RE: A question on security configuration

2004-08-30 Thread Andreas Probst
On 30 Aug 2004 at 14:48, Ritu Kedia wrote:

 Hi Andreas,

 My application does use Slide's WebDAV Client Lib for communicating with
 Slide. So yes, both the direct access(via Word) and the access from my
 application are via WebDAV. I want to disable slide security checks in the
 direct access modeI would most likely use James' cluster refresh
 solution along with custom security implementation...

So everybody is allowed to access as long as he or she goes via
a WebDAV client? Is this really what you want?


 With reference to what you pointed below regarding performance issues with
 DeltaV turned on: Have you already faced a problem with that? If yes, then
 what is the nature of the performance problem? Is it just due to security
 checks or does it exist even with security turned off (i.e. for puts,
 checkin-checkout, etc)?

I did not face the problem with the history folder, but I did
experience it with normal folders. Putting the tenth thousand
document into a single collection needs about 30 seconds. So
having a collection in /history for each document would cause
performance issues even if you don't have a single huge
collection under /files. Therefor the hack is an interesting
solution for this.

The reason for the performance problem are:
1. adding a child means deleting all existing children from the
store and adding the existing plus the new one.
2. loading a collection (Structure.retrieve()) means
instantiating all children of this collection on stock, even if
they are not needed.

I haven't got experience with Security, but I think as long as
you don't have very many ACLs the security checks should not
slow down the system too much.

 I use DeltaV with both auto-versioning and security turned off. But I
 version every file in the system. Do you see any issues with the versioning
 once the # of files in the repository has gone above a particular limit? (I
 delete the version history when a file is deleted)

 Thanks for your comments.
 Regards,
 Ritu

 -Original Message-
 From: Andreas Probst [mailto:[EMAIL PROTECTED]
 Sent: Saturday, August 28, 2004 2:53 AM
 To: Slide Users Mailing List
 Subject: RE: A question on security configuration


 On 27 Aug 2004 at 13:19, Ritu Kedia wrote:

  :( ... The distinguishing factor in my requests is neither the user
  credential nor the resource being accessed. The same user should be able
 to
  access the Slide Repository either via my WebService or via
  MS-Word/Excel/etc. I.e. The same user could access the same resource in
  either mode. When accessed via WebService, my application is doing the
  authorization. When accessed directly, I would have to override the
 default
  slide security implementation with my custom implementation.

 Can't you develop your HTTP application as a WebDAV client
 talking to Slide. You would use the login name and the password
 of the HTTP user to connect to Slide via WebDAV. So the
 information about who did the PUTs etc. wouldn't be lost. You
 would not need to implement the Security yourself. WebDAV users
 (Word) would talk to Slide directly.

 Actually checking the security stuff is not that expensive,
 although this probably depends on the number of ACLs on the
 path. You should be more concerned about performance when you
 get big directories, i.e. with more than thousand children. If
 you use DeltaV the /history folder could become a performance
 issue very soon.

 Maybe you've already explained why this is not possible for you,
 if so please excuse this remark...

 Regards,

 Andreas

 
  I think I would have to try the clustering solution only with my custom
  security implementation (since the direct slide access should also follow
  the same security checks as done in my application). But I won't be able
 to
  get to it may be for another month.
  A couple of questions regarding custom security implementation...
  1. Is the security implementation class configurable via Domain.xml? There
  is a security store configuration in Domain.xml but I haven't seen the
 entry
  for the security helper class.
  2. Which methods would have to be implemented if I am interested only in
 the
  authorization checks and not the assignments?
 
  Thanks,
  Ritu
 
  -Original Message-
  From: James Mason [mailto:[EMAIL PROTECTED]
  Sent: Friday, August 27, 2004 11:44 AM
  To: Slide Users Mailing List
  Subject: Re: A question on security configuration
 
 
  Done a little more thinking about this. I think separate namespaces
  sounds like a good idea, but there may be a problem. Since the Store
  configurations are per-namespace it's likely that the ExtendedStore
  cache will be per namespace as well. If this is the case then you're
  back to a situation where you'll need clustering to keep the caches in
  sync. Unless you really want everything to run in the same webapp you'd
  probably be better off just running a cluster with two nodes.
 
  Stefan's suggestion gave me an idea, though (several actually). What you

Simple XML and Office extractor configs

2004-08-30 Thread Warwick Burrows
Title: Message



Hi,

The simple and 
office extractors that are configured in the Domain.xml file by default. What do 
they do? ie. One is configured to /slide/articles/test.xml and the other 
to /slide/doc. Do they create these dirs and put data in them or do they only 
extract properties from files under those directories? Do I need to have a 
test.xml to make it work? I'm getting an xpath failure from the simple extractor 
init process and am not sure whether how they should be configured. Slide starts 
but I'm guessing that the extractors (or at least one) didn't 
load.

Thanks,
Warwick



  
  

  
  

  
  
  
  

  Warwick 
  BurrowsSenior Software Engineer

  

  Email: 
  [EMAIL PROTECTED]Fax: 
  512.343.8727

  

  9600Great Hills 
  Trail, #325Austin, 
  TX 
  78759http://www.e2open.com
  

  
  
  



RE: Simple XML and Office extractor configs

2004-08-30 Thread Ryan Rhodes
Hi Warwick,

 

The MS office extractor will extract the OLE metadata, like author and date
modified, from office documents.  The example directory /slide/doc is the
directory you want it to extract properties from.  The metadata is stored as
regular DAV properties once extracted.  That directory doesn't exist.  It is
just an example.  The overhead of using /slide/files is probably too much
for people who don't need it.

 

I'm not sure about the xml extractor, but I was getting the same exception
on init.  I think it is a bug because I don't remember getting it a couple
months ago.  I just disabled it.

 

-Ryan

 

  _  

From: Warwick Burrows [mailto:[EMAIL PROTECTED] 
Sent: Monday, August 30, 2004 4:45 PM
To: '[EMAIL PROTECTED]'
Subject: Simple XML and Office extractor configs

 

Hi,

 

The simple and office extractors that are configured in the Domain.xml file
by default. What do they do?  ie. One is configured to
/slide/articles/test.xml and the other to /slide/doc. Do they create these
dirs and put data in them or do they only extract properties from files
under those directories?  Do I need to have a test.xml to make it work? I'm
getting an xpath failure from the simple extractor init process and am not
sure whether how they should be configured. Slide starts but I'm guessing
that the extractors (or at least one) didn't load.

 

Thanks,

Warwick

 


 http://www.e2open.com/  


  _  


Warwick Burrows 
Senior Software Engineer 

 

Email: [EMAIL PROTECTED]
Fax:   512.343.8727

 

9600 Great Hills Trail, #325 
Austin, TX  78759
http://www.e2open.com http://www.e2open.com/ 


  _  

 



RE: Simple XML and Office extractor configs

2004-08-30 Thread Warwick Burrows

Thanks.  So if a new document is uploaded under /slide/doc then the office
extractor will extract properties from it but not otherwise. Will it also
process any files that are already there when it starts or would you need to
upload them for it to process the properties again?  I would like it enabled
for my whole tree but I'm not sure what you mean when you say it may be too
much for most people.  Is there performance problems with the
implementation?

Thanks,
Warwick



-Original Message-
From: Ryan Rhodes [mailto:[EMAIL PROTECTED] 
Sent: Monday, August 30, 2004 7:46 PM
To: 'Slide Users Mailing List'
Subject: RE: Simple XML and Office extractor configs


Hi Warwick,

 

The MS office extractor will extract the OLE metadata, like author and date
modified, from office documents.  The example directory /slide/doc is the
directory you want it to extract properties from.  The metadata is stored as
regular DAV properties once extracted.  That directory doesn't exist.  It is
just an example.  The overhead of using /slide/files is probably too much
for people who don't need it.

 

I'm not sure about the xml extractor, but I was getting the same exception
on init.  I think it is a bug because I don't remember getting it a couple
months ago.  I just disabled it.

 

-Ryan

 

  _  

From: Warwick Burrows [mailto:[EMAIL PROTECTED] 
Sent: Monday, August 30, 2004 4:45 PM
To: '[EMAIL PROTECTED]'
Subject: Simple XML and Office extractor configs

 

Hi,

 

The simple and office extractors that are configured in the Domain.xml file
by default. What do they do?  ie. One is configured to
/slide/articles/test.xml and the other to /slide/doc. Do they create these
dirs and put data in them or do they only extract properties from files
under those directories?  Do I need to have a test.xml to make it work? I'm
getting an xpath failure from the simple extractor init process and am not
sure whether how they should be configured. Slide starts but I'm guessing
that the extractors (or at least one) didn't load.

 

Thanks,

Warwick

 


 http://www.e2open.com/  


  _  


Warwick Burrows 
Senior Software Engineer 

 

Email: [EMAIL PROTECTED]
Fax:   512.343.8727

 

9600 Great Hills Trail, #325 
Austin, TX  78759
http://www.e2open.com http://www.e2open.com/ 


  _  

 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Simple XML and Office extractor configs

2004-08-30 Thread Ryan Rhodes
Actually, I don't know anything about the performance.  I only meant that it
was turned off by default and that was an example config.  

I've been using the MS content extractors I wrote only in a test
environment, and I haven't had performance problems yet.  The OLE metadata
is the fastest thing you can extract, but I'm not sure if that gets called
much more often than content extractors.

The content extractor definitely only saves the content when it is
originally saved or updated.  I am guessing the property extractors do the
same thing.

This is actually a big problem I have with it right now.  It would be easy
to write a recursive touch tool, but the modification dates are meaningful
in the application and I don't want them changed.  Any ideas here would be
great!

-Ryan

-Original Message-
From: Warwick Burrows [mailto:[EMAIL PROTECTED] 
Sent: Monday, August 30, 2004 9:12 PM
To: 'Slide Users Mailing List'
Subject: RE: Simple XML and Office extractor configs


Thanks.  So if a new document is uploaded under /slide/doc then the office
extractor will extract properties from it but not otherwise. Will it also
process any files that are already there when it starts or would you need to
upload them for it to process the properties again?  I would like it enabled
for my whole tree but I'm not sure what you mean when you say it may be too
much for most people.  Is there performance problems with the
implementation?

Thanks,
Warwick



-Original Message-
From: Ryan Rhodes [mailto:[EMAIL PROTECTED] 
Sent: Monday, August 30, 2004 7:46 PM
To: 'Slide Users Mailing List'
Subject: RE: Simple XML and Office extractor configs


Hi Warwick,

 

The MS office extractor will extract the OLE metadata, like author and date
modified, from office documents.  The example directory /slide/doc is the
directory you want it to extract properties from.  The metadata is stored as
regular DAV properties once extracted.  That directory doesn't exist.  It is
just an example.  The overhead of using /slide/files is probably too much
for people who don't need it.

 

I'm not sure about the xml extractor, but I was getting the same exception
on init.  I think it is a bug because I don't remember getting it a couple
months ago.  I just disabled it.

 

-Ryan

 

  _  

From: Warwick Burrows [mailto:[EMAIL PROTECTED] 
Sent: Monday, August 30, 2004 4:45 PM
To: '[EMAIL PROTECTED]'
Subject: Simple XML and Office extractor configs

 

Hi,

 

The simple and office extractors that are configured in the Domain.xml file
by default. What do they do?  ie. One is configured to
/slide/articles/test.xml and the other to /slide/doc. Do they create these
dirs and put data in them or do they only extract properties from files
under those directories?  Do I need to have a test.xml to make it work? I'm
getting an xpath failure from the simple extractor init process and am not
sure whether how they should be configured. Slide starts but I'm guessing
that the extractors (or at least one) didn't load.

 

Thanks,

Warwick

 


 http://www.e2open.com/  


  _  


Warwick Burrows 
Senior Software Engineer 

 

Email: [EMAIL PROTECTED]
Fax:   512.343.8727

 

9600 Great Hills Trail, #325 
Austin, TX  78759
http://www.e2open.com http://www.e2open.com/ 


  _  

 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]