--------------------------------------------------------------------------------
----- Original Message ----- From: "Frank W. Kooistra" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Wednesday, October 04, 2006 2:37 PM Subject: [authors] oooauthors site; permissions 2nd edition >I am new to the group > > Before i start the essentials of this community : write/translate the manuals > of openoffice.org, i wanted to make sure i understand and can use the tools. > They are essential for a community effort to succeed. > > Our main tool, apart from the OpenOffice itself is the website. If properly > setup, it will enhance our production, avoid double work, and allows us to > create a coherent product. > > Let me set the Parameters > I am user Frankwk > I a Dutch (From the Netherlands) > So mu userspace, homespace should be > http://oooauthors.org/nl/ > > In the beginning it is difficult to realize what should see and what not.. > > Going to the Dutch environment (Select the directory Nederlands which is > http://oooauthors.org/nl/) I noticed that It was mainly the English site, > the English environment, and it only had the English tools. Documents under > review were the English ones etc. > Confusing and to a point irritating: What do i do with a English Style guide > in the Dutch language. > When i missed the styleguide it was sent by private mail (Thanks Leo) > > . > Also i could not access my personal folder: see how i am presented myself (?) > My preferences and Undo are available. > But i could not do anything. So Nothing to undo. > > I was curious what tools the other language groups have ( I can read most > languages available on the site) > > For all languages the view was the same: Foreign language directories > belonging to the English language group. Least that i could see logged in as > me. > > Except the German directory. > Here i saw what i expected : even more than i expected > I have the role as owner and reviewer there > > But still i cannot see how i am presented to the group, and cannot use my > local directory. Since i cannot do anything at the Dutch Directory. i wanted > to add things i missed in my home, and make it available to the group from > there. > =-=- > > This morning i saw that all problems were solved : > because i was in the German directory, but now as a normal user : > and could access my private folders preferences etc. > I created a directory, uploaded the styleguide for Dutch. > > Doing this i could see where all happend: and yes i am a member of the German > group. But now all worked fine: if i had been a German reviewer. > Am I ?? > > No. > I saw that i was not in http://oooauthors.org/de/ > but in http://oooauthors.org/de_/ > > > It looked like that i made a mistake: Checking the undo ( which is a list > what one has done) i could see that an undescribed action at 3 o'clock in the > morning had created an index.html in the directory /oocommunity which appears > as a directory Deutsch in the root of oooauthors, the second Deutsch > directory.. > with url: http://oooauthors.org/de_ > > (hint to solve this: Permissions in /oocommunity should be set to r-x ( read > and search ) for the group: now it is at rwx for owner and group, owner > should be root) > > Probably i hit a few times the returns too many. > Because i have ( had?) to press a few returns before a new page is loaded > (address not found - DNS problem) > > But this a a big security issue : > For sure i cannot create a private directory, while i am a member > But i can create a whole new branch : with totally new permissions > and than create my own entries in this branch also in the member directory.. > > Looking back > I think there was a mistake made by adding me to the site: > > I think my language Dutch, was confused with Deutsch. The name of my language > is Nederlands in Dutch, so i have to become a member of the group Nederlands. > > My investigation revealed a security issue: nobody should be able to open a > new brach like that. (see my hint above) > > I apologize: was not intended. I will remove it, when problems are solved : > or > remove anything in http://oooauthors.org/de_/ > > I saw there were rather a lot of unlogical links > Like a chines directory in the German "work in progress" folder. Is everybody > a member of the German group ? and so the Chinese member tried to create his > own environement? Ne hoa mah) > I think those directories should be scrutinized for security reasons.. > > If necessary i am ready to do a new test after the security issues are > cleared. > > > I noticed an mail in the group where permissions have been altered because > some members of the group created spam. > Maybe a better membership ballotage would cure that trick: and since the > owners of the offending files are know: just "dismember" them ? > Looks like now we have an crippled site because of this. > > > -- > Met vriendelijke groet, > > Frank > > _________________ > Frank W. Kooistra > Spoorsingel 89 > 2613 BB Delft > t:06 45 77 00 17
