Re: GetYourArmsAroundIt Question???
Two things: 1) Make sure you modified the right class. If you're using a JDBC store for your data and you modify the TxFile store classes you won't see anything ;). 2) Try modifying cacheResults() to return false; Or you can set the cache-mode parameter of ExtendedStore to off. This will make sure your modified Store methods are always being called. -James Ragia wrote: Hello! As it is suggested in the GetYourArmsAroundIt article from the Wiki, I added System.out.println() statements in each method. And then tried to add/delete items from my slide WebFolder, unfortunately I found nothing on the console?? I feel something is missing :( Does anybody have any idea??? -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 03, 2004 5:49 PM To: Slide Users Mailing List Subject: Re: Need Help ! You can get the 2.1M1 source from http://cvs.apache.org/dist/jakarta/slide/2.1M1/src/ Unfortunately the process of creating Stores is rather poorly documented. There's some info on the Wiki that will help you get started, but you're going to need to look at the source code for the existing Store implementations to really understand anything. The good news is once you get over the initial hump it's not too bad. Also, there are a couple Store implementations that aren't part of the 2.1M1 download (they came later) that you can look at online with viewcvs. Lastly, somewhere on this list awhile ago someone posted a method of getting CVS access through an http proxy (or something like that). If you can find that post it may help you get the latest source. Good luck, James Ragia wrote: Hello James, Regarding what u advised me, I intend to use your first approach, and I will work on using Slide extendable Store. But am now in a miss of how to begin? Is there any samples or any know hows regarding that stuff ?? Also from where I can get version 2.1 material it is not accessible from the site, while I cannot access CV's from here due to proxy settings.. Thanx in advance Ragia Ok, let me see if I understand you correctly here. You're trying to integrate your CMS and Slide by modifying your CMS to use Slide as its repository. Using the webdav client library you've done this, but you want to be able to use other webdav clients (WebFolders), and since those will access Slide directly you need a way make Slide aware of the business rules in your CMS that govern access to content. Correct me if I got any of that wrong. I see two ways to accomplish this: 1) The way Slide is usually integrated with other CMSs is an inverse of the approach you've taken. Slide has an extendable Store architecture which would allow it to use *your* CMS to store data, rather than your CMS using Slide to store data. You would then use this Store interface to tell Slide how your access model works and Slide would take care of access checking for all requests. At the moment writing a Store implementation is not trivial, due mostly to a lack of documentation and a steep learning curve. We're working on that, though ;). If you want to take this approach, it will probably give you the best result. 2) There's an event framework in the upcoming Slide release (2.1) that you may be able to take advantage of here. What you would need to is create Event Listeners for the different access requests. These event listeners would then communicate with your CMS and check that the user making the request has the appropriate rights. If access is denied to the user the listeners would throw a Veto exception and Slide would cancel the request. -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Monday, August 02, 2004 9:18 AM To: Slide Users Mailing List Subject: Re: Need Help ! We're working on the documentation, but it's slow going :). The the first beta release of 2.1 is scheduled for the 10th. We're aiming for the end of the year sometime for the final release (I can't remember exactly when). I'd actually recommend going with 2.1 over 2.0. There are a few bugs with 2.0 that can make it annoying to work with. The documentation on the event system is actually pretty good. Take a look at the javadoc for the org.apache.slide.event package. It goes into good detail how to create events and listeners. -James Ragia wrote: Yes, you got me completely right. You are great !! :) I really appreciate your response. A point that I want to clear is that: I need a user using my CMS client to have his document stored in both my own CMS repository and also Slide-WebDAV repository (if it is up and running) . So that he can add/view documents through my CMS client and also take the WebDAV facilities (if Slide is up and running) to add documents to my CMS through web folders. That's is why I thought of using webdav client library instead of the inverse approach cos I need the document added by my CMS client to be added to the webdav as well and vise versa (detect events on web
RE: GetYourArmsAroundIt Question???
Thanx James for ur response, Well, all wt I have done is only adding System.out.println() statements in each method in both org.apache.slide.store.txfile.TxFileContentStore and org.apache.slide.store.txfile.TxXMLFileDescriptorsStore Nothing else! What is the ExtendedStore parameter and where should I modify it??? And Sorry for being yet too new to slide!! Regards, Ragia -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 8:00 AM To: Slide Users Mailing List Subject: Re: GetYourArmsAroundIt Question??? Two things: 1) Make sure you modified the right class. If you're using a JDBC store for your data and you modify the TxFile store classes you won't see anything ;). 2) Try modifying cacheResults() to return false; Or you can set the cache-mode parameter of ExtendedStore to off. This will make sure your modified Store methods are always being called. -James Ragia wrote: Hello! As it is suggested in the GetYourArmsAroundIt article from the Wiki, I added System.out.println() statements in each method. And then tried to add/delete items from my slide WebFolder, unfortunately I found nothing on the console?? I feel something is missing :( Does anybody have any idea??? -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 03, 2004 5:49 PM To: Slide Users Mailing List Subject: Re: Need Help ! You can get the 2.1M1 source from http://cvs.apache.org/dist/jakarta/slide/2.1M1/src/ Unfortunately the process of creating Stores is rather poorly documented. There's some info on the Wiki that will help you get started, but you're going to need to look at the source code for the existing Store implementations to really understand anything. The good news is once you get over the initial hump it's not too bad. Also, there are a couple Store implementations that aren't part of the 2.1M1 download (they came later) that you can look at online with viewcvs. Lastly, somewhere on this list awhile ago someone posted a method of getting CVS access through an http proxy (or something like that). If you can find that post it may help you get the latest source. Good luck, James Ragia wrote: Hello James, Regarding what u advised me, I intend to use your first approach, and I will work on using Slide extendable Store. But am now in a miss of how to begin? Is there any samples or any know hows regarding that stuff ?? Also from where I can get version 2.1 material it is not accessible from the site, while I cannot access CV's from here due to proxy settings.. Thanx in advance Ragia Ok, let me see if I understand you correctly here. You're trying to integrate your CMS and Slide by modifying your CMS to use Slide as its repository. Using the webdav client library you've done this, but you want to be able to use other webdav clients (WebFolders), and since those will access Slide directly you need a way make Slide aware of the business rules in your CMS that govern access to content. Correct me if I got any of that wrong. I see two ways to accomplish this: 1) The way Slide is usually integrated with other CMSs is an inverse of the approach you've taken. Slide has an extendable Store architecture which would allow it to use *your* CMS to store data, rather than your CMS using Slide to store data. You would then use this Store interface to tell Slide how your access model works and Slide would take care of access checking for all requests. At the moment writing a Store implementation is not trivial, due mostly to a lack of documentation and a steep learning curve. We're working on that, though ;). If you want to take this approach, it will probably give you the best result. 2) There's an event framework in the upcoming Slide release (2.1) that you may be able to take advantage of here. What you would need to is create Event Listeners for the different access requests. These event listeners would then communicate with your CMS and check that the user making the request has the appropriate rights. If access is denied to the user the listeners would throw a Veto exception and Slide would cancel the request. -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Monday, August 02, 2004 9:18 AM To: Slide Users Mailing List Subject: Re: Need Help ! We're working on the documentation, but it's slow going :). The the first beta release of 2.1 is scheduled for the 10th. We're aiming for the end of the year sometime for the final release (I can't remember exactly when). I'd actually recommend going with 2.1 over 2.0. There are a few bugs with 2.0 that can make it annoying to work with. The documentation on the event system is actually pretty good. Take a look at the javadoc for the org.apache.slide.event package. It goes into good detail how to create events and listeners. -James Ragia wrote: Yes, you got me
Re: GetYourArmsAroundIt Question???
Ragia wrote: Thanx James for ur response, Well, all wt I have done is only adding System.out.println() statements in each method in both org.apache.slide.store.txfile.TxFileContentStore and org.apache.slide.store.txfile.TxXMLFileDescriptorsStore Nothing else! How are you building Slide? If you're just replacing jar files make sure you don't have duplicates of the kernel jar. I've run into that problem before. What is the ExtendedStore parameter and where should I modify it??? Add parameter name=cache-modeoff/parameter after the store tag. The XPath for the new parameter should be slide/namespace/definition/store/parameter. -James And Sorry for being yet too new to slide!! Regards, Ragia -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 8:00 AM To: Slide Users Mailing List Subject: Re: GetYourArmsAroundIt Question??? Two things: 1) Make sure you modified the right class. If you're using a JDBC store for your data and you modify the TxFile store classes you won't see anything ;). 2) Try modifying cacheResults() to return false; Or you can set the cache-mode parameter of ExtendedStore to off. This will make sure your modified Store methods are always being called. -James Ragia wrote: Hello! As it is suggested in the GetYourArmsAroundIt article from the Wiki, I added System.out.println() statements in each method. And then tried to add/delete items from my slide WebFolder, unfortunately I found nothing on the console?? I feel something is missing :( Does anybody have any idea??? -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 03, 2004 5:49 PM To: Slide Users Mailing List Subject: Re: Need Help ! You can get the 2.1M1 source from http://cvs.apache.org/dist/jakarta/slide/2.1M1/src/ Unfortunately the process of creating Stores is rather poorly documented. There's some info on the Wiki that will help you get started, but you're going to need to look at the source code for the existing Store implementations to really understand anything. The good news is once you get over the initial hump it's not too bad. Also, there are a couple Store implementations that aren't part of the 2.1M1 download (they came later) that you can look at online with viewcvs. Lastly, somewhere on this list awhile ago someone posted a method of getting CVS access through an http proxy (or something like that). If you can find that post it may help you get the latest source. Good luck, James Ragia wrote: Hello James, Regarding what u advised me, I intend to use your first approach, and I will work on using Slide extendable Store. But am now in a miss of how to begin? Is there any samples or any know hows regarding that stuff ?? Also from where I can get version 2.1 material it is not accessible from the site, while I cannot access CV's from here due to proxy settings.. Thanx in advance Ragia Ok, let me see if I understand you correctly here. You're trying to integrate your CMS and Slide by modifying your CMS to use Slide as its repository. Using the webdav client library you've done this, but you want to be able to use other webdav clients (WebFolders), and since those will access Slide directly you need a way make Slide aware of the business rules in your CMS that govern access to content. Correct me if I got any of that wrong. I see two ways to accomplish this: 1) The way Slide is usually integrated with other CMSs is an inverse of the approach you've taken. Slide has an extendable Store architecture which would allow it to use *your* CMS to store data, rather than your CMS using Slide to store data. You would then use this Store interface to tell Slide how your access model works and Slide would take care of access checking for all requests. At the moment writing a Store implementation is not trivial, due mostly to a lack of documentation and a steep learning curve. We're working on that, though ;). If you want to take this approach, it will probably give you the best result. 2) There's an event framework in the upcoming Slide release (2.1) that you may be able to take advantage of here. What you would need to is create Event Listeners for the different access requests. These event listeners would then communicate with your CMS and check that the user making the request has the appropriate rights. If access is denied to the user the listeners would throw a Veto exception and Slide would cancel the request. -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Monday, August 02, 2004 9:18 AM To: Slide Users Mailing List Subject: Re: Need Help ! We're working on the documentation, but it's slow going :). The the first beta release of 2.1 is scheduled for the 10th. We're aiming for the end of the year sometime for the final release (I can't remember exactly when). I'd actually recommend going with 2.1 over 2.0. There are a few bugs with 2.0 that can make it
Cache refresh notification in two different instance of Slide running on different boxes.
Hello James, thnx for your valuable information abt Slide Clustering and Cache refresh notifications among the cluster nodes couple of days back. Now I have another question. Two instance of Slide running on two different Unix boxes and I'm not planing to use Cluster, In this senario how do we notify the cache information between different server instances. Cluster Configuration is a must for cache refresh notification ? rgds Daniel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: GetYourArmsAroundIt Question???
Hello again! Nothing worked :( And classes are not seen from any other place, guess the classes/functions are not even called !!! May be it is not clear for me how to test and get my messages displayed. All what I have done is editting the classes org.apache.slide.store.txfile.TxFileContentStore and org.apache.slide.store.txfile.TxXMLFileDescriptorsStore by adding the System.out.println() statements in each method and then tried to add/delete files from my Slide WebFolder I added parameter name=cache-modeoff/parameter after the store tag. As u advised but in vain!! Please tell me what steps should be taken?? how could I trace what functions are called?? And also how could I test this.. Is this by adding/deleting items from a webfolder or what?? Thanx Again Ragia -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 8:54 AM To: Slide Users Mailing List Subject: Re: GetYourArmsAroundIt Question??? Ragia wrote: Thanx James for ur response, Well, all wt I have done is only adding System.out.println() statements in each method in both org.apache.slide.store.txfile.TxFileContentStore and org.apache.slide.store.txfile.TxXMLFileDescriptorsStore Nothing else! How are you building Slide? If you're just replacing jar files make sure you don't have duplicates of the kernel jar. I've run into that problem before. What is the ExtendedStore parameter and where should I modify it??? Add parameter name=cache-modeoff/parameter after the store tag. The XPath for the new parameter should be slide/namespace/definition/store/parameter. -James And Sorry for being yet too new to slide!! Regards, Ragia -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 8:00 AM To: Slide Users Mailing List Subject: Re: GetYourArmsAroundIt Question??? Two things: 1) Make sure you modified the right class. If you're using a JDBC store for your data and you modify the TxFile store classes you won't see anything ;). 2) Try modifying cacheResults() to return false; Or you can set the cache-mode parameter of ExtendedStore to off. This will make sure your modified Store methods are always being called. -James Ragia wrote: Hello! As it is suggested in the GetYourArmsAroundIt article from the Wiki, I added System.out.println() statements in each method. And then tried to add/delete items from my slide WebFolder, unfortunately I found nothing on the console?? I feel something is missing :( Does anybody have any idea??? -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 03, 2004 5:49 PM To: Slide Users Mailing List Subject: Re: Need Help ! You can get the 2.1M1 source from http://cvs.apache.org/dist/jakarta/slide/2.1M1/src/ Unfortunately the process of creating Stores is rather poorly documented. There's some info on the Wiki that will help you get started, but you're going to need to look at the source code for the existing Store implementations to really understand anything. The good news is once you get over the initial hump it's not too bad. Also, there are a couple Store implementations that aren't part of the 2.1M1 download (they came later) that you can look at online with viewcvs. Lastly, somewhere on this list awhile ago someone posted a method of getting CVS access through an http proxy (or something like that). If you can find that post it may help you get the latest source. Good luck, James Ragia wrote: Hello James, Regarding what u advised me, I intend to use your first approach, and I will work on using Slide extendable Store. But am now in a miss of how to begin? Is there any samples or any know hows regarding that stuff ?? Also from where I can get version 2.1 material it is not accessible from the site, while I cannot access CV's from here due to proxy settings.. Thanx in advance Ragia Ok, let me see if I understand you correctly here. You're trying to integrate your CMS and Slide by modifying your CMS to use Slide as its repository. Using the webdav client library you've done this, but you want to be able to use other webdav clients (WebFolders), and since those will access Slide directly you need a way make Slide aware of the business rules in your CMS that govern access to content. Correct me if I got any of that wrong. I see two ways to accomplish this: 1) The way Slide is usually integrated with other CMSs is an inverse of the approach you've taken. Slide has an extendable Store architecture which would allow it to use *your* CMS to store data, rather than your CMS using Slide to store data. You would then use this Store interface to tell Slide how your access model works and Slide would take care of access checking for all requests. At the moment writing a Store implementation is not trivial, due mostly to a lack of documentation and a steep learning curve. We're
User Authorization based on permissions set to role in Slide2.1
Hi Folks, I am re-posting this mail since I haven't got any replies yet. I am hoping there is some developer there who might have tried to play around with permissions in Slide2.1M1. My problem is that when I assign some permissions to a role, those permissions are not propogated to the users in that role. If not for permissions what else is the purpose of having roles at all? I am sure it is not just for logical grouping of users. Any help is appreciated .. thanks in advance regards, Krishna -Original Message- From: Krishna Kankipati Sent: Tuesday, August 03, 2004 5:47 PM To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject: User Authorization based on permissions set to role in Slide2.1 Michael, I was searching the mail archive for some help on permissions and came upon this discussion you were having with some developer which seemed relevant to my question: http://www.mail-archive.com/[EMAIL PROTECTED]/msg05056.html Does slide permissions propogate based on role memberships. I mean, if I create a role called role1, and add a user called user1 to it, will user1 get all the permissions that are assigned to role1. I've seen in my tests that although I gave enough write permissions to role1, Slide does not allow user1 to write unless I add the write permission to user1 itself. Am I missing something or is it a bug. What is your opinion on this? I am using Slide 2.1M1 and command line client to grant permissions to /Slide/files collection. thanks regards, Krishna Krishna Kankipati Software Engineer SSA Global * 1626 Cole Blvd. Golden, CO 80401, USA * 303-274-3027 Fax:303-274-3137 * [EMAIL PROTECTED]
Re: Cache refresh notification in two different instance of Slide running on different boxes.
Daniel Varghese wrote: Hello James, thnx for your valuable information abt Slide Clustering and Cache refresh notifications among the cluster nodes couple of days back. You're welcome. Now I have another question. Two instance of Slide running on two different Unix boxes and I'm not planing to use Cluster, In this senario how do we notify the cache information between different server instances. You don't yet. Hopefully I'll be able to submit the code that does this tonight. I upgraded my desktop yesterday evening and there's a bug in the mysql update I got, so I haven't been able to test it yet. -James Cluster Configuration is a must for cache refresh notification ? rgds Daniel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: GetYourArmsAroundIt Question???
I extended those classes and reconfigured Domain.xml to use my extensions. If you added println statements and they are not showing in the logs, then probably your class files are out of sequence in the classpath and the default classes in the jar files are being called. If you extend and rename them there won't be a conflict. Michael Oliver CTO Alarius Systems LLC 3325 N. Nellis Blvd, #1 Las Vegas, NV 89115 Phone:(702)643-7425 Fax:(520)844-1036 *Note new email changed from [EMAIL PROTECTED] -Original Message- From: Ragia [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 8:56 AM To: 'Slide Users Mailing List' Subject: RE: GetYourArmsAroundIt Question??? Hello again! Nothing worked :( And classes are not seen from any other place, guess the classes/functions are not even called !!! May be it is not clear for me how to test and get my messages displayed. All what I have done is editting the classes org.apache.slide.store.txfile.TxFileContentStore and org.apache.slide.store.txfile.TxXMLFileDescriptorsStore by adding the System.out.println() statements in each method and then tried to add/delete files from my Slide WebFolder I added parameter name=cache-modeoff/parameter after the store tag. As u advised but in vain!! Please tell me what steps should be taken?? how could I trace what functions are called?? And also how could I test this.. Is this by adding/deleting items from a webfolder or what?? Thanx Again Ragia -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 8:54 AM To: Slide Users Mailing List Subject: Re: GetYourArmsAroundIt Question??? Ragia wrote: Thanx James for ur response, Well, all wt I have done is only adding System.out.println() statements in each method in both org.apache.slide.store.txfile.TxFileContentStore and org.apache.slide.store.txfile.TxXMLFileDescriptorsStore Nothing else! How are you building Slide? If you're just replacing jar files make sure you don't have duplicates of the kernel jar. I've run into that problem before. What is the ExtendedStore parameter and where should I modify it??? Add parameter name=cache-modeoff/parameter after the store tag. The XPath for the new parameter should be slide/namespace/definition/store/parameter. -James And Sorry for being yet too new to slide!! Regards, Ragia -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 8:00 AM To: Slide Users Mailing List Subject: Re: GetYourArmsAroundIt Question??? Two things: 1) Make sure you modified the right class. If you're using a JDBC store for your data and you modify the TxFile store classes you won't see anything ;). 2) Try modifying cacheResults() to return false; Or you can set the cache-mode parameter of ExtendedStore to off. This will make sure your modified Store methods are always being called. -James Ragia wrote: Hello! As it is suggested in the GetYourArmsAroundIt article from the Wiki, I added System.out.println() statements in each method. And then tried to add/delete items from my slide WebFolder, unfortunately I found nothing on the console?? I feel something is missing :( Does anybody have any idea??? -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 03, 2004 5:49 PM To: Slide Users Mailing List Subject: Re: Need Help ! You can get the 2.1M1 source from http://cvs.apache.org/dist/jakarta/slide/2.1M1/src/ Unfortunately the process of creating Stores is rather poorly documented. There's some info on the Wiki that will help you get started, but you're going to need to look at the source code for the existing Store implementations to really understand anything. The good news is once you get over the initial hump it's not too bad. Also, there are a couple Store implementations that aren't part of the 2.1M1 download (they came later) that you can look at online with viewcvs. Lastly, somewhere on this list awhile ago someone posted a method of getting CVS access through an http proxy (or something like that). If you can find that post it may help you get the latest source. Good luck, James Ragia wrote: Hello James, Regarding what u advised me, I intend to use your first approach, and I will work on using Slide extendable Store. But am now in a miss of how to begin? Is there any samples or any know hows regarding that stuff ?? Also from where I can get version 2.1 material it is not accessible from the site, while I cannot access CV's from here due to proxy settings.. Thanx in advance Ragia Ok, let me see if I understand you correctly here. You're trying to integrate your CMS and Slide by modifying your CMS to use Slide as its repository. Using the webdav client library you've done this, but you want to be able to use other webdav clients (WebFolders), and since those will access Slide directly you need a way make
RE: User Authorization based on permissions set to role in Slide2.1
Hi, Krishna! Everything should work fine in the case you've described. Actually, I'm testing permissions at the moment and it's one of my own test cases. I am using the Security helper directly though, not the client. Haven't you checked the descriptors of the role1 and the file you're granting access to ensure that user1 is really in the group-member-set property of the role and that the permission is set in the file descriptor? Yours sincerely, Andrey. -Original Message- From: Slide Users Mailing List [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 11:50 AM To: '[EMAIL PROTECTED]' Subject: User Authorization based on permissions set to role in Slide2.1 Importance: Low Hi Folks, I am re-posting this mail since I haven't got any replies yet. I am hoping there is some developer there who might have tried to play around with permissions in Slide2.1M1. My problem is that when I assign some permissions to a role, those permissions are not propogated to the users in that role. If not for permissions what else is the purpose of having roles at all? I am sure it is not just for logical grouping of users. Any help is appreciated .. thanks in advance regards, Krishna -Original Message- From: Krishna Kankipati Sent: Tuesday, August 03, 2004 5:47 PM To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject:User Authorization based on permissions set to role in Slide2.1 Michael, I was searching the mail archive for some help on permissions and came upon this discussion you were having with some developer which seemed relevant to my question: http://www.mail-archive.com/[EMAIL PROTECTED]/msg05056.htm l Does slide permissions propogate based on role memberships. I mean, if I create a role called role1, and add a user called user1 to it, will user1 get all the permissions that are assigned to role1. I've seen in my tests that although I gave enough write permissions to role1, Slide does not allow user1 to write unless I add the write permission to user1 itself. Am I missing something or is it a bug. What is your opinion on this? I am using Slide 2.1M1 and command line client to grant permissions to /Slide/files collection. thanks regards, Krishna Krishna Kankipati Software Engineer SSA Global * 1626 Cole Blvd. Golden, CO 80401, USA * 303-274-3027 Fax:303-274-3137 * [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Cache refresh notification in two different instance of Slide running on different boxes.
Daniel, I'm a little confused by this question. Why wouldn't you use Slide clustering but still synchronize the caches of the two servers? Are there features of Slide clusters that you don't want? James, What is the Slide clustering design? I remember a note where you said that load-balancing is not a function of Slide clustering but that cache consistency between servers is. So what other features make up Slide's clustering implementation? And what is the underlying network transport for the cache update notification events that are sent between the servers? Warwick --- Warwick Burrows E2open Senior Engineer 9600 Great Hills Trail, #325 http://www.e2open.comAustin TX 78759 --- -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 10:50 AM To: Slide Users Mailing List Subject: Re: Cache refresh notification in two different instance of Slide running on different boxes. Daniel Varghese wrote: Hello James, thnx for your valuable information abt Slide Clustering and Cache refresh notifications among the cluster nodes couple of days back. You're welcome. Now I have another question. Two instance of Slide running on two different Unix boxes and I'm not planing to use Cluster, In this senario how do we notify the cache information between different server instances. You don't yet. Hopefully I'll be able to submit the code that does this tonight. I upgraded my desktop yesterday evening and there's a bug in the mysql update I got, so I haven't been able to test it yet. -James Cluster Configuration is a must for cache refresh notification ? rgds Daniel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: User Authorization based on permissions set to role in Slide2 .1
Krishna Kankipati wrote: Hi Andrey, Thanks for the response. As we speak I am doing some tests using the Slide Command Line tool (it uses Webdav Client internally). I added a new user (user1) and a new role (role1) using webdav client. I did this using mkcol command on users and roles collection. After that I use Webdav client (proppatchMethod()) to set the property group-member-set of role role1 to include user1 as member of this role. This seemed to work fine. Also, when I use propfindMethod() from webdav client to check the property value of group-member-set, it shows user1 as a member of role1. After that I use command line tool to login as root and assign write permission on a new folder I created under /files to /roles/role1. The command I use is: grant write on /Slide/files/folder1 to /Slide/roles/role1 If I check acl propery for /Slide/files/folder1, I can see that write permission is assigned to role1 for folder1. Now, when I login back as user1, I cannot upload a file to the above folder, I get 403 Forbidden error. A possible reason for 403s might be that you have auto-versioning set but inadequate permissions on the /history folder. You may also want to check the current-user-privilege-set property of folder1 to see if the write permission gets properly propagated from role to user. HTH Guido Can you validate that this works for you (I'll appreciate if you can grant permissions using command line tool and validate that the permission works properly). You can use acl command to find the permissions on any folder/file. thanks, regards, Krishna -Original Message- From: Andrey Shulinsky [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 12:56 PM To: 'Slide Users Mailing List' Subject: RE: User Authorization based on permissions set to role in Slide2.1 Hi, Krishna! Everything should work fine in the case you've described. Actually, I'm testing permissions at the moment and it's one of my own test cases. I am using the Security helper directly though, not the client. Haven't you checked the descriptors of the role1 and the file you're granting access to ensure that user1 is really in the group-member-set property of the role and that the permission is set in the file descriptor? Yours sincerely, Andrey. -Original Message- From: Slide Users Mailing List [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 11:50 AM To: '[EMAIL PROTECTED]' Subject: User Authorization based on permissions set to role in Slide2.1 Importance: Low Hi Folks, I am re-posting this mail since I haven't got any replies yet. I am hoping there is some developer there who might have tried to play around with permissions in Slide2.1M1. My problem is that when I assign some permissions to a role, those permissions are not propogated to the users in that role. If not for permissions what else is the purpose of having roles at all? I am sure it is not just for logical grouping of users. Any help is appreciated .. thanks in advance regards, Krishna -Original Message- From: Krishna Kankipati Sent: Tuesday, August 03, 2004 5:47 PM To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject: User Authorization based on permissions set to role in Slide2.1 Michael, I was searching the mail archive for some help on permissions and came upon this discussion you were having with some developer which seemed relevant to my question: http://www.mail-archive.com/[EMAIL PROTECTED]/msg05056.htm l Does slide permissions propogate based on role memberships. I mean, if I create a role called role1, and add a user called user1 to it, will user1 get all the permissions that are assigned to role1. I've seen in my tests that although I gave enough write permissions to role1, Slide does not allow user1 to write unless I add the write permission to user1 itself. Am I missing something or is it a bug. What is your opinion on this? I am using Slide 2.1M1 and command line client to grant permissions to /Slide/files collection. thanks regards, Krishna Krishna Kankipati Software Engineer SSA Global * 1626 Cole Blvd. Golden, CO 80401, USA * 303-274-3027 Fax:303-274-3137 * [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: User Authorization based on permissions set to role in Slide2 .1
Guido, I did check both that you mentioned. The auto-versioning was set to false in Domain.xml and when I check for property current-user-privilege-set for folder1, it returns 'Read'. Although acl for folder1 looks like this: Note that my user 'user1' was added to role 'user' by setting the group-member-set property for the role 'user'. ACL for /Slide/files/folder1: granted to /Slide/roles/user(not protected) (not inherited) DAV:all DAV:write granted to property(not protected) (inherited from '/Slide/files') DAV:read-acl granted to /Slide/roles/root(not protected) (inherited from '/Slide/') DAV:all granted to all(not protected) (inherited from '/Slide/') DAV:read So, looks like assigning the user 'user1' to role 'user' is not propogating the permissions of role 'user' to user 'user1' To make sure I also used DAVExplorer to edit the group-member-set property of the role 'user' to include user 'user1' ... didn't help. Any thoughts? thanks, regards, Krishna -Original Message- From: Guido Casper [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 2:25 PM To: Slide Users Mailing List Subject: Re: User Authorization based on permissions set to role in Slide2 .1 Krishna Kankipati wrote: Hi Andrey, Thanks for the response. As we speak I am doing some tests using the Slide Command Line tool (it uses Webdav Client internally). I added a new user (user1) and a new role (role1) using webdav client. I did this using mkcol command on users and roles collection. After that I use Webdav client (proppatchMethod()) to set the property group-member-set of role role1 to include user1 as member of this role. This seemed to work fine. Also, when I use propfindMethod() from webdav client to check the property value of group-member-set, it shows user1 as a member of role1. After that I use command line tool to login as root and assign write permission on a new folder I created under /files to /roles/role1. The command I use is: grant write on /Slide/files/folder1 to /Slide/roles/role1 If I check acl propery for /Slide/files/folder1, I can see that write permission is assigned to role1 for folder1. Now, when I login back as user1, I cannot upload a file to the above folder, I get 403 Forbidden error. A possible reason for 403s might be that you have auto-versioning set but inadequate permissions on the /history folder. You may also want to check the current-user-privilege-set property of folder1 to see if the write permission gets properly propagated from role to user. HTH Guido Can you validate that this works for you (I'll appreciate if you can grant permissions using command line tool and validate that the permission works properly). You can use acl command to find the permissions on any folder/file. thanks, regards, Krishna -Original Message- From: Andrey Shulinsky [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 12:56 PM To: 'Slide Users Mailing List' Subject: RE: User Authorization based on permissions set to role in Slide2.1 Hi, Krishna! Everything should work fine in the case you've described. Actually, I'm testing permissions at the moment and it's one of my own test cases. I am using the Security helper directly though, not the client. Haven't you checked the descriptors of the role1 and the file you're granting access to ensure that user1 is really in the group-member-set property of the role and that the permission is set in the file descriptor? Yours sincerely, Andrey. -Original Message- From: Slide Users Mailing List [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 11:50 AM To: '[EMAIL PROTECTED]' Subject: User Authorization based on permissions set to role in Slide2.1 Importance: Low Hi Folks, I am re-posting this mail since I haven't got any replies yet. I am hoping there is some developer there who might have tried to play around with permissions in Slide2.1M1. My problem is that when I assign some permissions to a role, those permissions are not propogated to the users in that role. If not for permissions what else is the purpose of having roles at all? I am sure it is not just for logical grouping of users. Any help is appreciated .. thanks in advance regards, Krishna -Original Message- From:Krishna Kankipati Sent:Tuesday, August 03, 2004 5:47 PM To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject: User Authorization based on permissions set to role in Slide2.1 Michael, I was searching the mail archive for some help on permissions and came upon this discussion you were having with some developer which seemed relevant to my question: http://www.mail-archive.com/[EMAIL PROTECTED]/msg05056.htm l Does slide
RE: Cache refresh notification in two different instance of Slide running on different boxes.
James, thanks for the details on clustering. The version of clustering that you're working on is a far better solution than turning off caching on the servers. Will your modifications make it into the 2.1 beta version? I really hope so as I don't think our product will get the performance numbers we need with uncached servers :-/ Thanks, Warwick -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 3:50 PM To: Slide Users Mailing List Subject: Re: Cache refresh notification in two different instance of Slide running on different boxes. Comments below. Warwick Burrows wrote: Daniel, I'm a little confused by this question. Why wouldn't you use Slide clustering but still synchronize the caches of the two servers? Are there features of Slide clusters that you don't want? James, What is the Slide clustering design? I remember a note where you said that load-balancing is not a function of Slide clustering but that cache consistency between servers is. When I say load-balancing isn't something Slide handles, I mean with a cluster of Slide servers something else (a load-balancer) must decide which requests go to which Slide server. Slide can't, and I think shouldn't, pass requests to other servers in a cluster. So what other features make up Slide's clustering implementation? Slide currently supports clustering by pointing all your Slide instances at the same Store, then disabling the global cache of each Slide instance. This works, but without the global cache there is a noticeable slowdown in the amount of time each transaction takes. What I'm working on is a way to keep the global cache enabled and inform the other servers in a cluster that their cache needs to be updated when a resource changes. And what is the underlying network transport for the cache update notification events that are sent between the servers? The first implementation will use JMS, mainly because I've used it before and I'm wanting to get this done before the feature freeze for 2.1. The ultimate goal is to use WebDAV notifications to send events between servers. Unfortunately Slide doesn't support persistent subscriptions for notifications yet, so it's not quite ready for this. An acceptable alternative would be JGroups, but I've never used it before, and as I said, I'm in a bit of a hurry :). -James Warwick --- Warwick Burrows E2open Senior Engineer 9600 Great Hills Trail, #325 http://www.e2open.comAustin TX 78759 --- -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 10:50 AM To: Slide Users Mailing List Subject: Re: Cache refresh notification in two different instance of Slide running on different boxes. Daniel Varghese wrote: Hello James, thnx for your valuable information abt Slide Clustering and Cache refresh notifications among the cluster nodes couple of days back. You're welcome. Now I have another question. Two instance of Slide running on two different Unix boxes and I'm not planing to use Cluster, In this senario how do we notify the cache information between different server instances. You don't yet. Hopefully I'll be able to submit the code that does this tonight. I upgraded my desktop yesterday evening and there's a bug in the mysql update I got, so I haven't been able to test it yet. -James Cluster Configuration is a must for cache refresh notification ? rgds Daniel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: User Authorization based on permissions set to role in Slide2 .1
Jason, I checked the acl for this folder, it looks like this: ACL for /Slide/files/folder1: granted to /Slide/roles/user(not protected) (not inherited) DAV:all DAV:write granted to property(not protected) (inherited from '/Slide/files') DAV:read-acl granted to /Slide/roles/root(not protected) (inherited from '/Slide/') DAV:all granted to all(not protected) (inherited from '/Slide/') DAV:read I added my user 'user1' to role called 'user' using group-member-set property (also checked it). Since the role 'user' has the permissions to write to folder 'folder1', as seen by the ACL output, and there seems to be no contradiction to any other ace's in the acl list, I expected my user 'user1' to have necessary permissions to upload a file to 'folder1'. But I get 403 forbidden error. I can login as root and using the same command can upload a file to 'folder1'. So, I am not sure whats wrong. Initially I thought may be the group-member-set is not set properly, so used DAVExplorer to do the same with no avail. Do you think I am missing something, how do I debug this situation? thanks, regards, Krishna -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 2:34 PM To: Slide Users Mailing List Subject: Re: User Authorization based on permissions set to role in Slide2.1 Krishna, Permissions on a role are inherited by the members of that role, yes. One thing to check is that your user isn't being denied write access but another ACL that's higher in the list. ACLs are checked in order and the first one that applies takes precedence. If user1 is in a role that has been denied the ability to write, and that ACE appears in the ACL before the permission that grants write access, user1 will not have write access. -James Krishna Kankipati wrote: Hi Folks, I am re-posting this mail since I haven't got any replies yet. I am hoping there is some developer there who might have tried to play around with permissions in Slide2.1M1. My problem is that when I assign some permissions to a role, those permissions are not propogated to the users in that role. If not for permissions what else is the purpose of having roles at all? I am sure it is not just for logical grouping of users. Any help is appreciated .. thanks in advance regards, Krishna -Original Message- From: Krishna Kankipati Sent: Tuesday, August 03, 2004 5:47 PM To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject: User Authorization based on permissions set to role in Slide2.1 Michael, I was searching the mail archive for some help on permissions and came upon this discussion you were having with some developer which seemed relevant to my question: http://www.mail-archive.com/[EMAIL PROTECTED]/msg05056.html Does slide permissions propogate based on role memberships. I mean, if I create a role called role1, and add a user called user1 to it, will user1 get all the permissions that are assigned to role1. I've seen in my tests that although I gave enough write permissions to role1, Slide does not allow user1 to write unless I add the write permission to user1 itself. Am I missing something or is it a bug. What is your opinion on this? I am using Slide 2.1M1 and command line client to grant permissions to /Slide/files collection. thanks regards, Krishna Krishna Kankipati Software Engineer SSA Global * 1626 Cole Blvd. Golden, CO 80401, USA * 303-274-3027 Fax:303-274-3137 * [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Cache refresh notification in two different instance of Slide running on different boxes.
I'm planning on it being in 2.1. I updated my system last night and there's a bug in MySQL in the latest debian unstable, so I'm having trouble with testing :). It's close to finished, though, so I expect to commit the code later this week. -James Warwick Burrows wrote: James, thanks for the details on clustering. The version of clustering that you're working on is a far better solution than turning off caching on the servers. Will your modifications make it into the 2.1 beta version? I really hope so as I don't think our product will get the performance numbers we need with uncached servers :-/ Thanks, Warwick -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 3:50 PM To: Slide Users Mailing List Subject: Re: Cache refresh notification in two different instance of Slide running on different boxes. Comments below. Warwick Burrows wrote: Daniel, I'm a little confused by this question. Why wouldn't you use Slide clustering but still synchronize the caches of the two servers? Are there features of Slide clusters that you don't want? James, What is the Slide clustering design? I remember a note where you said that load-balancing is not a function of Slide clustering but that cache consistency between servers is. When I say load-balancing isn't something Slide handles, I mean with a cluster of Slide servers something else (a load-balancer) must decide which requests go to which Slide server. Slide can't, and I think shouldn't, pass requests to other servers in a cluster. So what other features make up Slide's clustering implementation? Slide currently supports clustering by pointing all your Slide instances at the same Store, then disabling the global cache of each Slide instance. This works, but without the global cache there is a noticeable slowdown in the amount of time each transaction takes. What I'm working on is a way to keep the global cache enabled and inform the other servers in a cluster that their cache needs to be updated when a resource changes. And what is the underlying network transport for the cache update notification events that are sent between the servers? The first implementation will use JMS, mainly because I've used it before and I'm wanting to get this done before the feature freeze for 2.1. The ultimate goal is to use WebDAV notifications to send events between servers. Unfortunately Slide doesn't support persistent subscriptions for notifications yet, so it's not quite ready for this. An acceptable alternative would be JGroups, but I've never used it before, and as I said, I'm in a bit of a hurry :). -James Warwick --- Warwick Burrows E2open Senior Engineer 9600 Great Hills Trail, #325 http://www.e2open.comAustin TX 78759 --- -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 10:50 AM To: Slide Users Mailing List Subject: Re: Cache refresh notification in two different instance of Slide running on different boxes. Daniel Varghese wrote: Hello James, thnx for your valuable information abt Slide Clustering and Cache refresh notifications among the cluster nodes couple of days back. You're welcome. Now I have another question. Two instance of Slide running on two different Unix boxes and I'm not planing to use Cluster, In this senario how do we notify the cache information between different server instances. You don't yet. Hopefully I'll be able to submit the code that does this tonight. I upgraded my desktop yesterday evening and there's a bug in the mysql update I got, so I haven't been able to test it yet. -James Cluster Configuration is a must for cache refresh notification ? rgds Daniel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Cache refresh notification in two different instance of Slide running on different boxes.
Fantastic news. Thanks! -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 5:00 PM To: Slide Users Mailing List Subject: Re: Cache refresh notification in two different instance of Slide running on different boxes. I'm planning on it being in 2.1. I updated my system last night and there's a bug in MySQL in the latest debian unstable, so I'm having trouble with testing :). It's close to finished, though, so I expect to commit the code later this week. -James Warwick Burrows wrote: James, thanks for the details on clustering. The version of clustering that you're working on is a far better solution than turning off caching on the servers. Will your modifications make it into the 2.1 beta version? I really hope so as I don't think our product will get the performance numbers we need with uncached servers :-/ Thanks, Warwick -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 3:50 PM To: Slide Users Mailing List Subject: Re: Cache refresh notification in two different instance of Slide running on different boxes. Comments below. Warwick Burrows wrote: Daniel, I'm a little confused by this question. Why wouldn't you use Slide clustering but still synchronize the caches of the two servers? Are there features of Slide clusters that you don't want? James, What is the Slide clustering design? I remember a note where you said that load-balancing is not a function of Slide clustering but that cache consistency between servers is. When I say load-balancing isn't something Slide handles, I mean with a cluster of Slide servers something else (a load-balancer) must decide which requests go to which Slide server. Slide can't, and I think shouldn't, pass requests to other servers in a cluster. So what other features make up Slide's clustering implementation? Slide currently supports clustering by pointing all your Slide instances at the same Store, then disabling the global cache of each Slide instance. This works, but without the global cache there is a noticeable slowdown in the amount of time each transaction takes. What I'm working on is a way to keep the global cache enabled and inform the other servers in a cluster that their cache needs to be updated when a resource changes. And what is the underlying network transport for the cache update notification events that are sent between the servers? The first implementation will use JMS, mainly because I've used it before and I'm wanting to get this done before the feature freeze for 2.1. The ultimate goal is to use WebDAV notifications to send events between servers. Unfortunately Slide doesn't support persistent subscriptions for notifications yet, so it's not quite ready for this. An acceptable alternative would be JGroups, but I've never used it before, and as I said, I'm in a bit of a hurry :). -James Warwick --- Warwick Burrows E2open Senior Engineer 9600 Great Hills Trail, #325 http://www.e2open.comAustin TX 78759 --- -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 10:50 AM To: Slide Users Mailing List Subject: Re: Cache refresh notification in two different instance of Slide running on different boxes. Daniel Varghese wrote: Hello James, thnx for your valuable information abt Slide Clustering and Cache refresh notifications among the cluster nodes couple of days back. You're welcome. Now I have another question. Two instance of Slide running on two different Unix boxes and I'm not planing to use Cluster, In this senario how do we notify the cache information between different server instances. You don't yet. Hopefully I'll be able to submit the code that does this tonight. I upgraded my desktop yesterday evening and there's a bug in the mysql update I got, so I haven't been able to test it yet. -James Cluster Configuration is a must for cache refresh notification ? rgds Daniel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To
RE: User Authorization based on permissions set to role in Slide2.1
One more thing - try to give your user read permission to the folder along with the write permission. Does it help? Yours sincerely, Andrey. -Original Message- From: Slide Users Mailing List [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 11:50 AM To: '[EMAIL PROTECTED]' Subject: User Authorization based on permissions set to role in Slide2.1 Importance: Low Hi Folks, I am re-posting this mail since I haven't got any replies yet. I am hoping there is some developer there who might have tried to play around with permissions in Slide2.1M1. My problem is that when I assign some permissions to a role, those permissions are not propogated to the users in that role. If not for permissions what else is the purpose of having roles at all? I am sure it is not just for logical grouping of users. Any help is appreciated .. thanks in advance regards, Krishna -Original Message- From: Krishna Kankipati Sent: Tuesday, August 03, 2004 5:47 PM To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject:User Authorization based on permissions set to role in Slide2.1 Michael, I was searching the mail archive for some help on permissions and came upon this discussion you were having with some developer which seemed relevant to my question: http://www.mail-archive.com/[EMAIL PROTECTED]/msg05056.htm l Does slide permissions propogate based on role memberships. I mean, if I create a role called role1, and add a user called user1 to it, will user1 get all the permissions that are assigned to role1. I've seen in my tests that although I gave enough write permissions to role1, Slide does not allow user1 to write unless I add the write permission to user1 itself. Am I missing something or is it a bug. What is your opinion on this? I am using Slide 2.1M1 and command line client to grant permissions to /Slide/files collection. thanks regards, Krishna Krishna Kankipati Software Engineer SSA Global * 1626 Cole Blvd. Golden, CO 80401, USA * 303-274-3027 Fax:303-274-3137 * [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: User Authorization based on permissions set to role in Slide2 .1
Can you paste the contents of the group-member-set property of the user role? If you notice the root user doesn't have any explicit rights to the /files node, everything is inherited through the root role. My guess is your user isn't making it into the role properly. -James Krishna Kankipati wrote: Jason, I checked the acl for this folder, it looks like this: ACL for /Slide/files/folder1: granted to /Slide/roles/user(not protected) (not inherited) DAV:all DAV:write granted to property(not protected) (inherited from '/Slide/files') DAV:read-acl granted to /Slide/roles/root(not protected) (inherited from '/Slide/') DAV:all granted to all(not protected) (inherited from '/Slide/') DAV:read I added my user 'user1' to role called 'user' using group-member-set property (also checked it). Since the role 'user' has the permissions to write to folder 'folder1', as seen by the ACL output, and there seems to be no contradiction to any other ace's in the acl list, I expected my user 'user1' to have necessary permissions to upload a file to 'folder1'. But I get 403 forbidden error. I can login as root and using the same command can upload a file to 'folder1'. So, I am not sure whats wrong. Initially I thought may be the group-member-set is not set properly, so used DAVExplorer to do the same with no avail. Do you think I am missing something, how do I debug this situation? thanks, regards, Krishna -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 2:34 PM To: Slide Users Mailing List Subject: Re: User Authorization based on permissions set to role in Slide2.1 Krishna, Permissions on a role are inherited by the members of that role, yes. One thing to check is that your user isn't being denied write access but another ACL that's higher in the list. ACLs are checked in order and the first one that applies takes precedence. If user1 is in a role that has been denied the ability to write, and that ACE appears in the ACL before the permission that grants write access, user1 will not have write access. -James Krishna Kankipati wrote: Hi Folks, I am re-posting this mail since I haven't got any replies yet. I am hoping there is some developer there who might have tried to play around with permissions in Slide2.1M1. My problem is that when I assign some permissions to a role, those permissions are not propogated to the users in that role. If not for permissions what else is the purpose of having roles at all? I am sure it is not just for logical grouping of users. Any help is appreciated .. thanks in advance regards, Krishna -Original Message- From: Krishna Kankipati Sent: Tuesday, August 03, 2004 5:47 PM To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject: User Authorization based on permissions set to role in Slide2.1 Michael, I was searching the mail archive for some help on permissions and came upon this discussion you were having with some developer which seemed relevant to my question: http://www.mail-archive.com/[EMAIL PROTECTED]/msg05056.html Does slide permissions propogate based on role memberships. I mean, if I create a role called role1, and add a user called user1 to it, will user1 get all the permissions that are assigned to role1. I've seen in my tests that although I gave enough write permissions to role1, Slide does not allow user1 to write unless I add the write permission to user1 itself. Am I missing something or is it a bug. What is your opinion on this? I am using Slide 2.1M1 and command line client to grant permissions to /Slide/files collection. thanks regards, Krishna Krishna Kankipati Software Engineer SSA Global * 1626 Cole Blvd. Golden, CO 80401, USA * 303-274-3027 Fax:303-274-3137 * [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: User Authorization based on permissions set to role in Slide2 .1
James, Here is the output of the group-member-set property of the role user. Note the value has lot of empty and tab spaces /Slide/users/user1 Java code used to get this property value === String sPropertyName = group-member-set; Enumeration enumProperties = webDavResource.propfindMethod(sPropertyName); = Krishna -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 4:57 PM To: Slide Users Mailing List Subject: Re: User Authorization based on permissions set to role in Slide2 .1 Can you paste the contents of the group-member-set property of the user role? If you notice the root user doesn't have any explicit rights to the /files node, everything is inherited through the root role. My guess is your user isn't making it into the role properly. -James Krishna Kankipati wrote: Jason, I checked the acl for this folder, it looks like this: ACL for /Slide/files/folder1: granted to /Slide/roles/user(not protected) (not inherited) DAV:all DAV:write granted to property(not protected) (inherited from '/Slide/files') DAV:read-acl granted to /Slide/roles/root(not protected) (inherited from '/Slide/') DAV:all granted to all(not protected) (inherited from '/Slide/') DAV:read I added my user 'user1' to role called 'user' using group-member-set property (also checked it). Since the role 'user' has the permissions to write to folder 'folder1', as seen by the ACL output, and there seems to be no contradiction to any other ace's in the acl list, I expected my user 'user1' to have necessary permissions to upload a file to 'folder1'. But I get 403 forbidden error. I can login as root and using the same command can upload a file to 'folder1'. So, I am not sure whats wrong. Initially I thought may be the group-member-set is not set properly, so used DAVExplorer to do the same with no avail. Do you think I am missing something, how do I debug this situation? thanks, regards, Krishna -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 2:34 PM To: Slide Users Mailing List Subject: Re: User Authorization based on permissions set to role in Slide2.1 Krishna, Permissions on a role are inherited by the members of that role, yes. One thing to check is that your user isn't being denied write access but another ACL that's higher in the list. ACLs are checked in order and the first one that applies takes precedence. If user1 is in a role that has been denied the ability to write, and that ACE appears in the ACL before the permission that grants write access, user1 will not have write access. -James Krishna Kankipati wrote: Hi Folks, I am re-posting this mail since I haven't got any replies yet. I am hoping there is some developer there who might have tried to play around with permissions in Slide2.1M1. My problem is that when I assign some permissions to a role, those permissions are not propogated to the users in that role. If not for permissions what else is the purpose of having roles at all? I am sure it is not just for logical grouping of users. Any help is appreciated .. thanks in advance regards, Krishna -Original Message- From:Krishna Kankipati Sent:Tuesday, August 03, 2004 5:47 PM To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject: User Authorization based on permissions set to role in Slide2.1 Michael, I was searching the mail archive for some help on permissions and came upon this discussion you were having with some developer which seemed relevant to my question: http://www.mail-archive.com/[EMAIL PROTECTED]/msg05056.html Does slide permissions propogate based on role memberships. I mean, if I create a role called role1, and add a user called user1 to it, will user1 get all the permissions that are assigned to role1. I've seen in my tests that although I gave enough write permissions to role1, Slide does not allow user1 to write unless I add the write permission to user1 itself. Am I missing something or is it a bug. What is your opinion on this? I am using Slide 2.1M1 and command line client to grant permissions to /Slide/files collection. thanks regards, Krishna Krishna Kankipati Software Engineer SSA Global * 1626 Cole Blvd. Golden, CO 80401, USA * 303-274-3027 Fax:303-274-3137 * [EMAIL PROTECTED] - To unsubscribe, e-mail:
RE: User Authorization based on permissions set to role in Slide2 .1
Andrey, No, I haven't tried that, but I've tried giving all permission to the role, didn't work. If I give the write permission to the particular user it works. Kirshna -Original Message- From: Andrey Shulinsky [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 4:52 PM To: 'Slide Users Mailing List' Subject: RE: User Authorization based on permissions set to role in Slide2.1 One more thing - try to give your user read permission to the folder along with the write permission. Does it help? Yours sincerely, Andrey. -Original Message- From: Slide Users Mailing List [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 11:50 AM To: '[EMAIL PROTECTED]' Subject: User Authorization based on permissions set to role in Slide2.1 Importance: Low Hi Folks, I am re-posting this mail since I haven't got any replies yet. I am hoping there is some developer there who might have tried to play around with permissions in Slide2.1M1. My problem is that when I assign some permissions to a role, those permissions are not propogated to the users in that role. If not for permissions what else is the purpose of having roles at all? I am sure it is not just for logical grouping of users. Any help is appreciated .. thanks in advance regards, Krishna -Original Message- From: Krishna Kankipati Sent: Tuesday, August 03, 2004 5:47 PM To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject:User Authorization based on permissions set to role in Slide2.1 Michael, I was searching the mail archive for some help on permissions and came upon this discussion you were having with some developer which seemed relevant to my question: http://www.mail-archive.com/[EMAIL PROTECTED]/msg05056.htm l Does slide permissions propogate based on role memberships. I mean, if I create a role called role1, and add a user called user1 to it, will user1 get all the permissions that are assigned to role1. I've seen in my tests that although I gave enough write permissions to role1, Slide does not allow user1 to write unless I add the write permission to user1 itself. Am I missing something or is it a bug. What is your opinion on this? I am using Slide 2.1M1 and command line client to grant permissions to /Slide/files collection. thanks regards, Krishna Krishna Kankipati Software Engineer SSA Global * 1626 Cole Blvd. Golden, CO 80401, USA * 303-274-3027 Fax:303-274-3137 * [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: User Authorization based on permissions set to role in Slide2 .1
I don't think you need the /Slide part on there. It should just be /users/user1. The empty and tab spaces are a bug that is fixed in the next release. XML data isn't converted to strings properly. -James Krishna Kankipati wrote: James, Here is the output of the group-member-set property of the role user. Note the value has lot of empty and tab spaces /Slide/users/user1 Java code used to get this property value === String sPropertyName = group-member-set; Enumeration enumProperties = webDavResource.propfindMethod(sPropertyName); = Krishna -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 4:57 PM To: Slide Users Mailing List Subject: Re: User Authorization based on permissions set to role in Slide2 .1 Can you paste the contents of the group-member-set property of the user role? If you notice the root user doesn't have any explicit rights to the /files node, everything is inherited through the root role. My guess is your user isn't making it into the role properly. -James Krishna Kankipati wrote: Jason, I checked the acl for this folder, it looks like this: ACL for /Slide/files/folder1: granted to /Slide/roles/user(not protected) (not inherited) DAV:all DAV:write granted to property(not protected) (inherited from '/Slide/files') DAV:read-acl granted to /Slide/roles/root(not protected) (inherited from '/Slide/') DAV:all granted to all(not protected) (inherited from '/Slide/') DAV:read I added my user 'user1' to role called 'user' using group-member-set property (also checked it). Since the role 'user' has the permissions to write to folder 'folder1', as seen by the ACL output, and there seems to be no contradiction to any other ace's in the acl list, I expected my user 'user1' to have necessary permissions to upload a file to 'folder1'. But I get 403 forbidden error. I can login as root and using the same command can upload a file to 'folder1'. So, I am not sure whats wrong. Initially I thought may be the group-member-set is not set properly, so used DAVExplorer to do the same with no avail. Do you think I am missing something, how do I debug this situation? thanks, regards, Krishna -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 2:34 PM To: Slide Users Mailing List Subject: Re: User Authorization based on permissions set to role in Slide2.1 Krishna, Permissions on a role are inherited by the members of that role, yes. One thing to check is that your user isn't being denied write access but another ACL that's higher in the list. ACLs are checked in order and the first one that applies takes precedence. If user1 is in a role that has been denied the ability to write, and that ACE appears in the ACL before the permission that grants write access, user1 will not have write access. -James Krishna Kankipati wrote: Hi Folks, I am re-posting this mail since I haven't got any replies yet. I am hoping there is some developer there who might have tried to play around with permissions in Slide2.1M1. My problem is that when I assign some permissions to a role, those permissions are not propogated to the users in that role. If not for permissions what else is the purpose of having roles at all? I am sure it is not just for logical grouping of users. Any help is appreciated .. thanks in advance regards, Krishna -Original Message- From: Krishna Kankipati Sent: Tuesday, August 03, 2004 5:47 PM To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject: User Authorization based on permissions set to role in Slide2.1 Michael, I was searching the mail archive for some help on permissions and came upon this discussion you were having with some developer which seemed relevant to my question: http://www.mail-archive.com/[EMAIL PROTECTED]/msg05056.html Does slide permissions propogate based on role memberships. I mean, if I create a role called role1, and add a user called user1 to it, will user1 get all the permissions that are assigned to role1. I've seen in my tests that although I gave enough write permissions to role1, Slide does not allow user1 to write unless I add the write permission to user1 itself. Am I missing something or is it a bug. What is your opinion on this? I am using Slide 2.1M1 and command line client to grant permissions to /Slide/files collection. thanks regards, Krishna Krishna Kankipati Software Engineer SSA Global * 1626 Cole Blvd. Golden, CO 80401, USA * 303-274-3027 Fax:303-274-3137 * [EMAIL PROTECTED]
RE: User Authorization based on permissions set to role in Slide2 .1
Krishna, try to remove /Slide Here's how this property should look like in the xml descriptor (approximately): property name=group-member-set namespace=DAV: value=lt;D:href xmlns:D=quot;DAV:quot;gt;/users/user1lt;/D:hrefgt; type= protected=false permissions / /property ' symbol might not be replaced by quot; but the user's uri should start from /users. Yours sincerely, Andrey Shulinskiy. -Original Message- From: Slide Users Mailing List [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 7:54 PM To: [EMAIL PROTECTED] Subject: RE: User Authorization based on permissions set to role in Slide2 .1 Importance: Low James, Here is the output of the group-member-set property of the role user. Note the value has lot of empty and tab spaces /Slide/users/user1 Java code used to get this property value == == === String sPropertyName = group-member-set; Enumeration enumProperties = webDavResource.propfindMethod(sPropertyName); == == = Krishna -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 4:57 PM To: Slide Users Mailing List Subject: Re: User Authorization based on permissions set to role in Slide2 .1 Can you paste the contents of the group-member-set property of the user role? If you notice the root user doesn't have any explicit rights to the /files node, everything is inherited through the root role. My guess is your user isn't making it into the role properly. -James Krishna Kankipati wrote: Jason, I checked the acl for this folder, it looks like this: ACL for /Slide/files/folder1: granted to /Slide/roles/user(not protected) (not inherited) DAV:all DAV:write granted to property(not protected) (inherited from '/Slide/files') DAV:read-acl granted to /Slide/roles/root(not protected) (inherited from '/Slide/') DAV:all granted to all(not protected) (inherited from '/Slide/') DAV:read I added my user 'user1' to role called 'user' using group-member-set property (also checked it). Since the role 'user' has the permissions to write to folder 'folder1', as seen by the ACL output, and there seems to be no contradiction to any other ace's in the acl list, I expected my user 'user1' to have necessary permissions to upload a file to 'folder1'. But I get 403 forbidden error. I can login as root and using the same command can upload a file to 'folder1'. So, I am not sure whats wrong. Initially I thought may be the group-member-set is not set properly, so used DAVExplorer to do the same with no avail. Do you think I am missing something, how do I debug this situation? thanks, regards, Krishna -Original Message- From: James Mason [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 04, 2004 2:34 PM To: Slide Users Mailing List Subject: Re: User Authorization based on permissions set to role in Slide2.1 Krishna, Permissions on a role are inherited by the members of that role, yes. One thing to check is that your user isn't being denied write access but another ACL that's higher in the list. ACLs are checked in order and the first one that applies takes precedence. If user1 is in a role that has been denied the ability to write, and that ACE appears in the ACL before the permission that grants write access, user1 will not have write access. -James Krishna Kankipati wrote: Hi Folks, I am re-posting this mail since I haven't got any replies yet. I am hoping there is some developer there who might have tried to play around with permissions in Slide2.1M1. My problem is that when I assign some permissions to a role, those permissions are not propogated to the users in that role. If not for permissions what else is the purpose of having roles at all? I am sure it is not just for logical grouping of users. Any help is appreciated .. thanks in advance regards, Krishna -Original Message- From: Krishna Kankipati Sent: Tuesday, August 03, 2004 5:47 PM To:'[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject: User Authorization based on permissions set to role in Slide2.1 Michael, I was searching the mail archive for some help on permissions and came upon this discussion you were having with some developer which seemed relevant to my question:
Deleting versions created by versioning
Title: Message Hi, Is there a Slide configuration option that allows me to delete the versions in a version history for a document? I'm developing a content management system front-ended by Slide and its just not feasible to leave around every revision of every deleted document forever. When I try to delete a version using its URIunder the /history folder I get a "forbidden" error back. So how can I clean up the old versions of a file I have deleted? Is there an option I can turn on that allows me to delete revisions? To my knowledge I don't have Slide authorization active as I've disabled authentication and set the slide security property in slide.properties to false so this doesn't seem to be a matter of ACEs but I could be wrong. Thanks, Warwick Warwick BurrowsSenior Software Engineer Email: [EMAIL PROTECTED]Fax: 512.343.8727 9600Great Hills Trail, #325Austin, TX 78759http://www.e2open.com
