Limiting Roles

Previous topic

General

Next topic

Author	Message
Jim Rea	Tuesday 31 January 2006 11:55:05 pm I have been experimenting with policies with limited, if any success. I have a content structure that consists of Projects Groups Articles Example Project 1 Group 1 Article 1 Article 2 Article 3 Group 2 Article 1 ... Project N I have been trying to modify (limit) the Anonymous Role so that it only has rights to read all of the content of Project 1 The policies look like this: content read Node( Project 1 ) content pdf Section( Standard ) rss feed No limitations user login SiteAccess( intranet ) When I log in as an anonymous user, I am able to see unrestricted content in all Projects. What am I doing wrong. For reference - these are all of the permissions for this user Anonymous content read Node( Project 1 ) Anonymous content pdf Section( Standard ) Anonymous rss feed No limitations Anonymous user login SiteAccess( intranet ) Forum user content create Class( Forum topic ) , Section( Standard ) , ParentClass( Forum ) Forum user content edit Class( Forum topic ) , Owner( Self ) , Section( Standard ) Forum user content create Class( Forum reply ) , Section( Standard ) , ParentClass( Forum topic ) Forum user content edit Class( Forum reply ) , Owner( Self ) , Section( Standard ) Forum user content versionread Class( Forum topic , Forum reply ) , Section( Standard ) , Owner( Self ) , Status( Draft , Pending ) Forum user user selfedit No limitations Forum user user password No limitations Forum user notification use No limitations Weblog user content create Class( Comment ) , Section( Standard ) , ParentClass( Weblog ) Weblog user content edit Class( Comment ) , Section( Standard ) Weblog user content versionread Class( Comment ) , Section( Standard ) , Owner( Self ) , Status( Draft , Pending ) Thanks for your help.
Thomas Nunninger	Wednesday 01 February 2006 2:51:10 am I can't see anything wrong on the role settings. (BTW: please use the code-tags if you want to format something like table output - it's easier to read.) Did you try to clear the cache? What do you say when "I log in as an anonymous user"? You are just "logged in" as anonymous user if you are not logged in... Thomas
Jim Rea	Wednesday 01 February 2006 8:47:10 am Thomas, Thanks for the reply. Pardon the confusion. When I am logged in as a Guest User which includes an anonymous role. I figured it out content read Node( Projects , eZ publish ) , Subtree( Project 1 )

Author

Message

Jim Rea

Tuesday 31 January 2006 11:55:05 pm

I have been experimenting with policies with limited, if any success.

I have a content structure that consists of
Projects
Groups
Articles

Example

Project 1
Group 1
Article 1
Article 2
Article 3
Group 2
Article 1
...
Project N

I have been trying to modify (limit) the Anonymous Role so that it only has rights to read all of the content of Project 1

The policies look like this:

content read Node( Project 1 )
content pdf Section( Standard )
rss feed No limitations
user login SiteAccess( intranet )

When I log in as an anonymous user, I am able to see unrestricted content in all Projects. What am I doing wrong.

For reference - these are all of the permissions for this user

Anonymous content read Node( Project 1 )
Anonymous content pdf Section( Standard )
Anonymous rss feed No limitations
Anonymous user login SiteAccess( intranet )
Forum user content create Class( Forum topic ) , Section( Standard ) , ParentClass( Forum )
Forum user content edit Class( Forum topic ) , Owner( Self ) , Section( Standard )
Forum user content create Class( Forum reply ) , Section( Standard ) , ParentClass( Forum topic )
Forum user content edit Class( Forum reply ) , Owner( Self ) , Section( Standard )
Forum user content versionread Class( Forum topic , Forum reply ) , Section( Standard ) , Owner( Self ) , Status( Draft , Pending )
Forum user user selfedit No limitations
Forum user user password No limitations
Forum user notification use No limitations
Weblog user content create Class( Comment ) , Section( Standard ) , ParentClass( Weblog )
Weblog user content edit Class( Comment ) , Section( Standard )
Weblog user content versionread Class( Comment ) , Section( Standard ) , Owner( Self ) , Status( Draft , Pending )

Thanks for your help.

Thomas Nunninger

Wednesday 01 February 2006 2:51:10 am

I can't see anything wrong on the role settings. (BTW: please use the code-tags if you want to format something like table output - it's easier to read.) Did you try to clear the cache?

What do you say when "I log in as an anonymous user"? You are just "logged in" as anonymous user if you are not logged in...

Thomas

Jim Rea

Wednesday 01 February 2006 8:47:10 am

Thomas,

Thanks for the reply. Pardon the confusion. When I am logged in as a Guest User which includes an anonymous role.

I figured it out

content read Node( Projects , eZ publish ) , Subtree( Project 1 )

eZ debug

Timing:	Jan 18 2025 18:41:18
Script start
Timing:	Jan 18 2025 18:41:18
Module start 'layout'
Timing:	Jan 18 2025 18:41:18
Module start 'content'
Timing:	Jan 18 2025 18:41:19
Module end 'content'
Timing:	Jan 18 2025 18:41:19
Script end

Main resources:

Total runtime	0.6103 sec
Peak memory usage	4,096.0000 KB
Database Queries	57

Timing points:

Checkpoint	Start (sec)	Duration (sec)	Memory at start (KB)	Memory used (KB)
Script start	0.0000	0.0060	588.9141	152.6094
Module start 'layout'	0.0060	0.0028	741.5234	39.3984
Module start 'content'	0.0088	0.5996	780.9219	514.5703
Module end 'content'	0.6085	0.0018	1,295.4922	12.5156
Script end	0.6103		1,308.0078

Time accumulators:

Accumulator	Duration (sec)	Duration (%)	Count	Average (sec)
Ini load
Load cache	0.0033	0.5328	16	0.0002
Check MTime	0.0014	0.2273	16	0.0001
Mysql Total
Database connection	0.0008	0.1240	1	0.0008
Mysqli_queries	0.5547	90.8987	57	0.0097
Looping result	0.0007	0.1220	55	0.0000
Template Total	0.5784	94.8	2	0.2892
Template load	0.0023	0.3792	2	0.0012
Template processing	0.5761	94.3974	2	0.2880
Template load and register function	0.0001	0.0246	1	0.0001
states
state_id_array	0.0012	0.1983	1	0.0012
state_identifier_array	0.0007	0.1141	2	0.0003
Override
Cache load	0.0020	0.3320	52	0.0000
Sytem overhead
Fetch class attribute can translate value	0.0008	0.1385	2	0.0004
Fetch class attribute name	0.0014	0.2305	4	0.0004
XML
Image XML parsing	0.0008	0.1272	2	0.0004
class_abstraction
Instantiating content class attribute	0.0000	0.0014	4	0.0000
General
dbfile	0.0009	0.1490	16	0.0001
String conversion	0.0000	0.0010	4	0.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

Usage	Requested template	Template	Template loaded
1	node/view/full.tpl	full/forum_topic.tpl	extension/sevenx/design/simple/override/templates/full/forum_topic.tpl
3	content/datatype/view/ezxmltext.tpl	<No override>	extension/community_design/design/suncana/templates/content/datatype/view/ezxmltext.tpl
7	content/datatype/view/ezxmltags/paragraph.tpl	<No override>	extension/ezwebin/design/ezwebin/templates/content/datatype/view/ezxmltags/paragraph.tpl
4	content/datatype/view/ezxmltags/line.tpl	<No override>	design/standard/templates/content/datatype/view/ezxmltags/line.tpl
1	content/datatype/view/ezimage.tpl	<No override>	extension/sevenx/design/simple/templates/content/datatype/view/ezimage.tpl
1	print_pagelayout.tpl	<No override>	extension/community/design/community/templates/print_pagelayout.tpl
Number of times templates used: 17 Number of unique templates used: 6

Time used to render debug report: 0.0001 secs