RE: Newbie: Please help!!: acl permissions: check two roles
irene <[email protected]> Wed, 7 Mar 2007 09:47:49 -0800 (PST)
| Newsgroups | gmane.comp.jakarta.slide.user |
|---|---|
| Message-ID | <[email protected]> |
Hi, i think that is the correct solution. But I have been reading the ACL spec and i founded the ACL invert. It'd solved my problem, too. Do you know if slide support inverts in ACLs? Thanks Andrea Colleoni wrote: > > Hi, > You can create a new role (say role_a_1) grouping the two roles: > > <objectnode classname="org.apache.slide.structure.SubjectNode" > uri="/roles/role_a_1"> > <revision> > <property name="group-member-set"> > <![CDATA[ > <D:href xmlns:D='DAV:'>/roles/role_A</D:href> > <D:href xmlns:D='DAV:'>/roles/role1</D:href> > ]]> > </property> > </revision> > </objectnode> > > Then give access to /files/folderA/folder1 at /roles/role_a_1. > > <objectnode classname="org.apache.slide.structure.SubjectNode" > uri="/files/folderA/folder1"> > <permission action="all" subject="/roles/role_a_1"/> > </objectnode> > > I think it can work but I've never tried to do so with roles; I've done it > with groups and it worked... I think it could not be so different. > > Bye. > > _____________________ > Andrea Colleoni > >> -----Original Message----- >> From: irene [mailto:[email protected]] >> Sent: Wednesday, March 07, 2007 9:35 AM >> To: [email protected] >> Subject: RE: Newbie: Please help!!: acl permissions: check two roles >> >> >> Hi Andrea. >> Doing that, a user who has role_A but doesn't have role1, has >> access to >> /files/folderA/folder1 >> >> I'd wanted that slide check the two roles. And only a user >> having roleA and >> role1 can access. >> >> Is this possible? >> >> Thanks!! >> >> >> Andrea Colleoni wrote: >> > >> > Hi Irene, >> > You can use the inheritable property to propagate >> permission of parent >> > folder to his children. >> > In your Domain.xml, in the data section, you can write >> something like >> > this: >> > >> > <objectnode classname="org.apache.slide.structure.SubjectNode" >> > uri="/files/folderB"> >> > <permission action="all" subject="/roles/roleB" >> inheritable="true" >> > negative="false"/> >> > </objectnode> >> > >> > HTH >> > >> > Bye. >> > >> > _____________________ >> > Andrea Colleoni >> > >> >> -----Original Message----- >> >> From: irene [mailto:[email protected]] >> >> Sent: Tuesday, March 06, 2007 5:57 PM >> >> To: [email protected] >> >> Subject: Newbie: Please help!!: acl permissions: check two roles >> >> >> >> >> >> Hello, I have the next folders: >> >> >> >> /folderA/ granted permission to role_A >> >> /subfolder1/ granted permission to role_1 >> >> /subfolder2/ granted permission to role_2 /folderB/ granted >> >> permission to role_B >> >> /subfolder1/ granted permission to role_1 >> >> /subfolder2/ granted permission to role_2 >> >> >> >> And a user A with the roles role_A and role_1 >> >> >> >> Slide doesn't allow A to access /folderB, but allows >> >> /folderB/subfolder1. >> >> >> >> I want that only users who have role_B AND role_1 can access to >> >> /folderB/subfolder1 >> >> >> >> How can I do this??? >> >> >> >> >> >> -- >> >> View this message in context: >> >> http://www.nabble.com/Newbie%3A-Please-help%21%21%3A-acl-permi >> >> ssions%3A-check-two-roles-tf3356641.html#a9335664 >> >> Sent from the Jakarta Slide - User mailing list archive at >> Nabble.com. >> >> >> >> >> >> >> --------------------------------------------------------------------- >> >> To unsubscribe, e-mail: [email protected] >> >> For additional commands, e-mail: [email protected] >> >> >> >> >> > >> > >> > >> --------------------------------------------------------------------- >> > To unsubscribe, e-mail: [email protected] >> > For additional commands, e-mail: [email protected] >> > >> > >> > >> >> -- >> View this message in context: >> http://www.nabble.com/Newbie%3A-Please-help%21%21%3A-acl-permi >> ssions%3A-check-two-roles-tf3356641.html#a9348582 >> Sent from the Jakarta Slide - User mailing list archive at Nabble.com. >> >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: [email protected] >> For additional commands, e-mail: [email protected] >> > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > > > -- View this message in context: http://www.nabble.com/Newbie%3A-Please-help%21%21%3A-acl-permissions%3A-check-two-roles-tf3356641.html#a9358202 Sent from the Jakarta Slide - User mailing list archive at Nabble.com.