Hi,
we deployed BaseX 7.3 as web application in a tomcat7 cluster environment.
The rest service is running fine in local mode, but we ve a security issue...
We don't want that someone can modify the xml databases, so it must be readonly, but with no password protection.
Is there a way to do this in local mode?
Thanks in advance, jan
Hi Jan,
the usual approach is to create a new user with read permissions, and assign it as default user in the web.xml file [1].
Hope this helps, feel free to ask for more, Christian
[1] https://github.com/BaseXdb/basex-api/blob/master/src/main/webapp/WEB-INF/web... _____________________________________
On Sat, Jul 28, 2012 at 11:21 PM, jSb_line@gmx.de wrote:
Hi,
we deployed BaseX 7.3 as web application in a tomcat7 cluster environment.
The rest service is running fine in local mode, but we ve a security issue...
We don't want that someone can modify the xml databases, so it must be readonly, but with no password protection.
Is there a way to do this in local mode?
Thanks in advance, jan _______________________________________________ BaseX-Talk mailing list BaseX-Talk@mailman.uni-konstanz.de https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk
Hi Christian,
I tried it this way already, but maybe i do sth wrong here...
I created a database and a second user with read permission via basexclient. After that i copied the database files to a central file location. I referenced this file location in the web.xml and I also changed the user settings to my readonly user... But when i call the rest service, the service prompts for password and only the default user admin is accepted.
best regards, jan
-------- Original-Nachricht --------
Datum: Sun, 29 Jul 2012 13:31:06 +0200 Von: "Christian Grün" christian.gruen@gmail.com An: jSb_line@gmx.de CC: basex-talk@mailman.uni-konstanz.de Betreff: Re: [basex-talk] Deploy BaseX 7.3 as a web application
Hi Jan,
the usual approach is to create a new user with read permissions, and assign it as default user in the web.xml file [1].
Hope this helps, feel free to ask for more, Christian
[1] https://github.com/BaseXdb/basex-api/blob/master/src/main/webapp/WEB-INF/web... _____________________________________
On Sat, Jul 28, 2012 at 11:21 PM, jSb_line@gmx.de wrote:
Hi,
we deployed BaseX 7.3 as web application in a tomcat7 cluster
environment.
The rest service is running fine in local mode, but we ve a security
issue...
We don't want that someone can modify the xml databases, so it must be
readonly, but with no password protection.
Is there a way to do this in local mode?
Thanks in advance, jan _______________________________________________ BaseX-Talk mailing list BaseX-Talk@mailman.uni-konstanz.de https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk
Jan, sorry for the delay. I'm currently looking at this issue, and will give you an update soon.
Christian ___________________________
On Sun, Jul 29, 2012 at 2:01 PM, jSb_line@gmx.de wrote:
Hi Christian,
I tried it this way already, but maybe i do sth wrong here...
I created a database and a second user with read permission via basexclient. After that i copied the database files to a central file location. I referenced this file location in the web.xml and I also changed the user settings to my readonly user... But when i call the rest service, the service prompts for password and only the default user admin is accepted.
best regards, jan
-------- Original-Nachricht --------
Datum: Sun, 29 Jul 2012 13:31:06 +0200 Von: "Christian Grün" christian.gruen@gmail.com An: jSb_line@gmx.de CC: basex-talk@mailman.uni-konstanz.de Betreff: Re: [basex-talk] Deploy BaseX 7.3 as a web application
Hi Jan,
the usual approach is to create a new user with read permissions, and assign it as default user in the web.xml file [1].
Hope this helps, feel free to ask for more, Christian
[1] https://github.com/BaseXdb/basex-api/blob/master/src/main/webapp/WEB-INF/web... _____________________________________
On Sat, Jul 28, 2012 at 11:21 PM, jSb_line@gmx.de wrote:
Hi,
we deployed BaseX 7.3 as web application in a tomcat7 cluster
environment.
The rest service is running fine in local mode, but we ve a security
issue...
We don't want that someone can modify the xml databases, so it must be
readonly, but with no password protection.
Is there a way to do this in local mode?
Thanks in advance, jan _______________________________________________ BaseX-Talk mailing list BaseX-Talk@mailman.uni-konstanz.de https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk
Hi Christian,
thx for your help, it works now.
I just forgot to copy the .basexperm file to the webapp folder.
best regards, jan
-------- Original-Nachricht --------
Datum: Mon, 30 Jul 2012 19:22:29 +0200 Von: "Christian Grün" christian.gruen@gmail.com An: jSb_line@gmx.de CC: basex-talk@mailman.uni-konstanz.de Betreff: Re: [basex-talk] Deploy BaseX 7.3 as a web application
Jan, sorry for the delay. I'm currently looking at this issue, and will give you an update soon.
Christian ___________________________
On Sun, Jul 29, 2012 at 2:01 PM, jSb_line@gmx.de wrote:
Hi Christian,
I tried it this way already, but maybe i do sth wrong here...
I created a database and a second user with read permission via
basexclient. After that i copied the database files to a central file location. I referenced this file location in the web.xml and I also changed the user settings to my readonly user... But when i call the rest service, the service prompts for password and only the default user admin is accepted.
best regards, jan
-------- Original-Nachricht --------
Datum: Sun, 29 Jul 2012 13:31:06 +0200 Von: "Christian Grün" christian.gruen@gmail.com An: jSb_line@gmx.de CC: basex-talk@mailman.uni-konstanz.de Betreff: Re: [basex-talk] Deploy BaseX 7.3 as a web application
Hi Jan,
the usual approach is to create a new user with read permissions, and assign it as default user in the web.xml file [1].
Hope this helps, feel free to ask for more, Christian
[1]
https://github.com/BaseXdb/basex-api/blob/master/src/main/webapp/WEB-INF/web...
On Sat, Jul 28, 2012 at 11:21 PM, jSb_line@gmx.de wrote:
Hi,
we deployed BaseX 7.3 as web application in a tomcat7 cluster
environment.
The rest service is running fine in local mode, but we ve a security
issue...
We don't want that someone can modify the xml databases, so it must
be
readonly, but with no password protection.
Is there a way to do this in local mode?
Thanks in advance, jan _______________________________________________ BaseX-Talk mailing list BaseX-Talk@mailman.uni-konstanz.de https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk
I'm glad to hear that it works (didn't think about this). Am 30.07.2012 19:50 schrieb jSb_line@gmx.de:
Hi Christian,
thx for your help, it works now.
I just forgot to copy the .basexperm file to the webapp folder.
best regards, jan
-------- Original-Nachricht --------
Datum: Mon, 30 Jul 2012 19:22:29 +0200 Von: "Christian Grün" christian.gruen@gmail.com An: jSb_line@gmx.de CC: basex-talk@mailman.uni-konstanz.de Betreff: Re: [basex-talk] Deploy BaseX 7.3 as a web application
Jan, sorry for the delay. I'm currently looking at this issue, and will give you an update soon.
Christian ___________________________
On Sun, Jul 29, 2012 at 2:01 PM, jSb_line@gmx.de wrote:
Hi Christian,
I tried it this way already, but maybe i do sth wrong here...
I created a database and a second user with read permission via
basexclient. After that i copied the database files to a central file
location. I
referenced this file location in the web.xml and I also changed the user settings to my readonly user... But when i call the rest service, the
service
prompts for password and only the default user admin is accepted.
best regards, jan
-------- Original-Nachricht --------
Datum: Sun, 29 Jul 2012 13:31:06 +0200 Von: "Christian Grün" christian.gruen@gmail.com An: jSb_line@gmx.de CC: basex-talk@mailman.uni-konstanz.de Betreff: Re: [basex-talk] Deploy BaseX 7.3 as a web application
Hi Jan,
the usual approach is to create a new user with read permissions, and assign it as default user in the web.xml file [1].
Hope this helps, feel free to ask for more, Christian
[1]
https://github.com/BaseXdb/basex-api/blob/master/src/main/webapp/WEB-INF/web...
On Sat, Jul 28, 2012 at 11:21 PM, jSb_line@gmx.de wrote:
Hi,
we deployed BaseX 7.3 as web application in a tomcat7 cluster
environment.
The rest service is running fine in local mode, but we ve a security
issue...
We don't want that someone can modify the xml databases, so it must
be
readonly, but with no password protection.
Is there a way to do this in local mode?
Thanks in advance, jan _______________________________________________ BaseX-Talk mailing list BaseX-Talk@mailman.uni-konstanz.de https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk
basex-talk@mailman.uni-konstanz.de
-
Christian Grün -
jSb_line＠gmx.de