Hi Jason,

My guess would be that your problem isn't a CGI-specific one, but just
a case of REBOL's standard security level settings.  REBOL runs in a
sandbox, and any attempt to access files outside of it causes a
warning.  See "Security Issues" in the Core Guide's "Operation"
section here...

http://www.rebol.com/docs/core23/rebolcore-2.html

for how to alter the security levels.

Hope that puts you on the right track.

Carl.


On 05-Sep-02, Jason Cunliffe wrote:

> "Rebol CGI Permissions 101" I guess.. I can now upload files happily
> via http, using Andreas' multipart/form script. But still need help
> understanding how basic file and directory permissions work from
> rebol CGI.

> Example: When I login and run my %testupdir.r script from the bash
> shell it works OK:

> ----------------------
> #!/home/rebol/rebol -cs
> REBOL []
> print "Content-type: text/html^/^/"

> message: "hello testing writing to a directory via cgi script"
> append message rejoin [newline read %. " "  now/time]
> updir: %uploads/
> filename: %testupdir.txt
> filepath: join updir filename
> write filepath message   ; does not work from CGI
> ;write filename message  ; works from CGI
> quit
> ----------------------

> Login and then running script manually from REBOL shell works too,
> but I get security prompt:
>>> now
> == 4-Sep-2002/18:44:08-4:00
>>> do %testupdir.r

> REBOL - Security Check:
> Script requests permission to open a port for read/write on:
> /web/turbulence/www/Works/trees/vanilla/uploads/testupdir.txt
> Yes, allow all, no, or quit? (Y/A/N/Q) Y
>>> read %uploads/testupdir.txt
> == {hello testing writing to a directory via cgi script
> 18:44:27longpath}


> BUT, when I call it as CGI directly in a browser url, it returns
> this error:

> ** Access Error: Cannot open
> /web/turbulence/www/Works/trees/vanilla/uploads/testupdir.txt **
> Where: do-boot ** Near: write filepath message

> However, if I change script above instead to write into the current
> directory, then its OK!


> Q1: What do I need to do to so my script has permissions to run from
> CGI and read/write into a subdirectory?

> Q2: Why does it work ok as bash shell executable, but needs manual
> confirmation in REBOL shell.
> Q3: What options are there for controlling these permissions? Q4:
> What checks can I run in rebol CGI scripts to check permission first
> for directories
> => create, read, or write

> thanks
> ./Jason


-- 
Carl Read

-- 
To unsubscribe from this list, please send an email to
[EMAIL PROTECTED] with "unsubscribe" in the 
subject, without the quotes.

Reply via email to