%3A-Please-help%21%21%3A-acl-permi
>> >> ssions%3A-check-two-roles-tf3356641.html#a9335664
>> >> Sent from the Jakarta Slide - User mailing list archive at
>> Nabble.com.
>> >>
>> >>
>> >>
>> ---------------------------------------------------------------------
>> >> To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
>> >> For additional commands, e-mail: slide-user-help@jakarta.apache.org
>> >>
>> >>
>> >
>> >
>> >
>> ---------------------------------------------------------------------
>> > To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
>> > For additional commands, e-mail: slide-user-help@jakarta.apache.org
>> >
>> >
>> >
>>
>> --
>> View this message in context:
>> http://www.nabble.com/Newbie%3A-Please-help%21%21%3A-acl-permi
>> ssions%3A-check-two-roles-tf3356641.html#a9348582
>> Sent from the Jakarta Slide - User mailing list archive at Nabble.com.
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
>> For additional commands, e-mail: slide-user-help@jakarta.apache.org
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: slide-user-help@jakarta.apache.org
>
>
>
--
View this message in context: http://www.nabble.com/Newbie%3A-Please-help%21%21%3A-acl-permissions%3A-check-two-roles-tf3356641.html#a9358202
Sent from the Jakarta Slide - User mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
RE: Newbie: Please help!!: acl permissions: check two roles
Posted by Andrea Colleoni <an...@planecom.it>.
Hi,
You can create a new role (say role_a_1) grouping the two roles:
<objectnode classname="org.apache.slide.structure.SubjectNode"
uri="/roles/role_a_1">
<revision>
<property name="group-member-set">
<![CDATA[
<D:href xmlns:D='DAV:'>/roles/role_A</D:href>
<D:href xmlns:D='DAV:'>/roles/role1</D:href>
]]>
</property>
</revision>
</objectnode>
Then give access to /files/folderA/folder1 at /roles/role_a_1.
<objectnode classname="org.apache.slide.structure.SubjectNode"
uri="/files/folderA/folder1">
<permission action="all" subject="/roles/role_a_1"/>
</objectnode>
I think it can work but I've never tried to do so with roles; I've done it
with groups and it worked... I think it could not be so different.
Bye.
_____________________
Andrea Colleoni
> -----Original Message-----
> From: irene [mailto:irenita_p@yahoo.es]
> Sent: Wednesday, March 07, 2007 9:35 AM
> To: slide-user@jakarta.apache.org
> Subject: RE: Newbie: Please help!!: acl permissions: check two roles
>
>
> Hi Andrea.
> Doing that, a user who has role_A but doesn't have role1, has
> access to
> /files/folderA/folder1
>
> I'd wanted that slide check the two roles. And only a user
> having roleA and
> role1 can access.
>
> Is this possible?
>
> Thanks!!
>
>
> Andrea Colleoni wrote:
> >
> > Hi Irene,
> > You can use the inheritable property to propagate
> permission of parent
> > folder to his children.
> > In your Domain.xml, in the data section, you can write
> something like
> > this:
> >
> > <objectnode classname="org.apache.slide.structure.SubjectNode"
> > uri="/files/folderB">
> > <permission action="all" subject="/roles/roleB"
> inheritable="true"
> > negative="false"/>
> > </objectnode>
> >
> > HTH
> >
> > Bye.
> >
> > _____________________
> > Andrea Colleoni
> >
> >> -----Original Message-----
> >> From: irene [mailto:irenita_p@yahoo.es]
> >> Sent: Tuesday, March 06, 2007 5:57 PM
> >> To: slide-user@jakarta.apache.org
> >> Subject: Newbie: Please help!!: acl permissions: check two roles
> >>
> >>
> >> Hello, I have the next folders:
> >>
> >> /folderA/ granted permission to role_A
> >> /subfolder1/ granted permission to role_1
> >> /subfolder2/ granted permission to role_2 /folderB/ granted
> >> permission to role_B
> >> /subfolder1/ granted permission to role_1
> >> /subfolder2/ granted permission to role_2
> >>
> >> And a user A with the roles role_A and role_1
> >>
> >> Slide doesn't allow A to access /folderB, but allows
> >> /folderB/subfolder1.
> >>
> >> I want that only users who have role_B AND role_1 can access to
> >> /folderB/subfolder1
> >>
> >> How can I do this???
> >>
> >>
> >> --
> >> View this message in context:
> >> http://www.nabble.com/Newbie%3A-Please-help%21%21%3A-acl-permi
> >> ssions%3A-check-two-roles-tf3356641.html#a9335664
> >> Sent from the Jakarta Slide - User mailing list archive at
> Nabble.com.
> >>
> >>
> >>
> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
> >> For additional commands, e-mail: slide-user-help@jakarta.apache.org
> >>
> >>
> >
> >
> >
> ---------------------------------------------------------------------
> > To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
> > For additional commands, e-mail: slide-user-help@jakarta.apache.org
> >
> >
> >
>
> --
> View this message in context:
> http://www.nabble.com/Newbie%3A-Please-help%21%21%3A-acl-permi
> ssions%3A-check-two-roles-tf3356641.html#a9348582
> Sent from the Jakarta Slide - User mailing list archive at Nabble.com.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: slide-user-help@jakarta.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
RE: Newbie: Please help!!: acl permissions: check two roles
Posted by irene <ir...@yahoo.es>.
Hi Andrea.
Doing that, a user who has role_A but doesn't have role1, has access to
/files/folderA/folder1
I'd wanted that slide check the two roles. And only a user having roleA and
role1 can access.
Is this possible?
Thanks!!
Andrea Colleoni wrote:
>
> Hi Irene,
> You can use the inheritable property to propagate permission of parent
> folder to his children.
> In your Domain.xml, in the data section, you can write something like
> this:
>
> <objectnode classname="org.apache.slide.structure.SubjectNode"
> uri="/files/folderB">
> <permission action="all" subject="/roles/roleB" inheritable="true"
> negative="false"/>
> </objectnode>
>
> HTH
>
> Bye.
>
> _____________________
> Andrea Colleoni
>
>> -----Original Message-----
>> From: irene [mailto:irenita_p@yahoo.es]
>> Sent: Tuesday, March 06, 2007 5:57 PM
>> To: slide-user@jakarta.apache.org
>> Subject: Newbie: Please help!!: acl permissions: check two roles
>>
>>
>> Hello, I have the next folders:
>>
>> /folderA/ granted permission to role_A
>> /subfolder1/ granted permission to role_1
>> /subfolder2/ granted permission to role_2 /folderB/
>> granted permission to role_B
>> /subfolder1/ granted permission to role_1
>> /subfolder2/ granted permission to role_2
>>
>> And a user A with the roles role_A and role_1
>>
>> Slide doesn't allow A to access /folderB, but allows
>> /folderB/subfolder1.
>>
>> I want that only users who have role_B AND role_1 can access to
>> /folderB/subfolder1
>>
>> How can I do this???
>>
>>
>> --
>> View this message in context:
>> http://www.nabble.com/Newbie%3A-Please-help%21%21%3A-acl-permi
>> ssions%3A-check-two-roles-tf3356641.html#a9335664
>> Sent from the Jakarta Slide - User mailing list archive at Nabble.com.
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
>> For additional commands, e-mail: slide-user-help@jakarta.apache.org
>>
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: slide-user-help@jakarta.apache.org
>
>
>
--
View this message in context: http://www.nabble.com/Newbie%3A-Please-help%21%21%3A-acl-permissions%3A-check-two-roles-tf3356641.html#a9348582
Sent from the Jakarta Slide - User mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org
RE: Newbie: Please help!!: acl permissions: check two roles
Posted by Andrea Colleoni <an...@planecom.it>.
Hi Irene,
You can use the inheritable property to propagate permission of parent
folder to his children.
In your Domain.xml, in the data section, you can write something like this:
<objectnode classname="org.apache.slide.structure.SubjectNode"
uri="/files/folderB">
<permission action="all" subject="/roles/roleB" inheritable="true"
negative="false"/>
</objectnode>
HTH
Bye.
_____________________
Andrea Colleoni
> -----Original Message-----
> From: irene [mailto:irenita_p@yahoo.es]
> Sent: Tuesday, March 06, 2007 5:57 PM
> To: slide-user@jakarta.apache.org
> Subject: Newbie: Please help!!: acl permissions: check two roles
>
>
> Hello, I have the next folders:
>
> /folderA/ granted permission to role_A
> /subfolder1/ granted permission to role_1
> /subfolder2/ granted permission to role_2 /folderB/
> granted permission to role_B
> /subfolder1/ granted permission to role_1
> /subfolder2/ granted permission to role_2
>
> And a user A with the roles role_A and role_1
>
> Slide doesn't allow A to access /folderB, but allows
> /folderB/subfolder1.
>
> I want that only users who have role_B AND role_1 can access to
> /folderB/subfolder1
>
> How can I do this???
>
>
> --
> View this message in context:
> http://www.nabble.com/Newbie%3A-Please-help%21%21%3A-acl-permi
> ssions%3A-check-two-roles-tf3356641.html#a9335664
> Sent from the Jakarta Slide - User mailing list archive at Nabble.com.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: slide-user-help@jakarta.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org