Page 1 of 1
Users/Groups
PostPosted:Fri Mar 21, 2008 2:41 pm
by Hugh
Excuse my ignorant on this topic but I am a newbie with this middleware and JBOSS.
I have found the files which one can define user name/pass and groups.
$JBOSS_DIR/server/default/conf/props/openkm-users.properties
My question is that I would like to define these UserRol and AdminRol with r/w options for each folders. I would like a management group to have access only to their _stuff_
UserRol
AdminRol
Any help from you is appreciative.
Cheerfulness,
--Hugh
Re:Users/Groups
PostPosted:Sat Mar 22, 2008 5:37 pm
by pavila
You can assing user to roles in the file $JBOSS_DIR/server/default/conf/props/openkm-roles.properties. After that, you can manage document / folder permissions from the web user interface.
Re:Users/Groups
PostPosted:Mon Mar 24, 2008 7:19 pm
by Hughes
Thank you Pavila for answering my question. Please excuse my poor writing.
I understoof the openkm-roles.properties, however my question is:
Inside this file $JBOSS_DIR/server/default/conf/props/openkm-roles.properties
system=AdminRol
user1=UserRol
user2=UserRol
user3=UserRol
I want to be able to define HrRol, RDRol, MyRol, OthersRol. thats\' my question.
Thank you for your help.
Re:Users/Groups
PostPosted:Tue Mar 25, 2008 6:51 am
by jllort
A final consideration !!!
UserRol must be used as a connection rol, you might define other groups like this:
system=AdminRol
user1=UserRol,RolTeam1
user2=UserRol,RolTeam2
user3=UserRol,RolTeam1,RolTeam2
And change at firt starting openkm the grants on okm:root removing UserRol and setting RolTeam1, RolTeam2
UserRol must not be used to manage openkm +R +W, because all users mandatory must have it. UserRol is used to set connection grant to openkm and then must use other roles to separate users visibility.
If you use UserRol on OpenKM Grants all users by default have access to it.
Re:Users/Groups
PostPosted:Thu Apr 17, 2008 2:58 pm
by Hughes
I don\'t know what am I doing wrong but when I add a user to this file:
Code: Select allOpenKM-2.0a_JBoss-4.2.2.GA/server/default/conf/props/openkm-users.properties
I would go to my browser (I.E. 7 or Firefox 2.x) enter in the URL
http://mydomain:8888/OpenKM
I would enter the person\'s name and password:
in this case testusr and password testusr
which is defined in the file above:
I get this error and I can\'t add user for some apparent reason.
HTTP Status 403 - Access to the requested resource has been denied
--------------------------------------------------------------------------------
type Status report
message Access to the requested resource has been denied
description Access to the specified resource (Access to the requested resource has been denied) has been forbidden.
Re:Users/Groups
PostPosted:Thu Apr 17, 2008 3:04 pm
by jllort
Have you put correct role ( roles.properties)
testusr=UserRol, RolX, RolY ( remember always must have UserRol -> grant to openkm connect)
Re:Users/Groups
PostPosted:Thu Apr 17, 2008 3:07 pm
by Hughes
I forgot to mention that I have done that.
I just try this and it worked but it is not the way I want it to work.
1- Add a user
2- Stop the server
3- Restart the server
4- Login fine
Is there a way we can add users without reloading the server?
Thank you so much for your prompt response!
Re:Users/Groups
PostPosted:Thu Apr 17, 2008 3:24 pm
by jllort
Seems to be an issue on jboss cache.
Database login autentication runs well ( OpenKm enterprise ), restart is not needed. Seems to be a problems with properties files an jboss cache ( on jboss 4.0.1 was present and seems on 4.2.2 is still there ).
It only happens when tries to change the same user at the time you\'re loading. If you add new user, and makes login well this not happens, seems first time jboss caches information.