Re: Permission system broken

Roel Gloudemans <[email protected]> Wed, 1 Sep 2004 17:13:59 +0200
Newsgroups gmane.comp.horde.giapeto
Message-ID <20040901171359.l6dvfok4ww48kgw0@localhost>
>>> At the moment (CVS HEAD today) the permission system in Giapeto is broken.
>>> Wether or not you're  authorized you'll get a permission denied; except for
>>> admin.
>>
>> Ok, I see the problem. When you set the permissions in Giapeto, it 
>> creates the
>> perms object as:
>> "giapeto:pages:<page_id>"
>>
>> However, Horde checks for authorisation to use giapeto by checking only the
>> object:
>> "giapeto"
>>
>> .....
>>
>> The best solution would be to get some hierarchy logic into the Horde
>> permissions, so that e.g. a user with an edit permission for a lower 
>> node perms
>> object should be allowed show/read to the parent nodes.
>
> I'm not near the testsystem at the moment, but in my mind 
> guest/default rights
> are set to read/show in the administration interface. The problem was created
> after doing a sync with CVS (Horde and all modules).
>
> When I'm home, I will verify that the settings are correct (if 
> they're not I'm
> going to feel really stupid, since you told me nothing new)
>

Whew, I'm not stupid. All permissions are set as they should be. But still no
access to the pages for guest or any other authorized user (except admin)

Cheers,
Roel.

-- 
giapeto mailing list - Join the hunt: http://horde.org/bounties/#giapeto
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [email protected]