[prev in list] [next in list] [prev in thread] [next in thread] 

List:       slide-user
Subject:    RE: Newbie: Please help!!: acl permissions: check two roles
From:       irene <irenita_p () yahoo ! es>
Date:       2007-03-07 17:47:49
Message-ID: 9358202.post () talk ! nabble ! com
[Download RAW message or body]



Hi, i think that is the correct solution.

But I have been reading the ACL spec and i founded the ACL invert. It'd
solved my problem, too.

Do you know if slide support inverts in ACLs?

Thanks



Andrea Colleoni wrote:
> 
> Hi,
> You can create a new role (say role_a_1) grouping the two roles:
> 
> <objectnode classname="org.apache.slide.structure.SubjectNode"
> uri="/roles/role_a_1">
> <revision>
> <property name="group-member-set">
> <![CDATA[
> 			<D:href xmlns:D='DAV:'>/roles/role_A</D:href>
> 	<D:href xmlns:D='DAV:'>/roles/role1</D:href>
> 		    ]]>
> </property>
> </revision>
> </objectnode>
> 
> Then give access to /files/folderA/folder1 at /roles/role_a_1.
> 
> <objectnode classname="org.apache.slide.structure.SubjectNode"
> uri="/files/folderA/folder1">
> 	<permission action="all" subject="/roles/role_a_1"/>
> </objectnode>
> 
> I think it can work but I've never tried to do so with roles; I've done it
> with groups and it worked... I think it could not be so different.
> 
> Bye.
> 
> _____________________
> Andrea Colleoni
> 
> > -----Original Message-----
> > From: irene [mailto:irenita_p@yahoo.es] 
> > Sent: Wednesday, March 07, 2007 9:35 AM
> > To: slide-user@jakarta.apache.org
> > Subject: RE: Newbie: Please help!!: acl permissions: check two roles
> > 
> > 
> > Hi Andrea.
> > Doing that, a user who has role_A but doesn't have role1, has 
> > access to
> > /files/folderA/folder1
> > 
> > I'd wanted that slide check the two roles. And only a user 
> > having roleA and
> > role1 can access.
> > 
> > Is this possible?
> > 
> > Thanks!!
> > 
> > 
> > Andrea Colleoni wrote:
> > > 
> > > Hi Irene,
> > > You can use the inheritable property to propagate 
> > permission of parent 
> > > folder to his children.
> > > In your Domain.xml, in the data section, you can write 
> > something like
> > > this:
> > > 
> > > <objectnode classname="org.apache.slide.structure.SubjectNode"
> > > uri="/files/folderB">
> > > 	<permission action="all" subject="/roles/roleB" 
> > inheritable="true"
> > > negative="false"/>
> > > </objectnode>
> > > 
> > > HTH
> > > 
> > > Bye.
> > > 
> > > _____________________
> > > Andrea Colleoni
> > > 
> > > > -----Original Message-----
> > > > From: irene [mailto:irenita_p@yahoo.es]
> > > > Sent: Tuesday, March 06, 2007 5:57 PM
> > > > To: slide-user@jakarta.apache.org
> > > > Subject: Newbie: Please help!!: acl permissions: check two roles
> > > > 
> > > > 
> > > > Hello, I have the next folders:
> > > > 
> > > > /folderA/ granted permission to role_A
> > > > /subfolder1/ granted permission to role_1
> > > > /subfolder2/ granted permission to role_2 /folderB/ granted 
> > > > permission to role_B
> > > > /subfolder1/ granted permission to role_1
> > > > /subfolder2/ granted permission to role_2
> > > > 
> > > > And a user A with the roles role_A and role_1
> > > > 
> > > > Slide doesn't allow A to access /folderB, but allows 
> > > > /folderB/subfolder1.
> > > > 
> > > > I want that only users who have role_B AND role_1 can access to
> > > > /folderB/subfolder1
> > > > 
> > > > How can I do this???
> > > > 
> > > > 
> > > > --
> > > > View this message in context: 
> > > > http://www.nabble.com/Newbie%3A-Please-help%21%21%3A-acl-permi
> > > > ssions%3A-check-two-roles-tf3356641.html#a9335664
> > > > Sent from the Jakarta Slide - User mailing list archive at 
> > Nabble.com.
> > > > 
> > > > 
> > > > 
> > ---------------------------------------------------------------------
> > > > To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
> > > > For additional commands, e-mail: slide-user-help@jakarta.apache.org
> > > > 
> > > > 
> > > 
> > > 
> > > 
> > ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
> > > For additional commands, e-mail: slide-user-help@jakarta.apache.org
> > > 
> > > 
> > > 
> > 
> > --
> > View this message in context: 
> > http://www.nabble.com/Newbie%3A-Please-help%21%21%3A-acl-permi
> > ssions%3A-check-two-roles-tf3356641.html#a9348582
> > Sent from the Jakarta Slide - User mailing list archive at Nabble.com.
> > 
> > 
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
> > For additional commands, e-mail: slide-user-help@jakarta.apache.org
> > 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: slide-user-help@jakarta.apache.org
> 
> 
> 

-- 
View this message in context: \
http://www.nabble.com/Newbie%3A-Please-help%21%21%3A-acl-permissions%3A-check-two-roles-tf3356641.html#a9358202
 Sent from the Jakarta Slide - User mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: slide-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: slide-user-help@jakarta.apache.org


[prev in list] [next in list] [prev in thread] [next in thread]