Bugs item #1529392, was opened at 2006-07-26 18:29
Message generated for change (Settings changed) made by pegacat
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=480577&aid=1529392&group_id=55394
Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
>Status: Closed
>Resolution: Out of Date
Priority: 5
Private: No
Submitted By: Trudi Ersvaer (trudiersvaer)
Assigned to: Nobody/Anonymous (nobody)
Summary: Previous connection displayed
Initial Comment:
JXplorer can sometimes show attributes that are hidden
with static access controls
Steps to reproduce problem
Start Democorp and login using JXplorer
Give a staff member under
<c AU><o DEMOCORP><ou Corporate><ou Administration>
a password
Give a staf member under
<c AU><o DEMOCORP><ou Corporate><ou Finance>
a password
open ...\config\server\democorp.dxc
Change as follows
# operational settings
#source "../settings/default.dxc";
source "../settings/democorp.dxc";
...
# access controls
clear access;
#source "../access/default.dxc";
source "../access/democorp.dxc";
In ...\config\settings\
Copy default.dxc as democorp.dxc
Add the lines
# security controls
set access-controls = true;
set password-policy = true;
In ...\config\access\
Copy default.dxc as democorp.dxc
Add the lines
set access-controls = true;
set dynamic-access-control = false;
set reg-user = {
own-entry
subtree = <c AU><o DEMOCORP><ou Corporate><ou
Administration>
attrs = userPassword
perms = modify
};
set super-user = {
user-subtree = <c AU><o DEMOCORP><ou Corporate><ou
Finance>
};
Save all and stop and restart the Democorp DSA
Using JXplorer login as the staff member under
<c AU><o DEMOCORP><ou Corporate><ou Finance>
who you gave a password and view their details in HTML
view.
Click Disconnect
Click Connect
login as the staff member under
<c AU><o DEMOCORP><ou Corporate><ou Administration>
In HTML View, in the drop down box click on simple.html
Then in the drop down box click on text.html
JXplorer now shows the attributes from the previous
connected session. Even though this user does not have
access.
Just realised that this has nothing to do with access
controls. If you simply view some details in HTML
view, then disconnect and connect again, and then
change the drop down under HTML view, you can always
see the details from the previous connection.
----------------------------------------------------------------------
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=480577&aid=1529392&group_id=55394
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Jxplorer-devel mailing list
Jxplorer-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jxplorer-devel
