How to create a restricted area on your homepage
(→Here's how ACLs in OpenCms 6 work in general) |
|||
| Line 30: | Line 30: | ||
Do it like this: | Do it like this: | ||
| − | Open the "Permissions" dialog on the context menu | + | Open the "Permissions" dialog on the context menu: |
| + | |||
1. Add the "Users" group from the list of groups. Leave all boxes unchecked | 1. Add the "Users" group from the list of groups. Leave all boxes unchecked | ||
EXCEPT "overwrite inherited". This must be checked. Press "Set". You have | EXCEPT "overwrite inherited". This must be checked. Press "Set". You have | ||
| Line 37: | Line 38: | ||
dialog. It should show NO permissions "()" for the users group. | dialog. It should show NO permissions "()" for the users group. | ||
| − | 2. | + | 2. Now add "GroupB" on the permission screen of "/folderA/". Give "GroupB" |
the permissions you require, e.g. "read" and "write". Click set. | the permissions you require, e.g. "read" and "write". Click set. | ||
Revision as of 12:37, 20 May 2008
Since no one seems to edit this I'm pasting something I found in the opencms mailing list and the forums...
There are pages which should be accessible for members only, which means that the visitor of the website who wants to see the page has to login first with username and password.
I've read in Matt Butcher's book that there are webusers for such problems. So I created a webuser "Partner" in my new group "webuser-group" which has no parents.
After that I changed the permissions for the restricted file:
Guests: -r -w -c -d -v webuser-group: +r -w -c -d +v
NOTE: you should uncheck the permisions for the Guests group, DON'T check the denied column because this has greater priority and block all access except for the admin user
Here's how ACLs in OpenCms 6 work in general
Important: Forget about the group "inheritance" feature. Just make sure all groups you create are NOT in parent / child relationship with any other goup.
Let's say you have folder "/folderA/" Let's also say you have a group "GroupB" and a group "GroupC" Members of these groups are also in group "Users" since they must be using the workplace.
Let's say you want "/folderA/" accessible only for "GroupB", NOT for "GroupC".
Do it like this:
Open the "Permissions" dialog on the context menu:
1. Add the "Users" group from the list of groups. Leave all boxes unchecked EXCEPT "overwrite inherited". This must be checked. Press "Set". You have now removed all permissions of the "Users" group on the folder. To verify this, check the permissions of any file in the folder using the permission dialog. It should show NO permissions "()" for the users group.
2. Now add "GroupB" on the permission screen of "/folderA/". Give "GroupB" the permissions you require, e.g. "read" and "write". Click set.
Now users of "GroupC" should not be able to view the "/folderA/" anymore in the workplace, they have no read access to it etc.
Best Regards, Alex.
Alexander Kandzior Alkacon Software - The OpenCms Experts http://www.alkacon.com
