Hi!
… back on this list. 
I have several problems, esp. in setting up permissions in the
filemanager. Please refer to the bugs I filed:
1813 Filemanager Setting files to world readable does not work.
1816 Filemanager The Index view shows invalid file data
1817 Filemanager Revoked access rights do not restrict read access
Can you please try to solve these issues?
When these are fixed, I’ll try to dig deeper into the usability problem
of the download module of the sitemgr.
About the download module in sitemgr, there seem two ways to go:
A) “world readable” == "readable, regardless an eGroupware session"
This seems to be what the sitemgr module suggests. It shows files even
without checking it’s permissions on the filemanager application.
This is also, what a “standard” behavior for a file download would be.
Changes needed for this option:
- Let webdav.php distinguish whether world read permissions exist on the
object (dir or file) shown and auto-login the anonymous user if no
session exists
- Disregard application permissions for sake of existing
world-readable permissions
- Make it an config option to select this interpretation?
B) “world readable” == "readable, regardless the user’s group"
This seems more like the eGroupware design (except sitemgr): Each access
sets up a session. But this would disallow file downloads without having
previously visited the site (direct download, using the URL does not work).
Changes needed for this option:
- change the download module to check download permissions
(application permissions) before listing files
- Do not let the anonymous user add files in /home/anonymous
- Let the login (basic auth) notification be more verbose to explain the
need of a session
I would much more love option A which is just like the whole sitemgr /
anonymous integration - but I could live with option B too if really
needed… Anyway, both approaches currently do not work as a public
download area where files are managed by eGroupware users…
Which way can we go?
Best regards,
Hans-Jürgen
This SF.Net email is sponsored by the Moblin Your Move Developer’s challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
eGroupWare-developers mailing list
eGroupWare-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-developers
