Date: Tue, 21 Dec 2004 10:17:45 -0500 From: Stacy Dunkle <[EMAIL PROTECTED]> Subject: [Apache-FP] Users and Roles To: ApacheFP Mailing List <apache-fp@lists.joshie.com> Message-ID: <[EMAIL PROTECTED]>
Is there a way to manually add myself back, by editing a certain file on the server with vi? My main admin user for the server can still install/uninstall the FP extensions for each domain, and configure certain options for each as well (mail servers, etc), I just can't reach the each domain's main admin page.
The 'main' admin user's password is set with owsadm.exe and isn't the same username and password as a newly extended virtual web unless you type the same username/password into them.
Each apache fpse virtual host keeps it's user/group info in _vti_pvt/service.pwd and _vti_pvt/service.grp. These are basically htpasswd and htgroup files. I believe that using htpasswd to add a user back to the service.pwd file works fine.
Since you've deleted yourself, the line you'll want to add back to group is:
administrators: <admin_username>
Also, I was wondering how other people set up their FrontPage Extensions for customers/clients/etc. For example, do you give the main author of the site the full admin rights to that particular domain, along with yourself? Or, do you set yourself as the only one with the "Administrator" role, with the main author of the site/domain as "Advanced author"? If one were to do it that way, would it be unfairly limiting the domain owner's control of the site, or is it just about right?
I think that the client should be able to add other users to edit their site if they like - unless that's something you'd charge extra for. So I'd make the client's account an administrator along with an administrator account for us (the host provider) to have access. I make ours when extending the web and then add their username and give it admin privs.
I think users are happier if they are given enough power to do what they need to do, but not too much that they hurt themselves. That said, lets try to apply it to fpse.
Authors - Add and delete pages. They can delete all pages in the web or subweb they have a username and password to. I think that's the 'worst' thing that can happen to a web site and anyone who can 'edit' has this power.
Advanced Authors - OK, all the author stuff plus managing themes for the site. Oh, and 'recalculate hyper links'. So maybe you'd tell your clients to only give this permission to people who they trust with site-wide changes.
Administrator - well, they can do anything to their site, adding users, add subwebs, manage 'server settings' plus everything that everyone else can do. It's the clients content so this still doesn't seem too dangerous especially since managing 'server settings' amounts to very little for the UNIX fpse. So they can delete all user accounts, including yours, delete their subwebs and delete all their content. The last thing, deleting all content, is usually the worst and a normal author can do that.
It's sort of neat that you can make up other roles and assign them various permission flags. You could make up an 'everything but managing users' level for your clients if you felt it was necessary.
I haven't seen the 'browsers' used too often. Usually to a 'subscriber only' subweb.
> Do you give out the URL for the web-based management page for > the site, or can the clients do anything they need from the FP editor? >
I haven't used frontpage in so long that I don't remember what options work from it's menu. The main ones would be adding users, changing roles and adding sub-webs. If they work from the client great. If they don't, they have the web.
I believe that with the 2002 extensions it automatically opens the web page when the client tries to do something that doesn't work through the menu. I've never been asked for the url, and I don't give clients the site admin port # or user/pass. That's only for us (the host provider.)
-- Jacob _______________________________________________ Apache-FP mailing list Apache-FP@lists.joshie.com http://lists.joshie.com/mailman/listinfo/apache-fp
Donations:
http://www.amazon.com/paypage/PT5LZITM9L227
