Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 679 of 808  Not logged in ELOG logo
ID Date Icon Author Author Email Category OS ELOG Versiondown Subject
  573   Wed Jul 7 17:43:22 2004 Reply Stefan Rittstefan.ritt@psi.chBug reportLinux2.5.2 - 2.5.3Re: User/Admin privlege question
> I also have this problem, when a non admin user logs in he does not have access to
> the config file but if he logs out he can then access the config file as non logged
> user.

If he logs out, how can he access a logbook at all? He should be presented a login
screen, nothing else...

> I also tried to upgrade to version 2.5.3 but running under this version does not ask
> for passwords so I reverted to 2.5.2.

Better first let's fix this problem. Under what circumstances does 2.5.3 not ask for
passwords? Maybe you can get the newest version from CVS (see download page) and try
again, I had problems when using the -DHAVE_CRYPT functionality, but I guess you did not
have that, do you?

So once you tried the latest snapshot, and still have problems, describe them carefully,
send me your configuration file, and I will have a look.

- Stefan
  644   Tue Aug 3 05:31:08 2004 Reply Alexandre Camsonnecamsonne@jlab.orgBug reportLinux2.5.2 - 2.Re: User/Admin privlege question
Dear Stefan,
I eventually tried the latest version from the CVS. 
And it is odd because like when I tried version 2.5.3, it is like it ignores
the passwd file. I guess I must have a problem in my cfg file.
So I can't really test if 2.5.3 or 2.5.4 have the same problem.

Right now I'm still using 2.5.2 which works fine, if i log out and click on
the logbook tab. I get the page which ask for the username and password. The
thing is I don't get returned to the username/password when I hit log out. I
arrive in the state you can see in the unlogged.jpg.
From here if can go into all the logbooks as long as I don't hit the
logbooks tab and worse I can access to all the config files.

Is there something really badly configured in my config file ? I guess it is
not supposed to work that way.

Thank you,

Alexandre
Attachment 1: logged.jpg
logged.jpg
Attachment 2: notlogged.jpg
notlogged.jpg
Attachment 3: elogd.cfg
[global]
logbook tabs = 1
SMTP host = smtpmail.jlab.org
port = 8080
main tab = Logbooks
group general = runliste,issues,procurement,minutes
group detector = proton, calorimeter,neutron
group daq = coda, VME
group Slowcontrol = LED,XY,ADC,HV
group Software=offline
Guest menu commands = Back, Find, Login, Help
Admin user = camsonne
Self register = 3
Password file = passwd.txt
Logfile = dvcs.log
Logging level = 3
Display mode = threaded
Menu commands = New, Reply, Find ,Login, CSV Import, Logout, Login, Help

[Offline]
Theme = default
Password file = passwd.txt
Comment = DVCS Offline software
Attributes = Author, Type,Subject
Preset Author = $long_name
Options Type = idea, bug, misc, to do 
Required Attributes = Author, Type
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help, CSV Import, Logout, Login
Guest menu commands = Back, Find, Login, Help
Email format= 15
Restrict edit = 1

[HV]
Theme = default
Password file = passwd.txt
Comment = HV
Attributes = Author, Type,Subject
Options Type = settings,hardware,software,remark
Preset Author = $long_name
Required Attributes = Author, Type
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help

[ADC]
theme = default
Password file = passwd.txt
Comment = ADC
Attributes = Author, Type,Subject
Options Type = settings,hardware change,software change,remark
Preset Author = $long_name
Required Attributes = Author, Type
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help

[minutes]
Theme = default
Password file = passwd.txt
Comment = Minutes
Attributes = Author,Subject
Preset Author = $long_name
Required Attributes = Author,Subject
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help
Email format= 15
Restrict edit = 1

[neutron]
Theme = default
Comment = Neutron veto
Password file = passwd.txt
Attributes = Author, Type,Subject
Options Type = new, runs, problem, misc 
Preset Author = $long_name
Required Attributes = Author, Type, Number
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help
Email format= 15

[procurement]
Theme = default
Password file = passwd.txt
Comment = Pending issues
Attributes = Author, Type,Subject
Preset Author = $long_name from $remote_host
Options Type = Nice to have,Ordered,Received,Needed
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help
Email format= 15
Restrict edit = 1

[issues]
Theme = default
Password file = passwd.txt
Comment = Pending issues
Attributes = Author, Type,Subject
Preset Author = $long_name from $remote_host
Options Type = Idea,Problem, to do, not forget
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help
Email format= 15
Restrict edit = 1

[runliste]
Theme = default
Password file = passwd.txt
Comment = DVCS runliste
Attributes = Author, Type,Subject, Number
Preset Author = $long_name
Options Type = cosmics calo, led calo, pedestal calo, junk calo, misc, cosmics pa, led pa, pedestal pa, junk pa,cosmics, led, pedestal
Required Attributes = Author, Type, Number
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help, CSV Import, Logout, Login
Guest menu commands = Back, Find, Login, Help
Email format= 15
Restrict edit = 1
Use Email Heading = New entry added to runliste related to run $Number
Protect Selection page = 1

[LED]
Theme = default
Password file = passwd.txt
Comment = LED
Attributes = Author, Type,Subject
Options Type = settings,hardware change,software change,remark
Preset Author = $long_name
Required Attributes = Author, Type
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help

[XY]
Theme = default
Password file = passwd.txt
Comment = XY
Attributes = Author, Type,Subject
Options Type = hardware, software, misc 
Preset Author = $long_name from $remote_host
Required Attributes = Author, Type, Number
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help

[test]
Theme = default
Password file = passwd.txt
Comment = test
Attributes = Author, Type,Subject, Number
Options Type = cosmics, led, misc 
Required Attributes = Author
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help


[dvcs]
Theme = default
Password file = passwd.txt
Comment = dvcs
Attributes = Author, Type,Subject, Number
Options Type = cosmics, led, misc 
Required Attributes = Author, Type, Number
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help

[proton]
Theme = default
Comment = Proton array
Password file = passwd.txt
Attributes = Author, Type,Subject
Options Type = new, problem, misc 
Preset Author = $long_name
Required Attributes = Author, Type, Number
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help

[calorimeter]
Password file = passwd.txt
Theme = default
Comment = Calorimeter logbook
Attributes = Author, Type,Subject
Options Type = new, problem, misc 
Preset Author = $long_name
Required Attributes = Author, Type, Number
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help
Email format= 15

[coda]
Password file = passwd.txt
Theme = default
Comment = CODA
Attributes = Author, Type,Subject
Options Type = new, problem, misc 
Required Attributes = Author, Type, Number
Preset Author = $long_name
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help
Email format= 15

[vme]
Password file = passwd.txt
Theme = default
Comment = vme
Attributes = Author, Type,Subject
Options Type = new, problem, misc 
Required Attributes = Author, Type, Number
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help
Attachment 4: notloggedcfg.jpg
notloggedcfg.jpg
Attachment 5: notloggedcfgg.jpg
notloggedcfgg.jpg
  646   Tue Aug 3 12:46:55 2004 Reply Stefan Rittstefan.ritt@psi.chBug reportLinux2.5.2 - 2.Re: User/Admin privlege question
I just see your [global] part of elogd.cfg, could you send me the complete file?

What you also could try is to delete all cookies stored in your browser. The way
cookies are formed changed between 2.5.2 and 2.5.3, so the system could be
confused by old cookies.

- Stefan
  649   Tue Aug 3 14:51:34 2004 Reply Alexandre Camsonnecamsonne@jlab.orgBug reportLinux2.5.2 - 2.Re: User/Admin privlege question
The elogd.cfg is attached in the previous message as attachement 3. Sorry it is a
little bit buried between pictures.
The reason I put the picture of the global elogd.cfg is to show that the not logged
user has access to elogd.cfg which is some kind of trouble...

> I just see your [global] part of elogd.cfg, could you send me the complete file?
> 

Hi I tried to remove the cookies and it still did not ask for password under 2.5.4.
Has the password file format changed between 2.5.2 and 2.5.3 ?

> What you also could try is to delete all cookies stored in your browser. The way
> cookies are formed changed between 2.5.2 and 2.5.3, so the system could be
> confused by old cookies.
> 
> - Stefan
  652   Tue Aug 3 16:34:23 2004 Idea Stefan Rittstefan.ritt@psi.chBug reportLinux2.5.2 - 2.Re: User/Admin privlege question
Ok, now I see your problem. You defined a "Guest menu commands" which explicitly allows
not-authorized access (that's what it's for). If you only want to allow authorized
access, remove the "guest menu commands" from the logbook sections and also from the
[global] section.

Please note that if an option is not preent in a logbook section, it is looked for in
the [global] section. I see that most of your logbooks have similar settings. Just put
them into the [global] section, and override it in the logbook section if they are
different.
  654   Tue Aug 3 20:14:55 2004 Smile Alexandre Camsonnecamsonne@jlab.orgBug reportLinux2.5.2 - 2.Re: User/Admin privlege question
Thank you, I misunderstood how the "Guest menu commands" worked I thought I had to specify
a limited set of commands to actually limit guest users.

Thanks again for your wonderful work on this program too.

Regards,

Alexandre

> Ok, now I see your problem. You defined a "Guest menu commands" which explicitly allows
> not-authorized access (that's what it's for). If you only want to allow authorized
> access, remove the "guest menu commands" from the logbook sections and also from the
> [global] section.
> 
> Please note that if an option is not preent in a logbook section, it is looked for in
> the [global] section. I see that most of your logbooks have similar settings. Just put
> them into the [global] section, and override it in the logbook section if they are
> different.
  512   Fri Mar 26 09:41:56 2004 Idea Stefan Rittstefan.ritt@psi.chInfoAll2.5.2New ELOG version with XML and CSV import/export
Version 2.5.2 of ELOG has been released today. It contains CSV (comma
separated values) import and export, as well as XML export (through the
"Find" page). Since these features are new, I would appreciate some feedback
on how this works in different environments. I made sure I can import data
from Excel and Outlook (like my address book), but I have no experience with
other applications.

As with the XML export, I'm not sure if the format I chose is a good one.
People working more with XML should tell me if it should be changed.
  515   Mon Mar 29 17:44:32 2004 Idea Charles DuncanCharles@YorkU.CAInfoAll2.5.2Re: New ELOG version with XML and CSV import/export
> Version 2.5.2 of ELOG has been released today. It contains CSV (comma
> separated values) import and export, as well as XML export (through the
> "Find" page). Since these features are new, I would appreciate some feedback
> on how this works in different environments. I made sure I can import data
> from Excel and Outlook (like my address book), but I have no experience with
> other applications.
> 
> As with the XML export, I'm not sure if the format I chose is a good one.
> People working more with XML should tell me if it should be changed.

I was able to find the export feature under find. Could you let me know where 
the import feature is? Or how I turn it on.

-Charles-
ELOG V3.1.5-3fb85fa6