Hi Peter, >If i try to download the files (while the session is still active) using >the >url's i get a http 500 response. >I suppose that the part /filemanager/files/view/ is not correct since the >fileview.jsp is not loaded, but i don't have a clue how to do it correctly.
Internal server error hmm..... don't know why.... however i found out that that files can be downloaded with such urls. For instance requesting: http://nbx2.nugo.org/nutriBASE/filemanager/files/view/-42d47d6797b7b05c-/home/dominic/raw+data/H_PropylParabenC1T1-r.gpr on nbx2 works but of course after a sucessul user log-in. > Peter Mertens wrote: >> [...] >> A possible solution would be to download the files to a folder in the >> webserver's directory and than ... . This is not a very nice solution >> for this problem so i hope somebody can help getting the url of the >> files on the base server. > > Hello, Peter. > > You should not put private files in place accessible to everyone, or you > will undermine the security provided by base2. As I understand it, base2 > obfusticates the mapping of files stored in 'home' directories and the > underlying filesystem - On our NBX systems the files are in: > > /usr/local/base2 -> /home/base2 > > This area should not be made accessible via the web server under any > curcumstances. However, one possibility might be to provide an SFTP > end-point as part of your web service so that a client can download the > files using proper authentication and encryption of the data in transit. > I reckon Peter wants to store the files on the websever directory and delete them afterwards? And not store the files in the base2 user file directory which should not be exposed, corrobarating Tony. May be any other directory except tomcat's webserver may suffice in the temp, but of course you need to deal with permission issues. By the way, none of the approach is ideal. Base 2.5 should hopefully address this problem. ¬Dominic ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ basedb-devel mailing list basedb-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/basedb-devel
