adding <permission action="all" subject="all" inheritable="true" />
or <permission action="all" subject="authenticated" inheritable="true"/>
doesn't help.
Finally, the only way to make it work is not to have any permissions on context;
<objectnode classname="org.apache.slide.structure.SubjectNode" uri="/files">
<revision>
<property name="resourcetype"><![CDATA[<collection/>]]></property>
</revision>
</objectnode>
James Mason wrote:
Best guess is that none of the other users have permissions granted to them. Take a look at http://wiki.apache.org/jakarta-slide/DataNode since it might help a little. The default Domain.xml grants all permissions to a user named "root". What you're going to need to do is grant the "write" permission to the users you want to have write access. If any user that authenticates using your JAAS module should have write access, you can use the "authenticated" principal. If not, you either need to grant rights to individual users or find a way to put the users into roles and grant rights to the roles.
Note that the permissions defined in Domain.xml are the initial set only. You can further modify the permissions at runtime with a WebDAV client.
-James
On Mon, 2005-01-17 at 23:11 +0200, Roman D wrote:
We have WCK implementation and JAAS login modules.
JAAS is implemented at Tomcat level of because of Slide/WCK limitation that you can have only one JAAS login module.(We need to have two login modules simultaneously).
Anyway, users are authenticated against DB and can access WebDAV, but all users can only do PROPFIND and GET. They get "403 Forbidden" for all "write" operations such as MKCOL, PUT, DELETE.
Except for user who's login name is "root", that user allowed to do all operations.
I know, Domain.xml is not documented, but maybe someone can tell us what is the config problem that only user with login name "root" have proper full access rights?
Thanks.
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
