Hi,

I'm willing to use the solution, to store the files on the server
(temporarily, until the user logs out) if nothing else works.

I cannot understand why one can reach his files over http when logged in to
the base2 webclient and not when logged in to my self-created client.

Any proposals?

gr.

Peter

2007/10/8, [EMAIL PROTECTED] <[EMAIL PROTECTED]>:
>
> Hi Peter,
>
> >If i try to download the files (while the session is still active) using
> >the
> >url's i get a http 500 response.
> >I suppose that the part /filemanager/files/view/ is not correct since the
> >fileview.jsp is not loaded, but i don't have a clue how to do it
> correctly.
>
> Internal server error hmm..... don't know why.... however i found out that
> that files can be downloaded with such  urls. For instance requesting:
>
> http://nbx2.nugo.org/nutriBASE/filemanager/files/view/-42d47d6797b7b05c-/home/dominic/raw+data/H_PropylParabenC1T1-r.gpr
> on nbx2 works but of course after a sucessul user log-in.
>
>
> > Peter Mertens wrote:
> >> [...]
> >> A possible solution would be to download the files to a folder in the
> >> webserver's directory and than ... . This is not a very nice solution
> >> for this problem so i hope somebody can help getting the url of the
> >> files on the base server.
> >
> > Hello, Peter.
> >
> > You should not put private files in place accessible to everyone, or you
> > will undermine the security provided by base2. As I understand it, base2
> > obfusticates the mapping of files stored in 'home' directories and the
> > underlying filesystem - On our NBX systems the files are in:
> >
> >       /usr/local/base2 -> /home/base2
> >
> > This area should not be made accessible via the web server under any
> > curcumstances. However, one possibility might be to provide an SFTP
> > end-point as part of your web service so that a client can download the
> > files using proper authentication and encryption of the data in transit.
> >
>
> I reckon Peter wants to store the files on the websever directory and
> delete them afterwards? And not store the files in the base2 user file
> directory which should not be exposed, corrobarating Tony.
> May be any other directory except tomcat's webserver may suffice in the
> temp, but of course you need to deal with permission issues.
> By the way, none of the approach is ideal. Base 2.5 should hopefully
> address this problem.
>
> ¬Dominic
>
>
>
>
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >> http://get.splunk.com/
> _______________________________________________
> basedb-devel mailing list
> basedb-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/basedb-devel
>
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
basedb-devel mailing list
basedb-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/basedb-devel

Reply via email to