Re: secure way to allow users create logbook, posted by Stefan Ritt on Thu Aug 30 10:00:07 2012
|
Szu-Ching Peckner wrote: |
Stefan Ritt wrote: |
Szu-Ching Peckner wrote: |
I don't think there is a good secure way so far, but would like to have your opinion.
If I want user to create logbook for themselves, what's the best way to do it? I guess Execute $attribute = <command> may work, have it write to cfg file, but obviously it impose security problem. Is there a good and secure way to allow user to create logbook themselves?
|
Actually there is no good secure way. What I usually do is to give users admin rights on individual logbooks, then they can change the config of that logbook. Many times adding some attribute is as good as creating new logbooks. Like if you need two logbooks "home" and "work", you can create an attribute "type" and let the type be "home" or "work". With conditional attributes you can make the logbook behave differently for the two values of "type" and get most functionality of two separate logbooks.
- Stefan
|
Is there a way to set user permission based on certain attribute? can Allow command = <user list> based on attribute?
for example, say type home, user1 can read, user2 can write, user3 can not access type home, but can access type work.
In short, is access control available when I use type to get functionality of separate logbooks? If so, how is this access control done?
|
Actually I never tried that. Using conditional attributes, you could try that out, but no guarantee that it works. Like
Options type = home{1}, work{2}
{1}Login user = you, me
{2}Login user = me, other
You could play with "login user", "Allow command" and "Deny command".
/Stefan |
Re: secure way to allow users create logbook, posted by Szu-Ching Peckner on Thu Aug 30 22:47:50 2012
|
Stefan Ritt wrote: |
Szu-Ching Peckner wrote: |
Stefan Ritt wrote: |
Szu-Ching Peckner wrote: |
I don't think there is a good secure way so far, but would like to have your opinion.
If I want user to create logbook for themselves, what's the best way to do it? I guess Execute $attribute = <command> may work, have it write to cfg file, but obviously it impose security problem. Is there a good and secure way to allow user to create logbook themselves?
|
Actually there is no good secure way. What I usually do is to give users admin rights on individual logbooks, then they can change the config of that logbook. Many times adding some attribute is as good as creating new logbooks. Like if you need two logbooks "home" and "work", you can create an attribute "type" and let the type be "home" or "work". With conditional attributes you can make the logbook behave differently for the two values of "type" and get most functionality of two separate logbooks.
- Stefan
|
Is there a way to set user permission based on certain attribute? can Allow command = <user list> based on attribute?
for example, say type home, user1 can read, user2 can write, user3 can not access type home, but can access type work.
In short, is access control available when I use type to get functionality of separate logbooks? If so, how is this access control done?
|
Actually I never tried that. Using conditional attributes, you could try that out, but no guarantee that it works. Like
Options type = home{1}, work{2}
{1}Login user = you, me
{2}Login user = me, other
You could play with "login user", "Allow command" and "Deny command".
/Stefan
|
Thanks for reply Stefan.
I tried it, didnt work. I think its expected it didn't work though, or maybe I didn't try it right.
==============
[logbook1]
Login user = user1
Options Type = Home{1}, Work{2}
{1} Login user = user2
This will make user2 unable to login logbook1 at all
============
[logbook1]
Login user = user1, user2
Options Type = Home{1}, Work{2}
{1} Login user = user1
{2} Login user = user2
user1 can login, can search Work type entries, create new entry with Work type.
==============
[logbook1]
Login user = user1, user2
Options Type = Home{1}, Work{2}
{1} Deny New = user1
user1 can still create entries for Home type. I think it's because when user1 login, command New is available for user1, so when user1 click on New, doesn't matter what type user1 choose, submit button is available. If I have Deny New = user1 under logbook1, New is not available, that means user1 can't create entry for Work type either.
===============
seems to me under current code, access control has to be done based on logbook, not attribute. Do you agree?
if that's the case, we may have a lot of logbook because of access control we want to implement. So there is another question:
selection page show all logbooks. Is there a way to make selection page and tabs show logbooks based on user access?
For example, we have 20 logbooks, user1 has acces to 3, when user1 login, selection page only shows that 3 logbooks for user1, and only 3 tabs for user1.
I thought about using group to get logbooks more organized, however I will still face the situation that one group may have 20 logbooks.
Or what would you do to handle this situation? (I asked selection page question earlier in another entry). Maybe we should discuss on that entry? Message ID: 67319
Thanks again.
|
admin user access admin page, not config page, posted by Szu-Ching Peckner on Tue Sep 18 17:57:47 2012
|
We have multiple logbooks. Each user is admin user for his/her own logbook.
I want user be able to modify config file, but no access to user setting, such as see user list, change password, new user, remove user.
[logbook1]
Admin user = user1
Login user = user1, user2
Allow Config = user1
List Menu commands = Admin, Config
user1 click on Admin, it opens config file, when user1 click on save, user1 is brought to Config page, which has select user list on top, Change password, Remove user, New user buttons on bottom. Is there a way that admin user has access to config file, but no access to user info at all (not even presented to them). Is there a way after user1 click save, page doesn't go to that config page?
I could put
Deny Change password =
Deny Remove user
Deny New user
so when user1 click on those buttons, user1 will get command not allowed. However I would rather have user1 not even see that page.
|
Comment avoir elog en français, posted by Philippe Rousselot on Sat Oct 27 18:10:14 2012
|
|
Comment avoir elog en français II, posted by Philippe Rousselot on Sat Oct 27 18:15:37 2012
|
Bonjour,
tout est dans le titre.
Merci
For those who speak strange languages, I asked how to get a french version of elog.
By the way, this is my second mail because I forgot to give an icon to the first mail, and when I hit Back to do so, my text was erased. Bug or normal obnoxious attitude of my browser ?
Thanks in advance
Philippe
|
Re: Comment avoir elog en français II, posted by Andreas Luedeke on Mon Oct 29 07:52:07 2012
|
Philippe Rousselot wrote: |
Bonjour,
tout est dans le titre.
Merci
For those who speak strange languages, I asked how to get a french version of elog.
By the way, this is my second mail because I forgot to give an icon to the first mail, and when I hit Back to do so, my text was erased. Bug or normal obnoxious attitude of my browser ?
Thanks in advance
Philippe
|
ELOG comes "internationalised": you just need to set your desired language in the configuration files.
Language = french
in the configuration file elogd.cfg does the trick.
If you are capable to read the English language (which I suppose  ), then I would recommend reading the manual, e.g. https://midas.psi.ch/elog/config.html#global
 ⇄
Detect language » English
PS: I happened to have the same problem (text erased after "back") when I had javascript disabled in the browser. If you have it enabled, you'll get a popup window that tells you what mandatory fields are missing in your post. Then you'll not need to use the back button. |
Re: Comment avoir elog en français II, posted by Philippe Rousselot on Mon Oct 29 09:13:54 2012
|
Andreas Luedeke wrote: |
Philippe Rousselot wrote: |
Bonjour,
tout est dans le titre.
Merci
For those who speak strange languages, I asked how to get a french version of elog.
By the way, this is my second mail because I forgot to give an icon to the first mail, and when I hit Back to do so, my text was erased. Bug or normal obnoxious attitude of my browser ?
Thanks in advance
Philippe
|
ELOG comes "internationalised": you just need to set your desired language in the configuration files.
Language = french
in the configuration file elogd.cfg does the trick.
If you are capable to read the English language (which I suppose  ), then I would recommend reading the manual, e.g. https://midas.psi.ch/elog/config.html#global
 ⇄
Detect language » English
PS: I happened to have the same problem (text erased after "back") when I had javascript disabled in the browser. If you have it enabled, you'll get a popup window that tells you what mandatory fields are missing in your post. Then you'll not need to use the back button.
|
Hi,
Thanks for the answer. I tried this (directly from de setting menu in the demo account as well as from the onfig file) :
I modified of course the text that could be modified directly from there such as menus and submenus.
I added Language = french, I restarted the server, clear the cache of firefox (IE as well), but list, new and so on appear in english even they are in the locale file...
Indeed, the manual is very interesting
concerning javascript, it is activated ...
Thanks again
Philippe |
Re: Comment avoir elog en français II [solved almost], posted by Philippe Rousselot on Mon Oct 29 09:20:50 2012
|
Philippe Rousselot wrote: |
Andreas Luedeke wrote: |
Philippe Rousselot wrote: |
Bonjour,
tout est dans le titre.
Merci
For those who speak strange languages, I asked how to get a french version of elog.
By the way, this is my second mail because I forgot to give an icon to the first mail, and when I hit Back to do so, my text was erased. Bug or normal obnoxious attitude of my browser ?
Thanks in advance
Philippe
|
ELOG comes "internationalised": you just need to set your desired language in the configuration files.
Language = french
in the configuration file elogd.cfg does the trick.
If you are capable to read the English language (which I suppose  ), then I would recommend reading the manual, e.g. https://midas.psi.ch/elog/config.html#global
 ⇄
Detect language » English
PS: I happened to have the same problem (text erased after "back") when I had javascript disabled in the browser. If you have it enabled, you'll get a popup window that tells you what mandatory fields are missing in your post. Then you'll not need to use the back button.
|
Hi,
Thanks for the answer. I tried this (directly from de setting menu in the demo account as well as from the onfig file) :
I modified of course the text that could be modified directly from there such as menus and submenus.
I added Language = french, I restarted the server, clear the cache of firefox (IE as well), but list, new and so on appear in english even they are in the locale file...
Indeed, the manual is very interesting
concerning javascript, it is activated ...
Thanks again
Philippe
|
Found it !
I wanted to have locale set in the folder demo (so I could have one in french and one in english).
Once language set in globals everything went fine. Almost...
Philippe |
|