Re: Access Control, posted by Hal Proctor on Tue Apr 14 20:00:08 2009
|
| Grant Jeffcote wrote: |
| Grant Jeffcote wrote: |
| Yoshio Imai wrote: |
| Grant Jeffcote wrote: | | At present we can give others a full view by adding them to the 'Users' list for each individual logbook, this unfortunately also gives them 'write' access. |
I think the solution to your problem would be to use Deny statements in the configuration sections for the logbooks.
Assume user1, user2 and user3 are in the "owners'" group of logbook1, and user4 and user5 only have "privileged read" access. Then a configuration as follows might help:
Login user = user1, user2, user3, user4, user5
Deny New = user4, user5
Deny Reply = user4, user5
Deny Duplicate = user4, user5
Deny Edit = user4, user5
Deny Delete = user4, user5
Deny Select = user4, user5
Deny CSV Import = user4, user5
This should give them the same read permissions as the logbook owners but should deny any writing operations. I recognize that this is a little bit of admin work if the lists of such "privileged readers" gets long, but each user would have his/her individual password (even the same as for access to his/her "own" logbook).
Perhaps you can give it a try. |
What a great solution, thanks Yoshio, it works a treat. |
Is there any way to give a logged in user a 'Guest' view on certain logbooks?
Unfortunately at the moment if they are not in the 'login users = ' group they are automatically logged out and have to re-log back into their own logbook. |
I have this same issue. People come and go from one logbook to the other but I still want them to maintain logged in status to the logbook they have rights to. |
|
Re: Absolut links for images in FCK Editor, posted by Stefan Ritt on Mon Feb 11 17:28:33 2008
|
| Jochen Krempel wrote: |
|
We use ELOG inside a local network, but we want to allow access also from outside the firewall.
The suggested solution from Elog Admin Guide worked fine until version ELOG V2.6.5-1844 (essentially without FCK Editor):
ssh -L 1234:your.server.name:8080 your.firewall.name
firefox http://localhost:1234/
Howerver, since the update to ELOG V2.7.1-2002 the FCK Editor uses absolute links to insert images.
An image uploaded from the local network will have an address like:
http://your.server.name:8080/logbookname/080207_101110/Picture.jpg
while the same image uploaded through the firewall tunnel will have a link like:
http://localhost:1234/logbookname/080207_101110/Picture.jpg
Obviously images uploaded from outside are not visible from inside and vice versa.
Is it possible to convince FCK Editor to use relative links?
PS
ELOG is great!!
|
I fixed this in SVN revision #2038. |
|
Re: Absolut links for images in FCK Editor, posted by Jochen Krempel on Tue Feb 12 23:57:52 2008
|
| Stefan Ritt wrote: |
|
| Jochen Krempel wrote: |
|
We use ELOG inside a local network, but we want to allow access also from outside the firewall.
The suggested solution from Elog Admin Guide worked fine until version ELOG V2.6.5-1844 (essentially without FCK Editor):
ssh -L 1234:your.server.name:8080 your.firewall.name
firefox http://localhost:1234/
Howerver, since the update to ELOG V2.7.1-2002 the FCK Editor uses absolute links to insert images.
An image uploaded from the local network will have an address like:
http://your.server.name:8080/logbookname/080207_101110/Picture.jpg
while the same image uploaded through the firewall tunnel will have a link like:
http://localhost:1234/logbookname/080207_101110/Picture.jpg
Obviously images uploaded from outside are not visible from inside and vice versa.
Is it possible to convince FCK Editor to use relative links?
PS
ELOG is great!!
|
I fixed this in SVN revision #2038.
|
Thank you for the quick support! |
|
Re: About Extendable, posted by Stefan Ritt on Fri Feb 16 17:01:45 2007
|
| bob wrote: | Hi,
I have a problem and I do not understand why
my config is
"
{tdl} Show Attributes = De, He, Auteur, Ten, TDL
{tdl} Options TDL = de, fr, gt
{tdl} Extendable Options = TDL
"
I play with {tdl}, i add TDL (toto),
and after that, i open my config:
"{tdl} Show Attributes = De, He, Auteur, Ten, TDL
{tdl} Options TDL = de, fr, gt, toto, toto
{tdl} Extendable Options = TDL
"
And my preview is wrong !!
why 2 * toto thus?
thanks a lot
Bob |
I tried it myself and did not get two "toto"'s. Maybe you hit "Submit" twice or so? One thing I would recommend however is not to name an attribute "TDL" and a condition {tdl} the same. And also make sure you have the newest version of elog. I remember there was once a problem with the "Preview" button adding extended attributes more than once. |
|
Re: A new ELOG user wants to register on "127.0.0.1", posted by Stefan Ritt on Thu Jul 14 17:29:42 2005
|
| Emiliano Gabrielli wrote: | A new ELOG user wants to register on "127.0.0.1"
the scenario is:
- elog on localhost
- stunnel on the external interface
I dont want elog to listen on external interface, so.. why do not use the URL cfg attribute for this issue ? |
You can specify the interface to liste on with the "-n <interface>" parameter of elogd. |
|
Re: A new ELOG user wants to register on "127.0.0.1", posted by Emiliano Gabrielli on Thu Jul 14 19:16:06 2005
|
| Stefan Ritt wrote: |
| Emiliano Gabrielli wrote: | A new ELOG user wants to register on "127.0.0.1"
the scenario is:
- elog on localhost
- stunnel on the external interface
I dont want elog to listen on external interface, so.. why do not use the URL cfg attribute for this issue ? |
You can specify the interface to liste on with the "-n <interface>" parameter of elogd. |
I know 
the following is the configuration I'm telling about... and it raises the problem reported
albert@YYYYYYYYY:~$ ps axu | grep elog
elog 22348 1.0 1.9 23660 20408 ? Ss 11:32 4:54 /usr/sbin/elogd -f /var/run/elogd.pid -c /etc/elog.conf -d /var/lib/elog -s /usr/share/elog -p 8081 -n 127.0.0.1 -x -D
root 22353 0.0 0.2 45436 2276 ? Ss 11:32 0:17 /usr/sbin/stunnel -o /var/log/elog/elog_daemon.log -p /etc/ssl/certs/stunnel_XXXXXXX.pem -d XXXXXX.roma2.infn.it:8080 -r 127.0.0.1:8081
|
|
Re: A new ELOG user wants to register on "127.0.0.1", posted by Stefan Ritt on Sat Jul 23 15:46:06 2005
|
Ok, I kind of misunderstood the "-n" parameter. It is the interface to listen to, which is not necessarily the host name as seen from outside. I changed that in the following way:
- if the URL option is present, the host name is taken from there
- if the URL option is not present, elog calls gethostname()/gethostbyname() to retrieve the local host name
the host name which comes from these two possibilities is used internally in all cases where it's needed, like email notifications. |
|
Re: A couple of observations, posted by David Pilgram on Fri Mar 28 14:55:16 2014
|
I tried to attach a screenshot showing this, but kept getting a 502 bad gateway error.
The message in the red banner is
Error sending Email via <i>"psquad.psi.ch"</i>
with that html showing, by the way.
> Hi Stefan and Andreas,
>
> When I submitted the previous entry, I had an error message about not able to send via psxxxx.psi.ch come up as
> a red bar at the top of the elog page - sorry, cannot remember the subdomain name correctly.
>
> The observations I was going to make is firstly the change in layout of the Find section - maybe I'll get used
> to it but the change in layout wasn't warmly welcomed.
>
> Also, shame that moving from Subversion means that the increments are no longer in easy numerical order. So I
> believe that I am commenting on the latest possible version available, a738232.
>
> A question. My logbooks directory is now 1.8GB. Yes, there are a lot of attachments etc to bulk it out, but
> it's all plain text comments. Is there a limit as to the size, or total number of entries? Elog takes a
> notible amount of time to index it all these days, and I have wondered whether a couple of "instabilities" might
> be caused by this. Anyone any thoughts?
>
> I don't know how I managed it, but I got elog to generate two entries with the identical ID no. The new entries
> were different as well. The log file faithfully had recorded the two separate replies to the entry having the
> same ID no as well. Unfortunately I went and corrected it by editing the YYMMDDa.log file without keeping a
> copy. I have also had a mysterious entry ID0 appear in threaded display, despite there being no entry 0; and if
> it appears, it appears in two or three places within the list of threaded entries. |
|