ACL questions

View: New views
4 Messages — Rating Filter:   Alert me  

ACL questions

by Harald Krammer-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello,
I am again. I played around with the permission concept e.g. [{ALLOW
edit harald}] and following questions are unclear for me.

*) When I set page permissions, attachments are not
considered. e.g.  I made a side with permissions
[{ALLOW edit  hk}] and [{ALLOW view  Familie}] on side
https://xen.hkr.at/wiki/Wiki.jsp?page=secret
Permissions are fine, but a direct link to attachments on side secrete
works without any restrictions.
e.g.: https://xen.hkr.at/wiki/attach/Secret/non-public.txt

Is that a limitation, a known issue, a bug or a wrong user usage?

*) Exits an overview plug-in about permissions of all sides?
Currently I do it around with a shell script. I know it's the wrong way,
but easy for me to check permissions problems.

*) Usage of if-plugin

Currently I use the ifplugin, because it's easy to use. Exits a way to
disable 'view page source' for e.g. non authenticated users?


Nice greetings,
Harald


- --

Harald Krammer
Brucknerstrasse 33
A - 4020  Linz
AUSTRIA

Mobil +43.(0) 664. 130 59 58
Mail: Harald.Krammer (at) hkr.at
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEAREIAAYFAkrl60oACgkQ9QlAsubHO9tZdACg4iRRAaXN82thHPc5tClLah4b
QIAAni+/qATdb9f66KpAaIZ7Wkh079EQ
=J6Cn
-----END PGP SIGNATURE-----

Re: ACL questions

by Harry Metske :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Harald,

are you sure this is not a browser caching issue, this problem has been
reported before : https://issues.apache.org/jira/browse/JSPWIKI-361

Also, can you reproduce the problem on http://sandbox.jspwiki.org ?

regards,
Harry

2009/10/26 Harald Krammer <Harald.Krammer@...>

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Hello,
> I am again. I played around with the permission concept e.g. [{ALLOW
> edit harald}] and following questions are unclear for me.
>
> *) When I set page permissions, attachments are not
> considered. e.g.  I made a side with permissions
> [{ALLOW edit  hk}] and [{ALLOW view  Familie}] on side
> https://xen.hkr.at/wiki/Wiki.jsp?page=secret
> Permissions are fine, but a direct link to attachments on side secrete
> works without any restrictions.
> e.g.: https://xen.hkr.at/wiki/attach/Secret/non-public.txt
>
> Is that a limitation, a known issue, a bug or a wrong user usage?
>
> *) Exits an overview plug-in about permissions of all sides?
> Currently I do it around with a shell script. I know it's the wrong way,
> but easy for me to check permissions problems.
>
> *) Usage of if-plugin
>
> Currently I use the ifplugin, because it's easy to use. Exits a way to
> disable 'view page source' for e.g. non authenticated users?
>
>
> Nice greetings,
> Harald
>
>
> - --
>
> Harald Krammer
> Brucknerstrasse 33
> A - 4020  Linz
> AUSTRIA
>
> Mobil +43.(0) 664. 130 59 58
> Mail: Harald.Krammer (at) hkr.at
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
>
> iEYEAREIAAYFAkrl60oACgkQ9QlAsubHO9tZdACg4iRRAaXN82thHPc5tClLah4b
> QIAAni+/qATdb9f66KpAaIZ7Wkh079EQ
> =J6Cn
> -----END PGP SIGNATURE-----
>

Re: ACL questions

by Harald Krammer-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Harry,
you are right. It's a browser issue.

When I clear the cache by hand in my browser then it works as expected.
Strange...  The refresh button did not work....

Here a few parts in the http-header:
If-Modified-Since: Mon, 26 Oct 2009 17:40:29 GMT
Cache-Control:max-age=0

If I can trust firebug then every refresh increases the cache expires
time!? ( I use firefox 3.0)

Nice greetings,
Harald

Harry Metske schrieb:

> Harald,
>
> are you sure this is not a browser caching issue, this problem has been
> reported before : https://issues.apache.org/jira/browse/JSPWIKI-361
>
> Also, can you reproduce the problem on http://sandbox.jspwiki.org ?
>
> regards,
> Harry
>
> 2009/10/26 Harald Krammer <Harald.Krammer@...>
>
> Hello,
> I am again. I played around with the permission concept e.g. [{ALLOW
> edit harald}] and following questions are unclear for me.
>
> *) When I set page permissions, attachments are not
> considered. e.g.  I made a side with permissions
> [{ALLOW edit  hk}] and [{ALLOW view  Familie}] on side
> https://xen.hkr.at/wiki/Wiki.jsp?page=secret
> Permissions are fine, but a direct link to attachments on side secrete
> works without any restrictions.
> e.g.: https://xen.hkr.at/wiki/attach/Secret/non-public.txt
>
> Is that a limitation, a known issue, a bug or a wrong user usage?
>
> *) Exits an overview plug-in about permissions of all sides?
> Currently I do it around with a shell script. I know it's the wrong way,
> but easy for me to check permissions problems.
>
> *) Usage of if-plugin
>
> Currently I use the ifplugin, because it's easy to use. Exits a way to
> disable 'view page source' for e.g. non authenticated users?
>
>
> Nice greetings,
> Harald
>
>
>>

- --

Harald Krammer
Brucknerstrasse 33
A - 4020  Linz
AUSTRIA

Mobil +43.(0) 664. 130 59 58
Mail: Harald.Krammer (at) hkr.at
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEAREIAAYFAkrl9icACgkQ9QlAsubHO9td+ACfWrhnEvxa7YAqdRZrjZYteaKD
xOwAn1QANqIE3dy07a0f8/jpbCNgIDg1
=EY8Z
-----END PGP SIGNATURE-----

RE: ACL questions

by Maduranga Kannangara-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Workaround I would use for this (Dirty way, of course..):
[{ALLOW upload Familie}]


-----Original Message-----
From: Harry Metske [mailto:harry.metske@...]
Sent: Tuesday, 27 October 2009 5:42 AM
To: jspwiki-user@...
Subject: Re: ACL questions

Harald,

are you sure this is not a browser caching issue, this problem has been
reported before : https://issues.apache.org/jira/browse/JSPWIKI-361

Also, can you reproduce the problem on http://sandbox.jspwiki.org ?

regards,
Harry

2009/10/26 Harald Krammer <Harald.Krammer@...>

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Hello,
> I am again. I played around with the permission concept e.g. [{ALLOW
> edit harald}] and following questions are unclear for me.
>
> *) When I set page permissions, attachments are not
> considered. e.g.  I made a side with permissions
> [{ALLOW edit  hk}] and [{ALLOW view  Familie}] on side
> https://xen.hkr.at/wiki/Wiki.jsp?page=secret
> Permissions are fine, but a direct link to attachments on side secrete
> works without any restrictions.
> e.g.: https://xen.hkr.at/wiki/attach/Secret/non-public.txt
>
> Is that a limitation, a known issue, a bug or a wrong user usage?
>
> *) Exits an overview plug-in about permissions of all sides?
> Currently I do it around with a shell script. I know it's the wrong way,
> but easy for me to check permissions problems.
>
> *) Usage of if-plugin
>
> Currently I use the ifplugin, because it's easy to use. Exits a way to
> disable 'view page source' for e.g. non authenticated users?
>
>
> Nice greetings,
> Harald
>
>
> - --
>
> Harald Krammer
> Brucknerstrasse 33
> A - 4020  Linz
> AUSTRIA
>
> Mobil +43.(0) 664. 130 59 58
> Mail: Harald.Krammer (at) hkr.at
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
>
> iEYEAREIAAYFAkrl60oACgkQ9QlAsubHO9tZdACg4iRRAaXN82thHPc5tClLah4b
> QIAAni+/qATdb9f66KpAaIZ7Wkh079EQ
> =J6Cn
> -----END PGP SIGNATURE-----
>