Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 783 of 808  Not logged in ELOG logo
ID Date Icon Authordown Author Email Category OS ELOG Version Subject
  567   Fri Jul 2 15:18:20 2004 Warning Alexandre Camsonnecamsonne@jlab.orgBug reportLinux2.5.2 - 2.5.3Re: User/Admin privlege question
Hi, 
I also have this problem, when a non admin user logs in he does not have access to
the config file but if he logs out he can then access the config file as non logged
user.
I also tried to upgrade to version 2.5.3 but running under this version does not ask
for passwords so I reverted to 2.5.2.

Besides these few details, your software is great !

Thank you,

Alexandre

> > For some reason if I define a "login user" that is allowed the configure
> > option he is also allowed to change the configuration file. According to the
> > documentation it seems like this should NOT be the case. Any ideas as to
> > what the problem might be? 
> 
> Unfortunately I cannot reproduce your problem. This leaves few possibilites:
> 
> - any login user CAN change his/her full name, email address etc. but only admin
> users can change ALL OTHERS as well. Admin users should see a "change elogd.cfg"
> button on the config page, whil normal users will not
> 
> - are you sure you logged out as admin user and loggin in again as non-admin
> user? Under some circumstances, the browser keeps old cookies which can confuse
> things. Best is if you delete all browser cookies and try again (Tools/Internet
> Options/Delete Cookies in IE).
> 
> - Stefan
  644   Tue Aug 3 05:31:08 2004 Reply Alexandre Camsonnecamsonne@jlab.orgBug reportLinux2.5.2 - 2.Re: User/Admin privlege question
Dear Stefan,
I eventually tried the latest version from the CVS. 
And it is odd because like when I tried version 2.5.3, it is like it ignores
the passwd file. I guess I must have a problem in my cfg file.
So I can't really test if 2.5.3 or 2.5.4 have the same problem.

Right now I'm still using 2.5.2 which works fine, if i log out and click on
the logbook tab. I get the page which ask for the username and password. The
thing is I don't get returned to the username/password when I hit log out. I
arrive in the state you can see in the unlogged.jpg.
From here if can go into all the logbooks as long as I don't hit the
logbooks tab and worse I can access to all the config files.

Is there something really badly configured in my config file ? I guess it is
not supposed to work that way.

Thank you,

Alexandre
Attachment 1: logged.jpg
logged.jpg
Attachment 2: notlogged.jpg
notlogged.jpg
Attachment 3: elogd.cfg
[global]
logbook tabs = 1
SMTP host = smtpmail.jlab.org
port = 8080
main tab = Logbooks
group general = runliste,issues,procurement,minutes
group detector = proton, calorimeter,neutron
group daq = coda, VME
group Slowcontrol = LED,XY,ADC,HV
group Software=offline
Guest menu commands = Back, Find, Login, Help
Admin user = camsonne
Self register = 3
Password file = passwd.txt
Logfile = dvcs.log
Logging level = 3
Display mode = threaded
Menu commands = New, Reply, Find ,Login, CSV Import, Logout, Login, Help

[Offline]
Theme = default
Password file = passwd.txt
Comment = DVCS Offline software
Attributes = Author, Type,Subject
Preset Author = $long_name
Options Type = idea, bug, misc, to do 
Required Attributes = Author, Type
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help, CSV Import, Logout, Login
Guest menu commands = Back, Find, Login, Help
Email format= 15
Restrict edit = 1

[HV]
Theme = default
Password file = passwd.txt
Comment = HV
Attributes = Author, Type,Subject
Options Type = settings,hardware,software,remark
Preset Author = $long_name
Required Attributes = Author, Type
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help

[ADC]
theme = default
Password file = passwd.txt
Comment = ADC
Attributes = Author, Type,Subject
Options Type = settings,hardware change,software change,remark
Preset Author = $long_name
Required Attributes = Author, Type
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help

[minutes]
Theme = default
Password file = passwd.txt
Comment = Minutes
Attributes = Author,Subject
Preset Author = $long_name
Required Attributes = Author,Subject
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help
Email format= 15
Restrict edit = 1

[neutron]
Theme = default
Comment = Neutron veto
Password file = passwd.txt
Attributes = Author, Type,Subject
Options Type = new, runs, problem, misc 
Preset Author = $long_name
Required Attributes = Author, Type, Number
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help
Email format= 15

[procurement]
Theme = default
Password file = passwd.txt
Comment = Pending issues
Attributes = Author, Type,Subject
Preset Author = $long_name from $remote_host
Options Type = Nice to have,Ordered,Received,Needed
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help
Email format= 15
Restrict edit = 1

[issues]
Theme = default
Password file = passwd.txt
Comment = Pending issues
Attributes = Author, Type,Subject
Preset Author = $long_name from $remote_host
Options Type = Idea,Problem, to do, not forget
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help
Email format= 15
Restrict edit = 1

[runliste]
Theme = default
Password file = passwd.txt
Comment = DVCS runliste
Attributes = Author, Type,Subject, Number
Preset Author = $long_name
Options Type = cosmics calo, led calo, pedestal calo, junk calo, misc, cosmics pa, led pa, pedestal pa, junk pa,cosmics, led, pedestal
Required Attributes = Author, Type, Number
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help, CSV Import, Logout, Login
Guest menu commands = Back, Find, Login, Help
Email format= 15
Restrict edit = 1
Use Email Heading = New entry added to runliste related to run $Number
Protect Selection page = 1

[LED]
Theme = default
Password file = passwd.txt
Comment = LED
Attributes = Author, Type,Subject
Options Type = settings,hardware change,software change,remark
Preset Author = $long_name
Required Attributes = Author, Type
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help

[XY]
Theme = default
Password file = passwd.txt
Comment = XY
Attributes = Author, Type,Subject
Options Type = hardware, software, misc 
Preset Author = $long_name from $remote_host
Required Attributes = Author, Type, Number
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help

[test]
Theme = default
Password file = passwd.txt
Comment = test
Attributes = Author, Type,Subject, Number
Options Type = cosmics, led, misc 
Required Attributes = Author
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help


[dvcs]
Theme = default
Password file = passwd.txt
Comment = dvcs
Attributes = Author, Type,Subject, Number
Options Type = cosmics, led, misc 
Required Attributes = Author, Type, Number
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help

[proton]
Theme = default
Comment = Proton array
Password file = passwd.txt
Attributes = Author, Type,Subject
Options Type = new, problem, misc 
Preset Author = $long_name
Required Attributes = Author, Type, Number
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help

[calorimeter]
Password file = passwd.txt
Theme = default
Comment = Calorimeter logbook
Attributes = Author, Type,Subject
Options Type = new, problem, misc 
Preset Author = $long_name
Required Attributes = Author, Type, Number
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help
Email format= 15

[coda]
Password file = passwd.txt
Theme = default
Comment = CODA
Attributes = Author, Type,Subject
Options Type = new, problem, misc 
Required Attributes = Author, Type, Number
Preset Author = $long_name
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help
Email format= 15

[vme]
Password file = passwd.txt
Theme = default
Comment = vme
Attributes = Author, Type,Subject
Options Type = new, problem, misc 
Required Attributes = Author, Type, Number
Page Title = ELOG - $subject
Reverse sort = 1
Quick filter = Date, Type
Menu commands = Back, New, Edit, Delete, Reply, Find, Help
Guest menu commands = Back, Find, Login, Help
Attachment 4: notloggedcfg.jpg
notloggedcfg.jpg
Attachment 5: notloggedcfgg.jpg
notloggedcfgg.jpg
  649   Tue Aug 3 14:51:34 2004 Reply Alexandre Camsonnecamsonne@jlab.orgBug reportLinux2.5.2 - 2.Re: User/Admin privlege question
The elogd.cfg is attached in the previous message as attachement 3. Sorry it is a
little bit buried between pictures.
The reason I put the picture of the global elogd.cfg is to show that the not logged
user has access to elogd.cfg which is some kind of trouble...

> I just see your [global] part of elogd.cfg, could you send me the complete file?
> 

Hi I tried to remove the cookies and it still did not ask for password under 2.5.4.
Has the password file format changed between 2.5.2 and 2.5.3 ?

> What you also could try is to delete all cookies stored in your browser. The way
> cookies are formed changed between 2.5.2 and 2.5.3, so the system could be
> confused by old cookies.
> 
> - Stefan
  654   Tue Aug 3 20:14:55 2004 Smile Alexandre Camsonnecamsonne@jlab.orgBug reportLinux2.5.2 - 2.Re: User/Admin privlege question
Thank you, I misunderstood how the "Guest menu commands" worked I thought I had to specify
a limited set of commands to actually limit guest users.

Thanks again for your wonderful work on this program too.

Regards,

Alexandre

> Ok, now I see your problem. You defined a "Guest menu commands" which explicitly allows
> not-authorized access (that's what it's for). If you only want to allow authorized
> access, remove the "guest menu commands" from the logbook sections and also from the
> [global] section.
> 
> Please note that if an option is not preent in a logbook section, it is looked for in
> the [global] section. I see that most of your logbooks have similar settings. Just put
> them into the [global] section, and override it in the logbook section if they are
> different.
  293   Tue Apr 22 17:13:08 2003 Angy Alexander ZVYAGINAlexander.Zviagine@cern.chBug report  'Reply' removes attachments from the original message
It seems when I use "reply" with an attachments, the original attachments of
the message are removed.

I use elog-2.3.5

Alexander.
  295   Tue Apr 22 17:17:36 2003 Question Alexander ZVYAGINAlexander.Zviagine@cern.chBug report  problem with 20+ attachments
It seems that maximal number of attachments is about 20. When you try to add
more, a new entry _is_ added to the logbook but the refernce to it is not
added to the web page.
  296   Tue Apr 22 17:20:19 2003 Reply Alexander ZVYAGINAlexander.Zviagine@cern.chBug report  Re: 'Reply' removes attachments from the original message
> > It seems when I use "reply" with an attachments, the original attachments of
> > the message are removed.
> > 
> > I use elog-2.3.5
> > 
> > Alexander.
> 
> Please see elog:280 . I will releae 2.3.6 with this bugfix somewhen during 
> this week.
> 
> - Stefan

Wow! Fast reply!!! Thanks a lot!
  298   Tue Apr 22 17:34:52 2003 Reply Alexander ZVYAGINAlexander.Zviagine@cern.chBug report  Re: problem with 20+ attachments
> > It seems that maximal number of attachments is about 20. When you try to add
> > more, a new entry _is_ added to the logbook but the refernce to it is not
> > added to the web page.
> 
> Uhhh, Mr. "monster of number of attachments" gave it's stroke!

:)  I wanted to post a message with ~200 attachments.

>Well, we never 
> had such large number of attachments so I forgot to put a waring in. The 
> limit comes from 
> 
> #define MAX_ATTACHMENTS  20
> 
> in elogd.c which you can easily increase (as long as you have RAM!) and 
> recompile.

Actually my report was NOT about this limitation. You have it - it is fine.
The problem is that I add some 'zombies' or dead files to my logbook.

BTW is there a tool to check the 'integrity' of a logbook? That all
attachments are in place,  there are no dead files, etc. I perfectly
understand that it is not _highly_ desired or needed, but with the two last
problems (auto-removing of attached files and silent adding a new ones with
20+ attachments) I have doubts that our logbook in a good state. And we just
started to use it. And I am still so excited about it!!
ELOG V3.1.5-3fb85fa6