[EMAIL PROTECTED] wrote:
I posted about this earlier, look in forum archive.
If you're using Tomcat/JAAS and have your own user system, you just need
to turn off SLIDE's security constraints:
I apologize for that, but the Slide mailing list is not searchable any longer. Is there a searchable archive?
in Domain.xml look for <permission> tags
like this:
<objectnode classname="org.apache.slide.structure.SubjectNode"
uri="/files">
<!-- to make clear to stores that rely on it
this is a collection -->
<revision> <property name="resourcetype"><![CDATA[<collection/>]]></property> </revision> <!-- <permission action="all" subject="all"
inheritable="true" />-->
<!-- <permission action="all"
subject="authenticated" inheritable="true"/>--> <!-- <permission action="all"
subject="unauthenticated" inheritable="true"/>-->
<!-- <permission action="all" subject="/roles/user"
inheritable="true"/>-->
</objectnode>
You see, all permissions commented out. It only works this way if you don't use Slide's access system and have your own, with JAAS too.
I have developed a SecurityStore which returns all roles and users. I also made a JAAS Login Realm. I'm using Jetty.
I'm using the ACL system of slide, but I'm providing the roles and users via the security store.
I added a role (newrole) with 'allow all' permission to the files directory of the repos. When i try to connect with a user that has the newrole role to url http://localhost:13542/slide/files/, it tells me that i'm not authorized. In the server, the following error message occurs:
Mar 30, 2005 4:41:26 PM CEST [PoolThread-10] [WARNING] AUTH FAILURE: role for jos
When I add the newrole to the auth-constraint, it works fine. So, I just want to change the auth-constraint when slide is running. Or I want to be capable of saving this list somewhere else... But i guess this isn't possible?
David.
--------------------------------------------------
Inventive Designers' Email Disclaimer:
http://www.inventivedesigners.com/email-disclaimer
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
