Hy, I am working on building a minimal small cms portlet, and a file download portlet for jetspeed 1.4 / 1.5.
For both of them I have the requirement, that I need to expose binary data to the user, but I want the exposure to be controlled by the jetspeed security mechanisms. A more detailed example for those having time to read: I will build a content-admin and viewer portlet, for which I can customize several individual content areas. Each of those areas (with all containing content, text, images, whatever ) is a security item which I can, want and must control access to, because not everybody is allowed to read everything. But then, I have images in my content. I could just put them on a fileserver with http access, and content would be security controlled, but images/binaries are not. For most images that would be o.k., but there are images, like business reports and such, that aren't made for everybody's eyes. I am not willing to start playing with .htaccess files or something like that, I have all my security logic and user information in the portal. The same goes for an up/download Portlet, where Moderators can upload things for some closed groups of people to access. The problem is now, that I have no idea if and how I can output images with a portlet, as far as I know I can't at all, portlets can only do wml or html, they aren't supposed to do something like that, is that correct? One idea to solve this would be to create something like a "binary output" servlet, to which I give access to the jetspeed security system, and any image link in my cms-viewer portlet would address this servlet with an image id plus the users authorization credentials. Another one would be maybe, when there's the need for a user to get an image or file, like because he's requests a cms-page with images or he requested to download a file, I could copy the file to the fileserver with the name build from a combination of the user's session id plus the original file name. Both sound a bit ugly to me - so, do you have another idea, or a judgment which of my two ideas would be the less ugly one? Henning --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
