From: Dmitriy S. <sha...@gm...> - 2011-10-18 10:01:26
|
On Tue, Oct 18, 2011 at 2:06 PM, Chris Tomlinson < chr...@gm...> wrote: > 1) So if I understand correctly then there is no longer any default > permissions feature any where, including in the collection.xconf files for > various collections. Is this correct? It seems contrary to the portion of > the thread with Dmitriy so you'll appreciate my confusion. > > 2) What is the security issue? Incorrect admin of the DB is always an > opportunity for problems: performance, security and so on. It seems to me > that removing the ability to provide a default set of permissions some how - > on a collection or on a per user basis or whatever - is a significant > reduction in functionality in order to keep some DB admins from shooting > themselves in the foot so to speak. This means to me that eXist is now > enforcing a particular policy rather than providing mechanism. > +1 to keep this feature. What security issue? human? let move it to mars then .... =) -- Dmitriy Shabanov |