Re: [Exist-development] default perms in collection.xconf do not seem to work

[Chris T. <chr...@gm...>]

Adam,

It would be a great help if we had a simple roadmap for the security rework. If you can point me to a thread that has the details or hopefully quickly sketch out where we are and where we're going that would be great. I've been following the security stuff and actually thought it had settled down in the early summer and assumed that it was now stabilizing.

In fact what what other major items are on the to do list for the next stabilization - 1.6?

Thanks,
Chris


On Oct 18, 2011, at 7:08 PM, Adam Retter wrote:

> Yes I have read your emails. I also just responded. I am not deaf to
> the requirement but please do not enable it right at the moment as it
> will impact on outstanding changes I have. As this is all in flux
> before the next release anyway, if you enable it now, it will most
> likely be disabled again later in some way when it is replaced...
> 
> 
> 
> On 18 October 2011 14:12, Wolfgang Meier <wol...@ex...> wrote:
>> Adam,
>> 
>>> Default permissions are no longer configurable, this was a security
>>> design concern.
>> 
>> Have you read our emails? I think there are many arguments why we
>> still need default permissions and I definitely would like to
>> re-enable them.
>> 
>>> New ACL's will permit inheritance in the near future, so this would be
>>> the mechanism for replace such use cases.
>> 
>> ... at least until this mechanism is in place and has been tested.
>> 
>> Wolfgang
>> 
> 
> 
> 
> -- 
> Adam Retter
> 
> eXist Developer
> { United Kingdom }
> ad...@ex...
> irc://irc.freenode.net/existdb
> 
> ------------------------------------------------------------------------------
> All the data continuously generated in your IT infrastructure contains a
> definitive record of customers, application performance, security
> threats, fraudulent activity and more. Splunk takes this data and makes
> sense of it. Business sense. IT sense. Common sense.
> http://p.sf.net/sfu/splunk-d2d-oct
> _______________________________________________
> Exist-development mailing list
> Exi...@li...
> https://lists.sourceforge.net/lists/listinfo/exist-development