It's best to use gmane.org as your news:// service. There you'll have mailing list in nice newsgroup format.

[EMAIL PROTECTED] wrote:
I posted about this earlier, look in forum archive.
If you're using Tomcat/JAAS and have your own user system, you just need


to turn off SLIDE's security constraints:

I apologize for that, but the Slide mailing list is not searchable any longer. Is there a searchable archive?



in Domain.xml
look for <permission> tags

like this:

<objectnode classname="org.apache.slide.structure.SubjectNode"

uri="/files">

<!-- to make clear to stores that rely on it

this is a collection -->

                        <revision>
                            <property
name="resourcetype"><![CDATA[<collection/>]]></property>
                        </revision>
                        <!-- <permission action="all" subject="all"


inheritable="true" />-->

<!-- <permission action="all"


subject="authenticated" inheritable="true"/>-->
                    <!--  <permission action="all"


subject="unauthenticated" inheritable="true"/>-->
<!-- <permission action="all" subject="/roles/user"

inheritable="true"/>-->

                </objectnode>

You see, all permissions commented out. It only works this way if you
don't use Slide's access system and have your own, with JAAS too.


I have developed a SecurityStore which returns all roles and users. I also made a JAAS Login Realm. I'm using Jetty.

I'm using the ACL system of slide, but I'm providing the roles and users via the security store.
I added a role (newrole) with 'allow all' permission to the files directory of the repos. When i try to connect with a user that has the newrole role to url http://localhost:13542/slide/files/, it tells me that i'm not authorized. In the server, the following error message occurs:
Mar 30, 2005 4:41:26 PM CEST [PoolThread-10] [WARNING] AUTH FAILURE: role for jos
When I add the newrole to the auth-constraint, it works fine. So, I just want to change the auth-constraint when slide is running. Or I want to be capable of saving this list somewhere else... But i guess this isn't possible?


David.


--------------------------------------------------

Inventive Designers' Email Disclaimer:

http://www.inventivedesigners.com/email-disclaimer


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Reply via email to