Select the search type
  • Site
  • Web
Search
You are here:  Support/Forums
Support

Bring2mind Forums

WordPad with dmxdav bypassing permissions
Last Post 09/11/2009 5:30 PM by Peter Donker. 1 Replies.
Sort:
PrevPrev NextNext
You are not authorized to post a reply.
Author Messages
Jimmc
New Member
New Member
Posts:1


--
09/05/2009 5:32 AM

I have encountered a concern where dmxdav appears to be ignoring DMX folder permissions.  Hopefully you can tell me what I might have done wrong.

I downloaded the trial version of DMX and I'm accessing it using localhost.  My test computer is as follows...
- Windows 7 build 5100
- IIS 7.5.7100
- IE 8.0.7100
- DMX 5.01.03

Following the installation/configuration instructions I encountered no problems installing DMX.  Once installed I logged in as portal administrator and created a new page with admin only view/edit permissions and installed an instance of DMX to this page.  I then created two DMX folders, Public and Private.  The Public folder has DMX View permissions for all site visitors and Edit Add permissions set for some custom roles I created.  The Private folder has only the role of administrators set for DMX view edit and add, no other roles are set with permissions to access this folder.

I then created two WordPad files, WordPad.rtf and WordPadPriv.rtf on my "local" hard drive.  Using the DMX "Open Windows Explorer" feature I pasted WordPad.rtf into the Public folder and WordPadPriv.rtf into the Private folder.  I checked the permissions for both files and found that each inherited the permissions from their respective folders.

I then created a new page with access by all visitors.  I created another DMX instance on this page and assigned it to the folder Public.  I logged out as portal administrator and as expected the file WordPad.rtf was the only thing accessible from the page.

I then exited Internet Explorer closing all open windows.  I started WordPad on the "local" computer and selected "Open" from the menu.  In the open file text box I entered http://localhost/demo/dmxdav.axd/ and WordPad displayed both the Public and Private folders for me to choose from.  I chose the Private folder and found I could open, edit, and save changes back to the server.  I never encountered any authentication DNN or otherwise.  As expected, I could also edit and save the file in the Public folder.  At no time have I allowed Internet Explorer to remember my DNN log-ins, though I don't think this would even be an issue when opening a file from WordPad.

Is this behavior something that occurs when running as localhost?  Did I overlook or possibly misunderstand something when I configured DMX?

Thanks,
Jim
 

Peter Donker
Veteran Member
Veteran Member
Posts:4536


--
09/11/2009 5:30 PM
Hi Jim,

My guess is that your cookie survived. When WebDAV sees your DNN and/or dmxdav cookie it takes that for authentication. If it's not found you'll be challenged to log in.

Peter
You are not authorized to post a reply.