Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 546 of 808  Not logged in ELOG logo
ID Date Icon Author Author Emaildown Category OS ELOG Version Subject
  65880   Tue May 13 21:56:30 2008 Reply Grant Jeffcotegrant@jeffcote.orgQuestion 2.7.3-1024Re: Access Control

Yoshio Imai wrote:

Grant Jeffcote wrote:
At present we can give others a full view by adding them to the 'Users' list for each individual logbook, this unfortunately also gives them 'write' access.


I think the solution to your problem would be to use Deny statements in the configuration sections for the logbooks.
Assume user1, user2 and user3 are in the "owners'" group of logbook1, and user4 and user5 only have "privileged read" access. Then a configuration as follows might help:
Login user = user1, user2, user3, user4, user5

Deny New = user4, user5
Deny Reply = user4, user5
Deny Duplicate = user4, user5
Deny Edit = user4, user5
Deny Delete = user4, user5
Deny Select = user4, user5
Deny CSV Import = user4, user5

This should give them the same read permissions as the logbook owners but should deny any writing operations. I recognize that this is a little bit of admin work if the lists of such "privileged readers" gets long, but each user would have his/her individual password (even the same as for access to his/her "own" logbook).

Perhaps you can give it a try.


What a great solution, thanks Yoshio, it works a treat.
  65882   Thu May 15 17:45:44 2008 Reply Grant Jeffcotegrant@jeffcote.orgQuestion 2.7.3-1024Re: Access Control

Grant Jeffcote wrote:

Yoshio Imai wrote:

Grant Jeffcote wrote:
At present we can give others a full view by adding them to the 'Users' list for each individual logbook, this unfortunately also gives them 'write' access.


I think the solution to your problem would be to use Deny statements in the configuration sections for the logbooks.
Assume user1, user2 and user3 are in the "owners'" group of logbook1, and user4 and user5 only have "privileged read" access. Then a configuration as follows might help:
Login user = user1, user2, user3, user4, user5

Deny New = user4, user5
Deny Reply = user4, user5
Deny Duplicate = user4, user5
Deny Edit = user4, user5
Deny Delete = user4, user5
Deny Select = user4, user5
Deny CSV Import = user4, user5

This should give them the same read permissions as the logbook owners but should deny any writing operations. I recognize that this is a little bit of admin work if the lists of such "privileged readers" gets long, but each user would have his/her individual password (even the same as for access to his/her "own" logbook).

Perhaps you can give it a try.


What a great solution, thanks Yoshio, it works a treat.


Is there any way to give a logged in user a 'Guest' view on certain logbooks?
Unfortunately at the moment if they are not in the 'login users = ' group they are automatically logged out and have to re-log back into their own logbook.
  65886   Mon May 19 06:14:04 2008 Question Grant Jeffcotegrant@jeffcote.orgQuestion 2.7.3-2104Conditional Attributes Boolean?
Hi Stefan,

After searching the manual and not finding (missing?) the answer is it possible to add conditional statements to a Boolean attribute? I would like a tick box to be able to trigger an event when submitted.

Many thx
  65956   Sun Aug 31 14:43:19 2008 Smile Grant Jeffcotegrant@jeffcote.orgQuestionWindowsV2.7.4-212Re: Automatic Copy to
Stefan,

Is there any way I might be able to initiate the 'copy to' function by selecting a 'tick box' (boolean) or conditional attribute choice in an entry page when submitting that page? We have a requirement where we run a main 'Operations' log and have another log with some entries needing to be in both (for additional actions etc). I understand the Operator can always manually use the 'Copy To' function after submitting the original entry but was wondering if there was some way a shell script (execute function?) or similar may be activated by a boolean or even a 'conditional' choice?

Thx
  65963   Sat Sep 6 20:01:21 2008 Reply Grant Jeffcotegrant@jeffcote.orgQuestionWindowsV2.7.4-212Re: Automatic Copy to

Stefan Ritt wrote:

Grant Jeffcote wrote:
Stefan,

Is there any way I might be able to initiate the 'copy to' function by selecting a 'tick box' (boolean) or conditional attribute choice in an entry page when submitting that page? We have a requirement where we run a main 'Operations' log and have another log with some entries needing to be in both (for additional actions etc). I understand the Operator can always manually use the 'Copy To' function after submitting the original entry but was wondering if there was some way a shell script (execute function?) or similar may be activated by a boolean or even a 'conditional' choice?

Thx


I put your request on the whishlist.


Thanks Stefan.
  66012   Thu Oct 23 10:21:06 2008 Idea Grant Jeffcotegrant@jeffcote.orgQuestionWindows2.7.5Server derived time

Hi Stefan,

Is it possible to derive the time in a 'date/time' attribute from the Elog server?
We would like all our entries in GMT/UTC time and unfortunately as the time is currently derived from the client machines there are often entry descrepancies if the regional settings are not set correctly.

The '$entry time' variable can be used but seems to put a 1970 date in the field so bears no relevancy to an 'Event' time?

I'm also having issues with conditional entries in the Find page. If a conditional statement is used to hide attributes or change displayed attributes in the entry page then the attribute that is used in the conditional statement is not permanently selectable in the 'Find' page. It is available as a choice but as soon as selected the conditional action removes it? Is it possible to make conditional options/actions in the 'Find' page optional?

Hope that makes a little sense?

Many thanks

  66027   Thu Oct 30 08:39:34 2008 Agree Grant Jeffcotegrant@jeffcote.orgQuestionWindows2.7.5Re: Server derived time

Stefan Ritt wrote:

 

Grant Jeffcote wrote:

Hi Stefan,

Is it possible to derive the time in a 'date/time' attribute from the Elog server?
We would like all our entries in GMT/UTC time and unfortunately as the time is currently derived from the client machines there are often entry descrepancies if the regional settings are not set correctly.

The '$entry time' variable can be used but seems to put a 1970 date in the field so bears no relevancy to an 'Event' time?

I'm also having issues with conditional entries in the Find page. If a conditional statement is used to hide attributes or change displayed attributes in the entry page then the attribute that is used in the conditional statement is not permanently selectable in the 'Find' page. It is available as a choice but as soon as selected the conditional action removes it? Is it possible to make conditional options/actions in the 'Find' page optional?

Hope that makes a little sense?

Many thanks

 

There are several methods to get the server time:

 

Via presets of attributes

Attributes = Author, Event time, ...
Preset Event time = $utcdate

which gives you actually the UTC time.

 

Via the editor

The editor toolbar contains a little clock. If you click on it, you insert the current server time (but localized, not UTC).

 

Hope one of the two methods work for you.

The problem with the conditional attributes in the find page is I believe fixed in the current version.

Thanks Stefan, the preset UTC date works well. RTFM on my part perhaps.

I'm running version 2.7.5.2127 and am still having the issue with conditional attributes in the find area as mentioned above though.
Is it the latest SVN  **.2135 that addresses this?

Many thanks

  66311   Tue Apr 14 18:51:43 2009 Reply Grant Jeffcotegrant@jeffcote.orgQuestionWindows2.7.5Re: Multi Logook Login

Hal Proctor wrote:

We have two logbooks, each with a different list of users. 
 The logbooks are open to all network users for read only.
A user with Write permisions logs into his designated logbook.
He then decides to view the other logbook, the one he does not have write permissions to by clicking on the tab to the other logbook.
He is immediately logged out of the logbook he has write permissions to.
He did not close his browser session, only clicked on the other logbook tab.
Is there Any way to keep that person logged into the logbook he has rights to without having the "keep me logged in Checkbox"?

 Just like this site has Forum, Config Examples, etc.

Once you select another tab they are logged out of their logbook they just logged in to.

 

 Have a look at this thread Hal, worked well for me:  Link

ELOG V3.1.5-3fb85fa6