Hi,

I finally success! What I didn't know, is that you must give the read right
to a user on a root folder, if you want to give him further all the rights.
So for example, 
I have a group where I put all the users (roles/user)


/                -> /roles/user can read (right not inherited)
/files   -> /roles/user can read (right not inherited)
/roles   -> roles/user cannot read 
/files/toto  -> roles/user cannot do anything  \ but it need to be careful 
                    Roles/toto can do everything        / about the order


Thank you very much for your device,

Claire


-----Message d'origine-----
De : Olivier Etienne [mailto:[EMAIL PROTECTED] 
Envoyé : vendredi 5 janvier 2007 10:45
À : Slide Users Mailing List
Objet : RE: ACL : all privileges set, but can't add files

Oups, yes, I mean role.

I don't have a role for each users but 2 roles and my dinamically create 
users and assign them to a role.

Olivier





"Claire D." <[EMAIL PROTECTED]> 
05/01/2007 10:26
Veuillez répondre à
"Slide Users Mailing List" <[email protected]>


A
"'Slide Users Mailing List'" <[email protected]>
cc

Objet
RE: ACL : all privileges set, but can't add files






Olivier,

When you say "profile", do you mean "roles"? Do you define a role for each
user( = a group with only one person), and give rights to this role? 

Thank you,
Claire



-----Message d'origine-----
De : Olivier Etienne [mailto:[EMAIL PROTECTED] 
Envoyé : jeudi 4 janvier 2007 17:44
À : Slide Users Mailing List
Objet : Re: ACL : all privileges set, but can't add files

Hi Claire,

In my configuration, I've the following folders :

/files => root only has rights
/files/pubic => accessible to anyone (read, create, ...)
/files/private => accessible only to users with a specific profile (root 
for
instance)

In my configuration I don't give rights to users but I give rights to
profiles and I link users to their profiles.

Olivier

2007/1/4, Claire D. <[EMAIL PROTECTED]>:
>
> Hi Olivier,
>
> I've deleted everything today, and re-install and re-configure Jakarta.
> And unfortunately the problem is still there!
> You say that you succeed creating users with restrictions, but do you 
have
> a
> folder where only root has rights, nobody else has rights, and 
subfolders,
> where for each folder, you give all the rights for one person? (Like
> described in this bug:
> http://issues.apache.org/bugzilla/show_bug.cgi?id=37022 )
>
> Claire
>
>
> -----Message d'origine-----
> De: Olivier Etienne [mailto:[EMAIL PROTECTED]
> Envoyé: mercredi 3 janvier 2007 16:50
> À: Slide Users Mailing List
> Objet: Re: ACL : all privileges set, but can't add files
>
> I thik that the first thing to do is to recreate your database from the
> domain.xlm because if you made many tests by changing your domain.xml,
> slide
> have certainly poluted your database. Slide checks and apply any
> modification found in this file at each startup BUT it only create new
> nodes
> and never drop them even if they are not anymore in the domain.xml.
> Then, the first step is to drop your database and to populate it from 
your
> domain.xml then you will be sure that the user definition in your DB is
> equal to what is described in domain.xml.
> If it still don't work, there's 2 solutions :
>   1) Your rights definition is not correct
>   2) It's a Slide BUG, gloups...
>
> But, I use slide and I succeed creating users with restrictions on some
> folders (read-only) and full access on others then keep the faith ;)
>
> 2007/1/3, Claire D. <[EMAIL PROTECTED]>:
> >
> > Hi,
> > Thank you for your answers.
> > I'm not sure that I've exactly the same error, because I don't give
> rights
> > to the owner of the folder, but to a user (from /users). If I give all
> > rights to a role, it's the same problem. Only root can do what he 
wants.
> > I look at the database table content, and it's well stored.
> > How solves it?
> >
> > Claire D.
> >
> >
> >
> >
> > -----Message d'origine-----
> > De: Miguel Figueiredo [mailto:[EMAIL PROTECTED]
> > Envoyé: mercredi 3 janvier 2007 10:29
> > À: 'Slide Users Mailing List'
> > Objet: RE: ACL : all privileges set, but can't add files
> >
> >
> > Hello Claire, Olivier,
> >
> > I believe you found a known bug in Slide implementation.
> >
> > Checkout this links:
> > http://issues.apache.org/bugzilla/show_bug.cgi?id=32352
> > http://issues.apache.org/bugzilla/show_bug.cgi?id=37022
> >
> > Best Regards,
> > Miguel Figueiredo
> >
> > -----Original Message-----
> > From: Olivier Etienne [mailto:[EMAIL PROTECTED]
> > Sent: quarta-feira, 3 de Janeiro de 2007 8:48
> > To: Slide Users Mailing List
> > Subject: Re: ACL : all privileges set, but can't add files
> >
> > Hi Claire,
> >
> > I already add the same problem, and it came for a misunderstood of 
mine
> > about the right management policy. The best way to check which rights
> are
> > set is to take a look at the database table content.
> >
> > Olivier
> >
> > 2007/1/3, Claire D. <[EMAIL PROTECTED]>:
> > >
> > > Hello,
> > > I manupulate the ACL, and I've got a problem, then I really don't
> > > anderstand
> > > :
> > > to a user (/slide/users/toto) , I give all rights ( ALL ) . He can
> list
> > > files, open files, BUT if he tries to add a file or create a folder, 
I
> > > obtain a 403 error : forbidden : access denied  !
> > > Is there somebody who has already obtained the type of problem?
> > > Thank you,
> > > Claire D.
> > >
> > >
> > >
> > >
> > >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to