Re: User permissions.

On 7/29/07, David Czarnecki < davidblojsom.com">davidblojsom.com> wrote:

Re: 2 and 3)

The user IDs are distinct per weblog. So, blog 1 and blog 2 can have have the same user login ID, someuser. However, someuser in blog 1 is distinct from someuser in blog 2 and will have different permissions presumably. Again, the long and short of it is that user IDs are distinct per weblog.

The plugin for creating new users does check for duplicate login IDs when adding a user to a given weblog.

On 7/29/07 8:42 PM, "Daniel Hoyle"; < dhhoylegmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">dhhoylegmail.com> wrote:

Now I am seeing a dim light:

1)  If any user with admin privileges adds a weblog, which must be named (<weblog name>) and assigned to a new user/password/e-mail address, this new user can login and modify the new weblog. The new user must use an accessing URL ending with with .../blog/&lt;weblog name>/?flavor=admin to edit the new weblog.  Looking at the blojsom.DBUsers table, a user is associated with a weblog by the blog_id column.

2) The confusing Weblog Settings/Users process seems to attach a new user to whatever weblog is currently logged in to by the admin user.  There does not seem to be any check for duplicate user IDs; therefore these new IDs can be the same as an ID created for a completely different weblog.  That is, the user ID (owner?) of a weblog can attach multiple users to his or her weblog.  Up to now, I have not been able to find anything constructive that these attached user IDs can do.  Most actions I try only produce a message saying that they do not have permission to do the action.

3) If a duplicate user IDs exist, I am not sure which one is used at login.  I guess the weblog being logged in to must match the weblog_id associated with the user ID.  Whenever I get into the blojsom source, duplicate IDs will be the first thing I want to deny.  I guess multiple users working on the same weblog is nice, but I have to see it working before I am convinced.

Still hacking,

Danny



On 7/29/07, Daniel Hoyle < dhhoylegmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">dhhoylegmail.com> wrote:

I have gotten a little further:

1) I find that Weblog Settings/Blogs lets me create a new weblog.  It also lets me create a user, password, etc. for the weblog.  (Let's call this user dhoyle.)  I now see dhoyle in the blojsom.DBUser table.  There is also now a directory, .../WEB-INF/blogs/dhoyle, which answers one of my questions below.  However, when I go to Weblog Settings/Users, dhoyle is not there.  I also cannot login with dhoyle and his password.

2) After the above results, I decide to create dhoyle via Weblog Settings/Users, thinking that this is needed for dhoyle to be able to login.  This results is a new row in blojsom.DBUsers, where all columns are essentially the same except for a different user_id (key).  After creating this second version of dhoyle, I can now login, but dhoyle cannot do anything.  He gets a message saying that he cannot add an entry, etc.

Still hacking along,

Danny


On 7/29/07, Daniel Hoyle < dhhoylegmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">dhhoylegmail.com dhhoylegmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)"> &lt;mailto:dhhoylegmail.com&gt; > wrote:

I have just installed blojsom, and I am trying to create new users to get familiar with the system.  My new users are created with and asterisk (*) as their list of permissions.  When they try to add a new entry they get the message, "You do not have permission to edit blog entries&quot;.  &nbsp;Logging in as "default" with the "admin" flavor lets me create a new user, but I cannot edit a user and change its permissions to something else to try improving the user's permissions.


The blojsom documentation mentions user blogs and user permissions being in a directory named  $CATALINA_HOME/webapps/blojsom/WEB-INF/blogs/<;blog user name>.  Under .../WEB-INF/blogs, I only have the "bootstrap" and "default" directories.  To create a new user, do I have to also create a directory for them under .../WEB-INF/blogs?

Thanks,

Danny

---

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/

---

_______________________________________________
Blojsom-users mailing list
Blojsom-userslists.sourceforge.net" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">Blojsom-userslists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/blojsom-users

--
David Czarnecki

http://www.blojsom.com/blog/ | http://blojsom.sf.net

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Blojsom-users mailing list
lists.sourceforge.net">Blojsom-userslists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/blojsom-users