Re: about searching

2004-12-22 Thread Stefan Lützkendorf
Lucene integration is available in the currently unrelease HEAD.
For this you can find some infos at
http://wiki.apache.org/jakarta-slide/DaslConfiguration
Stefan
haipeng du wrote:
How could I use Lucene in Slide? Could somebody give me some examples
that I can follow?
Thanks a lot.
--
Stefan Lützkendorf  --  [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: WCK: session parameter

2004-12-22 Thread EngR H
Hello Oliver, all,
 
Thanz Oliver for the reply!
So far, I succeeded to let OC4J authenicate slide and calls WCK layer :)
 
The bad thing is that I get my principal  connection objects set to null 
inside the begin function, it seems that somthing is wrong with my 
configuration. Or is there any implementations that should be done to return 
the connection object filled??
 
Another issue is that, although the login screen appears when accessing slide 
from the web(internet explorer), it doesnot appear when accessing it through a 
web folder?? it acts as it is already authenticated! did any body encounter 
that b4?
 
Thanx alot
Rony
 


Oliver Zeigermann [EMAIL PROTECTED] wrote:
In 

void begin(Service service, Principal principal, Object
connection, LoggerFacade logger, Hashtable parameters)
throws ServiceAccessException,
ServiceParameterErrorException, ServiceParameterMissingException;

there is the Object connection which will be reasonably filled when
you use WCK JAAS implementation.

Oliver


On Wed, 15 Dec 2004 23:11:23 -0800 (PST), EngR H wrote:
 Is it better to use JAAS ?? to map my CMS user to a user on my App. server, 
 and then using the principal inside my custom store to login to my CMS??
 
 Oliver Zeigermann wrote:Not directly. Maybe using some ThreadLocal hack would 
 do, but this
 would require changes to Slide.
 
 Oliver
 
 On Wed, 15 Dec 2004 01:16:06 -0800 (PST), EngR H wrote:
  I need to let the WebDAV servlet to save my CMS session in its request. and
  then pass it to my custom store. is that possible??
 
 
  Oliver Zeigermann wrote:
  What kind of request parameter? The session? What for`?
 
  Oliver
 
 
  On Tue, 14 Dec 2004 07:19:51 -0800 (PST), EngR H wrote:
   Hello there!
  
   Am using WCK and need to send parameters through the request object of the
  WebDAVServlet to my custom store ..
  
   is that possible ??if yes, is that through the parameters Hashtable sent
  to the begin() function?? if yes, where I can set a parameter there??
  
   Thanx alot!
   Rony
  
  
   -
   Do you Yahoo!?
   All your favorites on one personal page †Try My Yahoo!
  
 
  -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
 
 
  __
  Do You Yahoo!?
  Tired of spam? Yahoo! Mail has the best spam protection around
  http://mail.yahoo.com
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 -
 Do you Yahoo!?
 Yahoo! Mail - Easier than ever with enhanced search. Learn more.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
Do you Yahoo!?
 Take Yahoo! Mail with you! Get it on your mobile phone.

MS XP client oddities

2004-12-22 Thread Morten
Hi. I have 2 identical Slide configurations Good and Bad. Both are 
RC1 bundled w. Tomcat 5.0.28, and both are unmodified.

Good runs on localhost (WinXP), and I can connect fine to that using 
WebFolders. Bad runs on a remote Linux box, and I can initiate the 
connection process, get prompted for login/password, but then connection 
process fails (the WebFolders return message is in danish, translated: 
The specified filder is apparently not available. Specify another 
folder.).

Both instances have the OPTIONS in the log file:
Bad:
http-80-Processor24, 22-Dec-2004 07:19:41, root, OPTIONS, 200 OK, 122 
ms, /

Good:
http-8080-Processor25, 22-dec-2004 14:21:18, root, OPTIONS, 200 OK, 10 
ms, /

But for Bad, that's all there is, whereas for Good, two PROPFIND's 
are also present:

http-8080-Processor25, 22-dec-2004 14:21:18, root, PROPFIND, 207 
Multi-Status, 20 ms, /
http-8080-Processor25, 22-dec-2004 14:21:18, root, PROPFIND, 207 
Multi-Status, 20 ms, /

Can any of you come up with a sound explanation for why I can connect to 
Good, but not Bad? They're identical setup's, only port number and 
VMs are different.

Br,
Morten
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: MS XP client oddities

2004-12-22 Thread Alessandro Apostoli
Hi Morten...
take a look at this two articles,
http://greenbytes.de/tech/webdav/webdav-redirector-list.html
http://greenbytes.de/tech/webdav/webfolder-client-list.html
it appears that on ports different than 80 you can expect
pretty much anything, like non-ascii URL s not working,
connection failures and the likes.
In my personal experience a Windows XP SP2 + latest fixes with
slide on port 80  as root namespace (that is slide mounted on
http://your.ip.address) is working
Alessandro.
Morten wrote:
Hi. I have 2 identical Slide configurations Good and Bad. Both are 
RC1 bundled w. Tomcat 5.0.28, and both are unmodified.

Good runs on localhost (WinXP), and I can connect fine to that using 
WebFolders. Bad runs on a remote Linux box, and I can initiate the 
connection process, get prompted for login/password, but then 
connection process fails (the WebFolders return message is in danish, 
translated: The specified filder is apparently not available. Specify 
another folder.).

Both instances have the OPTIONS in the log file:
Bad:
http-80-Processor24, 22-Dec-2004 07:19:41, root, OPTIONS, 200 OK, 
122 ms, /

Good:
http-8080-Processor25, 22-dec-2004 14:21:18, root, OPTIONS, 200 OK, 
10 ms, /

But for Bad, that's all there is, whereas for Good, two PROPFIND's 
are also present:

http-8080-Processor25, 22-dec-2004 14:21:18, root, PROPFIND, 207 
Multi-Status, 20 ms, /
http-8080-Processor25, 22-dec-2004 14:21:18, root, PROPFIND, 207 
Multi-Status, 20 ms, /

Can any of you come up with a sound explanation for why I can connect 
to Good, but not Bad? They're identical setup's, only port number 
and VMs are different.

Br,
Morten
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: MS XP client oddities

2004-12-22 Thread kranga

Another culprit (for unicode) is most likely an old version of msdaipp.dll.
If you have version 8.x it fails on unicode. If you have Office 2003 then a
newer version is installed (11.x). That fixes the problem.

1. Open the command prompt and go to c:\program files\common
files\system\ole db
2. Type: regsvr32 /u msdaipp.dll
3. Rename the msdaipp.dll to msdaipp.dll.old
4. Copy the new version to the same directory.
5. Type: regsvr32 msdaipp.dll




- Original Message - 
From: Morten [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, December 22, 2004 8:31 AM
Subject: MS XP client oddities



 Hi. I have 2 identical Slide configurations Good and Bad. Both are
 RC1 bundled w. Tomcat 5.0.28, and both are unmodified.

 Good runs on localhost (WinXP), and I can connect fine to that using
 WebFolders. Bad runs on a remote Linux box, and I can initiate the
 connection process, get prompted for login/password, but then connection
 process fails (the WebFolders return message is in danish, translated:
 The specified filder is apparently not available. Specify another
 folder.).

 Both instances have the OPTIONS in the log file:

 Bad:
 http-80-Processor24, 22-Dec-2004 07:19:41, root, OPTIONS, 200 OK, 122
 ms, /

 Good:
 http-8080-Processor25, 22-dec-2004 14:21:18, root, OPTIONS, 200 OK, 10
 ms, /

 But for Bad, that's all there is, whereas for Good, two PROPFIND's
 are also present:

 http-8080-Processor25, 22-dec-2004 14:21:18, root, PROPFIND, 207
 Multi-Status, 20 ms, /
 http-8080-Processor25, 22-dec-2004 14:21:18, root, PROPFIND, 207
 Multi-Status, 20 ms, /

 Can any of you come up with a sound explanation for why I can connect to
 Good, but not Bad? They're identical setup's, only port number and
 VMs are different.

 Br,

 Morten


 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: MS XP client oddities

2004-12-22 Thread Morten
Hi,
Interesting, but depressing, links. Anyway, I changed to WebDrive as DAV 
client in order to troubleshoot a bit further. Apparently it's our 
firewall that blocks the PROPFIND method :-/ (log below).

But what DAV client do you guys usually recommend? Cheap is good...
Thanks,
Morten
12/22/04 15:00:18 D34 [U:] PROPFIND /slide/ HTTP/1.1
12/22/04 15:00:18 D34 [U:] Content-Type: text/xml
12/22/04 15:00:18 D34 [U:] Depth: 0
12/22/04 15:00:18 D34 [U:] Host: www.kikobu.com
12/22/04 15:00:18 D34 [U:] User-Agent: WebDrive/6.05 NT DAV
12/22/04 15:00:18 D34 [U:] Translate: f
12/22/04 15:00:18 D34 [U:] Connection: close
12/22/04 15:00:18 D34 [U:] Cookie: 
JSESSIONID=9BDC246ACDF3072464E36F3917EF9053
12/22/04 15:00:18 D34 [U:] Authorization: Basic cm9vdDpyb290
12/22/04 15:00:18 D34 [U:] ?xml version=1.0 encoding=utf-8 
?propfind 
xmlns=DAV:propdisplayname/lockdiscovery//prop/propfind
12/22/04 15:00:18 D34 [U:] HTTP/1.0 400 Bad Request
12/22/04 15:00:18 D34 [U:] Pragma: no-cache
12/22/04 15:00:18 D34 [U:] Cache-Control: no-cache
12/22/04 15:00:18 D34 [U:] Content-Type: text/html
12/22/04 15:00:18 D34 [U:] Content-Length: 120
12/22/04 15:00:18 D34 [U:] 400 Bad Request
12/22/04 15:00:18 D34 [U:] TITLEError/TITLE
12/22/04 15:00:18 D34 [U:] BODY
12/22/04 15:00:18 D34 [U:] H1Error/H1
12/22/04 15:00:18 D34 [U:] FW-1 at roskilde: Sorry, the method you tried 
to use is not allowed./BODY
12/22/04 15:00:18 D34 [U:] Can't connect to WebDAV server at 
http://www.kikobu.com/slide/, 400 Bad Request

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Robust setup (Was: MS XP client oddities)

2004-12-22 Thread Morten
Hi,
http://greenbytes.de/tech/webdav/webdav-redirector-list.html
http://greenbytes.de/tech/webdav/webfolder-client-list.html
Seen in the light of this, what would you recommend as a robust setup? 
Does Slide put in any extra effort to work around MS client deficiencies?

My list of considerations for a robust setup so far:
1. Apache running HTTPS in front of Slide (ProxyPass via HTTP)
2. Apache proxies so a fixed port is not needed in the URL
3. Apache uses mod_auth_msfix for BasicAuth fixes
4. Apache rewrites URLs so DAV repositories are root folders, eg.
   http://dav.foo.myhost.com/ proxies to http://myhost.com:8080/dav/foo/
Other recommendations?
Thanks,
Morten
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: Robust setup (Was: MS XP client oddities)

2004-12-22 Thread Julian Reschke
Morten wrote:
Hi,
http://greenbytes.de/tech/webdav/webdav-redirector-list.html
http://greenbytes.de/tech/webdav/webfolder-client-list.html

Seen in the light of this, what would you recommend as a robust setup? 
Does Slide put in any extra effort to work around MS client deficiencies?

My list of considerations for a robust setup so far:
1. Apache running HTTPS in front of Slide (ProxyPass via HTTP)
2. Apache proxies so a fixed port is not needed in the URL
3. Apache uses mod_auth_msfix for BasicAuth fixes
4. Apache rewrites URLs so DAV repositories are root folders, eg.
   http://dav.foo.myhost.com/ proxies to http://myhost.com:8080/dav/foo/
I'm curious: how is URL rewriting supposed to work with WebDAV? For 
instance, PROPFIND response bodies contain URLs that will not get 
rewritten on their way back to the client, right?

Julian
--
green/bytes GmbH -- http://www.greenbytes.de -- tel:+492512807760
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: Robust setup (Was: MS XP client oddities)

2004-12-22 Thread Morten
4. Apache rewrites URLs so DAV repositories are root folders, eg.
   http://dav.foo.myhost.com/ proxies to http://myhost.com:8080/dav/foo/

I'm curious: how is URL rewriting supposed to work with WebDAV? For 
instance, PROPFIND response bodies contain URLs that will not get 
rewritten on their way back to the client, right?
Good point.
It's not feasible to rewrite the returned content as that can 
potentially be large amounts of data.

Coming up with a good mod_rewrite conditional URL rewrite scheme might 
be an idea. That would place some constraints on what directory names 
one can allow in the DAV repository though (as one would need to be 
certain that directories starting with eg. /dav/.*/ should be rewritten).

Hmm..
Morten
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


AW: MS XP client oddities

2004-12-22 Thread Daniel Florey
I'd recommend netdrive from novell as WebDAV-client. This one works even in
the dos shell and handles locks and properties. And it's free.

Daniel

 -Ursprüngliche Nachricht-
 Von: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]
 Im Auftrag von Morten
 Gesendet: Mittwoch, 22. Dezember 2004 15:12
 An: [EMAIL PROTECTED]
 Betreff: Re: MS XP client oddities
 
 
 Hi,
 
 Interesting, but depressing, links. Anyway, I changed to WebDrive as DAV
 client in order to troubleshoot a bit further. Apparently it's our
 firewall that blocks the PROPFIND method :-/ (log below).
 
 But what DAV client do you guys usually recommend? Cheap is good...
 
 Thanks,
 
 Morten
 
 
 12/22/04 15:00:18 D34 [U:] PROPFIND /slide/ HTTP/1.1
 12/22/04 15:00:18 D34 [U:] Content-Type: text/xml
 12/22/04 15:00:18 D34 [U:] Depth: 0
 12/22/04 15:00:18 D34 [U:] Host: www.kikobu.com
 12/22/04 15:00:18 D34 [U:] User-Agent: WebDrive/6.05 NT DAV
 12/22/04 15:00:18 D34 [U:] Translate: f
 12/22/04 15:00:18 D34 [U:] Connection: close
 12/22/04 15:00:18 D34 [U:] Cookie:
 JSESSIONID=9BDC246ACDF3072464E36F3917EF9053
 12/22/04 15:00:18 D34 [U:] Authorization: Basic cm9vdDpyb290
 12/22/04 15:00:18 D34 [U:] ?xml version=1.0 encoding=utf-8
 ?propfind
 xmlns=DAV:propdisplayname/lockdiscovery//prop/propfind
 12/22/04 15:00:18 D34 [U:] HTTP/1.0 400 Bad Request
 12/22/04 15:00:18 D34 [U:] Pragma: no-cache
 12/22/04 15:00:18 D34 [U:] Cache-Control: no-cache
 12/22/04 15:00:18 D34 [U:] Content-Type: text/html
 12/22/04 15:00:18 D34 [U:] Content-Length: 120
 12/22/04 15:00:18 D34 [U:] 400 Bad Request
 12/22/04 15:00:18 D34 [U:] TITLEError/TITLE
 12/22/04 15:00:18 D34 [U:] BODY
 12/22/04 15:00:18 D34 [U:] H1Error/H1
 12/22/04 15:00:18 D34 [U:] FW-1 at roskilde: Sorry, the method you tried
 to use is not allowed./BODY
 12/22/04 15:00:18 D34 [U:] Can't connect to WebDAV server at
 http://www.kikobu.com/slide/, 400 Bad Request
 
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: WCK: session parameter

2004-12-22 Thread EngR H
Hello again,
 
I succeeded now to let OC4J use the 
org.apache.slide.simple.reference.FakeSessionManager
but after giving the username/password it gives: Page cannot be displayed 
also using org.apache.slide.jaas.spi.SlideLoginModule gives the same result! :(
 
But when I change the configuration to use my app. server sample login module 
it succeeds to login and views my CMS structure but with null connection and 
principal objects (Normal)
 
Any ideas??
 
Also, still accessing my web folder does not prompt the login screen, it 
bypasses the authentication and goes directly to the CMS structure only 
accessing it through Internet browser promps the login screen :(
 
Any suggestions would be highly appreciated ...
Thaz a lot !!!
 
regards,
Rony
 
EngR H [EMAIL PROTECTED] wrote:
Hello Oliver, all,

Thanz Oliver for the reply!
So far, I succeeded to let OC4J authenicate slide and calls WCK layer :)

The bad thing is that I get my principal  connection objects set to null 
inside the begin function, it seems that somthing is wrong with my 
configuration. Or is there any implementations that should be done to return 
the connection object filled??

Another issue is that, although the login screen appears when accessing slide 
from the web(internet explorer), it doesnot appear when accessing it through a 
web folder?? it acts as it is already authenticated! did any body encounter 
that b4?

Thanx alot
Rony



Oliver Zeigermann wrote:
In 

void begin(Service service, Principal principal, Object
connection, LoggerFacade logger, Hashtable parameters)
throws ServiceAccessException,
ServiceParameterErrorException, ServiceParameterMissingException;

there is the Object connection which will be reasonably filled when
you use WCK JAAS implementation.

Oliver


On Wed, 15 Dec 2004 23:11:23 -0800 (PST), EngR H wrote:
 Is it better to use JAAS ?? to map my CMS user to a user on my App. server, 
 and then using the principal inside my custom store to login to my CMS??
 
 Oliver Zeigermann wrote:Not directly. Maybe using some ThreadLocal hack would 
 do, but this
 would require changes to Slide.
 
 Oliver
 
 On Wed, 15 Dec 2004 01:16:06 -0800 (PST), EngR H wrote:
  I need to let the WebDAV servlet to save my CMS session in its request. and
  then pass it to my custom store. is that possible??
 
 
  Oliver Zeigermann wrote:
  What kind of request parameter? The session? What for`?
 
  Oliver
 
 
  On Tue, 14 Dec 2004 07:19:51 -0800 (PST), EngR H wrote:
   Hello there!
  
   Am using WCK and need to send parameters through the request object of the
  WebDAVServlet to my custom store ..
  
   is that possible ??if yes, is that through the parameters Hashtable sent
  to the begin() function?? if yes, where I can set a parameter there??
  
   Thanx alot!
   Rony
  
  
   -
   Do you Yahoo!?
   All your favorites on one personal page †Try My Yahoo!
  
 
  -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
 
 
  __
  Do You Yahoo!?
  Tired of spam? Yahoo! Mail has the best spam protection around
  http://mail.yahoo.com
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 -
 Do you Yahoo!?
 Yahoo! Mail - Easier than ever with enhanced search. Learn more.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
Do you Yahoo!?
Take Yahoo! Mail with you! Get it on your mobile phone.

-
Do you Yahoo!?
 Meet the all-new My Yahoo! – Try it today! 

Re: WCK: session parameter

2004-12-22 Thread Oliver Zeigermann
Hi Ragia,

Webfolders remember the user you used to log in. Concerning null
connection, you will have to implement a session manager that maps to
your data.

Oliver

On Wed, 22 Dec 2004 09:26:57 -0800 (PST), EngR H [EMAIL PROTECTED] wrote:
 Hello again,
 
 I succeeded now to let OC4J use the 
 org.apache.slide.simple.reference.FakeSessionManager
 but after giving the username/password it gives: Page cannot be displayed
 also using org.apache.slide.jaas.spi.SlideLoginModule gives the same result! 
 :(
 
 But when I change the configuration to use my app. server sample login module 
 it succeeds to login and views my CMS structure but with null connection and 
 principal objects (Normal)
 
 Any ideas??
 
 Also, still accessing my web folder does not prompt the login screen, it 
 bypasses the authentication and goes directly to the CMS structure only 
 accessing it through Internet browser promps the login screen :(
 
 Any suggestions would be highly appreciated ...
 Thaz a lot !!!
 
 regards,
 Rony

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: WCK: JAAS

2004-12-22 Thread James Mason
On Tue, 2004-12-21 at 22:52 -0800, EngR H wrote:
 Hello James,
 Thanx for the reply!
 As I told u in my post, Yes, the web.xml requires authentication,
 although the login window doesnot appear when I open a webfolder..
 while it appears if I accessed my webdav servlet through Internet
 Explorer!! 

Web Folders will remember authentication information for an amazing long
period of time. The only sure-fire way to make it forget is to log out
of Windows then log back in. This could be the reason you're not seeing
a login prompt; Web Folders is remembering values you entered earlier.

  
 Another question is that, does it require certain class implementation
 to use jaas on my Oracle OC4J application server, or it is just
 configuration files issue??

I don't know :/. I've never used OC4J before.

-James

  
 Thanx alot!
 Rony
  
 James Mason [EMAIL PROTECTED] wrote:
 Make sure your webapp is requiring users to authenticate. Check the
 bottom of the web.xml file, it should be fairly obvious... (I think)
 
 -James
 
 On Mon, 2004-12-20 at 05:15 -0800, EngR H wrote:
  Hello there,
  
  Am using Slide WCK on OC4J, and intend to use JAAS authentication, I used 
  the bulid.xml to generate the slide.war, and added the WCK jar to the lib 
  directory of my OC4J. every thing worx fine and the webdav is working on my 
  CMS. the problem is that am not prompted with the authentication dialog 
  when accessing the webdav server! although i didn't comment the security 
  entries in web.xml as mentioned here 
  http://jakarta.apache.org/slide/howto-acl.html . is there any thing i 
  should configure for an app. server to use JAAS for slide app. or just 
  deploying the war file as I did??
  
  Thanx in advance
  
  Rony!
  
  
  
  __
  Do You Yahoo!?
  Tired of spam? Yahoo! Mail has the best spam protection around 
  http://mail.yahoo.com 
 
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 
 __
 Do You Yahoo!?
 Tired of spam?  Yahoo! Mail has the best spam protection around 
 http://mail.yahoo.com 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Using external privilege control

2004-12-22 Thread James Mason
It should only be hardcoded in MacroPropertyUpdater. If you look at
NamespaceAccessTokenImpl you'll notice it first tries to instantiate the
class named in the acl_semantics parameter. You can copy this logic to
MacroPropertyUpdater to make them equivalent (this will probably be done
in 2.1.1) or you can look at the code in HEAD for the more flexible
implementation that will be part of 2.2.

-James

On Wed, 2004-12-22 at 19:39 -0800, Gao Jun wrote:
 James,
  
 Thanks for the reply. I like the idea of working on the ACLSecurityImpl layer.
 However, I found instantiating of this impl class is hard coded in several 
 classes, like
 
 org.apache.slide.macro.MacroPropertyUpdater.getContentHelper()
 ...
 Security security = new ACLSecurityImpl(event.getNamespace(),
  event.getNamespace().getConfig())
 ...
  
 
 org.apache.slide.common.NamespaceAccessTokenImpl constructor
 ...
 securityHelper = new ACLSecurityImpl(namespace, namespace.getConfig())
 ...
  
 
 I am not sure how many other places have this kind of hardcoding. So for now, 
 we 
 have to change all those places to make our own SecurityImpl class work, 
 right?
 Thanks.
  
 regards,
  
 Jun
 
 James Mason [EMAIL PROTECTED] wrote:
 You can also provide your Security implementation. ACLSecurityImpl is
 extendable (or will be shortly) so it is a good place to start. You can
 override hasPermission() to give certain users complete access to the
 system.
 
 Coming in 2.2 is an easy way to provide your own implementations of
 Content, Structure, Lock and Macro as well. This will let you insert
 custom permission checking logic (instead of just canRead, canWrite,
 etc) into the content manipulation process.
 
 -James
 
 On Mon, 2004-12-20 at 14:21 -0600, Tauzell, Dave wrote:
  We created our own Store objects. We basically copied the JDBC* classes
  and just added in our own security checks. This isn't very elegant but
  it works and allows tight integration with our existing security system.
  
  -Dave
  
  -Original Message-
  From: Chris O'Connell [mailto:[EMAIL PROTECTED] 
  Sent: Monday, December 20, 2004 2:05 PM
  To: Slide Users Mailing List
  Subject: RE: Using external privilege control
  
  
  Gao,
  
  The simple solution we are using to this problem is to just turn off the
  Slide authentication. Just comment out all the stuff in the web.xml
  that has your container checking for user info. Slide will consider the
  user to be 'unauthenticated'. If you set up your Slide permissions so
  that 'unauthenticated' user can perform reads and writes (actually, I
  don't think you need to do anything to make this happen) you will be
  good to go.
  
  We are toying with the idea of setting a userID as the 'comment'
  property (for example) so that we know which user did what to each item
  in the store.
  
  Note, if you do this, your store is wide open. We are going to use IP
  filtering so that we will only accept requests to the Slide application
  from our own data center. Depending on the contents you are storing,
  this may not be good enough for you. We are storing images and .wav
  files, so it isn't such a big deal.
  
  Chris
  
  -Original Message-
  From: Gao Jun [mailto:[EMAIL PROTECTED]
  Sent: Monday, December 20, 2004 12:33 AM
  To: slide-user@jakarta.apache.org
  Subject: Using external privilege control
  
  
  Hi,
  
  We are using Slide in our application, as the content management module.
  Now we are trying to achieve integration of privilege management
  between Slide and our system's other parts: Our system has its own
  privilge and role management module. 
  
  We want to do this, if a user
  is having some privilege in our system, like MANAGE_DOCUMENT, then we
  will allow this user to be able to access (read and write) any documents
  in slide, without checking his/her privilege in Slide. 
  
  I'd like to get some suggestion from all of you. What's the best
  stratege to do this? What part of code in Slide should be modified to
  achieve this?
  
  Thanks a lot.
  
  regards,
  
  Jun
  
  
  -
  Do you Yahoo!?
  All your favorites on one personal page - Try My Yahoo!
  
  -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
  
  
  -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
  
  
 
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 
   
 -
 Do you Yahoo!?
  Yahoo! Mail - Find what you need with new enhanced search. Learn more.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]