Form Builder - how to restrict available applications

classic Classic list List threaded Threaded
5 messages Options
Reply | Threaded
Open this post in threaded view
|

Form Builder - how to restrict available applications

Alexey Vasyukov
Hi folks,

I am playing with Orbeon Form Builder now and have two questions.


> NOTE: Depending on your permissions, the application name might have been picked for you already,
> or you might have the choice of a restricted set of application names.

The question is how to implement this limitation? Is it possible to define few applications and give users just multiple select between them?


2. I'd like to contribute Russian translation of Form Builder and Form Runner. What is the procedure for it?


Many thanks in advance!


Best regards,
Alexey


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: Form Builder - how to restrict available applications

Erik Bruchez
Administrator
Alexey,

On #1: there is a (still undocumented) file called
RESOURCES/config/form-runner-roles.xml, which allows you to map
incoming user roles to a list of apps. You still need an external
system to configure users and roles, as that's not a built-in feature
of Form Runner yet.

On #2: you need to modify 2 files:

* in orbeon-form-runner.jar: apps/fr/i18n/resources.xml
* in orbeon-form-builder.jar: forms/orbeon/builder/form/resources.xml

Or, if you are working from the source:

https://github.com/orbeon/orbeon-forms/blob/master/src/resources/apps/fr/i18n/resources.xml
https://github.com/orbeon/orbeon-forms/blob/master/src/resources/forms/orbeon/builder/form/resources.xml

There are already resources for "en" and "fr", and you need to add "ru".

When you are done you can simply send us these modified files!

-Erik

On Wed, Dec 1, 2010 at 3:11 PM, Alexey Vasyukov <[hidden email]> wrote:

> Hi folks,
> I am playing with Orbeon Form Builder now and have two questions.
> 1. It is mentioned in user guide
> at http://wiki.orbeon.com/forms/doc/user-guide/form-builder-user-guide that:
>> NOTE: Depending on your permissions, the application name might have been
>> picked for you already,
>> or you might have the choice of a restricted set of application names.
> The question is how to implement this limitation? Is it possible to define
> few applications and give users just multiple select between them?
>
> 2. I'd like to contribute Russian translation of Form Builder and Form
> Runner. What is the procedure for it?
>
> Many thanks in advance!
>
> Best regards,
> Alexey
>
> --
> You receive this message as a subscriber of the [hidden email] mailing
> list.
> To unsubscribe: mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> OW2 mailing lists service home page: http://www.ow2.org/wws
>
>


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: Re: Form Builder - how to restrict available applications

Alexey Vasyukov
Hello Erik.

Thank you a lot for your help. I'm sorry for being late with the answer - the end of the year is pretty hard time when the projects are closing and so on.

#1 - regarding form-runner-roles.xml. After some playing around it works for me. So I post my solution just in case somebody will google for similar question and find this thread.

I have the following in form-runner-roles.xml and it works fine - authenticated "sysop" users have the list of available applications when using Form Builder.

<roles>
    <role name="sysop" app="internal" form="*"/>
    <role name="sysop" app="public" form="*"/>
</roles>

BTW, are there some specific undocumented options for form-runner-roles.xml? If it as simple as I see it (everything restricted by default, access to apps and forms is granted explicitely role-based) - may I contribute to security-related documentation? :-)

#2 - I got it. I'll finish translation and proofreading on live system in a week. As soon as it is ready - I'll send you the files.


Alexey


2010/12/2 Erik Bruchez <[hidden email]>
Alexey,

On #1: there is a (still undocumented) file called
RESOURCES/config/form-runner-roles.xml, which allows you to map
incoming user roles to a list of apps. You still need an external
system to configure users and roles, as that's not a built-in feature
of Form Runner yet.

On #2: you need to modify 2 files:

* in orbeon-form-runner.jar: apps/fr/i18n/resources.xml
* in orbeon-form-builder.jar: forms/orbeon/builder/form/resources.xml

Or, if you are working from the source:

https://github.com/orbeon/orbeon-forms/blob/master/src/resources/apps/fr/i18n/resources.xml
https://github.com/orbeon/orbeon-forms/blob/master/src/resources/forms/orbeon/builder/form/resources.xml

There are already resources for "en" and "fr", and you need to add "ru".

When you are done you can simply send us these modified files!

-Erik

On Wed, Dec 1, 2010 at 3:11 PM, Alexey Vasyukov <[hidden email]> wrote:
> Hi folks,
> I am playing with Orbeon Form Builder now and have two questions.
> 1. It is mentioned in user guide
> at http://wiki.orbeon.com/forms/doc/user-guide/form-builder-user-guide that:
>> NOTE: Depending on your permissions, the application name might have been
>> picked for you already,
>> or you might have the choice of a restricted set of application names.
> The question is how to implement this limitation? Is it possible to define
> few applications and give users just multiple select between them?
>
> 2. I'd like to contribute Russian translation of Form Builder and Form
> Runner. What is the procedure for it?
>
> Many thanks in advance!
>
> Best regards,
> Alexey
>
> --
> You receive this message as a subscriber of the [hidden email] mailing
> list.
> To unsubscribe: mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> OW2 mailing lists service home page: http://www.ow2.org/wws
>
>


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: Re: Re: Form Builder - how to restrict available applications

Erik Bruchez
Administrator
Alexey,

> BTW, are there some specific undocumented options for form-runner-roles.xml?
> If it as simple as I see it (everything restricted by default, access to
> apps and forms is granted explicitely role-based) - may I contribute to
> security-related documentation? :-)

Sure, that would be great!

-Erik

> #2 - I got it. I'll finish translation and proofreading on live system in a
> week. As soon as it is ready - I'll send you the files.
>
> Alexey
>
> 2010/12/2 Erik Bruchez <[hidden email]>
>>
>> Alexey,
>>
>> On #1: there is a (still undocumented) file called
>> RESOURCES/config/form-runner-roles.xml, which allows you to map
>> incoming user roles to a list of apps. You still need an external
>> system to configure users and roles, as that's not a built-in feature
>> of Form Runner yet.
>>
>> On #2: you need to modify 2 files:
>>
>> * in orbeon-form-runner.jar: apps/fr/i18n/resources.xml
>> * in orbeon-form-builder.jar: forms/orbeon/builder/form/resources.xml
>>
>> Or, if you are working from the source:
>>
>>
>> https://github.com/orbeon/orbeon-forms/blob/master/src/resources/apps/fr/i18n/resources.xml
>>
>> https://github.com/orbeon/orbeon-forms/blob/master/src/resources/forms/orbeon/builder/form/resources.xml
>>
>> There are already resources for "en" and "fr", and you need to add "ru".
>>
>> When you are done you can simply send us these modified files!
>>
>> -Erik
>>
>> On Wed, Dec 1, 2010 at 3:11 PM, Alexey Vasyukov <[hidden email]>
>> wrote:
>> > Hi folks,
>> > I am playing with Orbeon Form Builder now and have two questions.
>> > 1. It is mentioned in user guide
>> >
>> > at http://wiki.orbeon.com/forms/doc/user-guide/form-builder-user-guide that:
>> >> NOTE: Depending on your permissions, the application name might have
>> >> been
>> >> picked for you already,
>> >> or you might have the choice of a restricted set of application names.
>> > The question is how to implement this limitation? Is it possible to
>> > define
>> > few applications and give users just multiple select between them?
>> >
>> > 2. I'd like to contribute Russian translation of Form Builder and Form
>> > Runner. What is the procedure for it?
>> >
>> > Many thanks in advance!
>> >
>> > Best regards,
>> > Alexey
>> >
>> > --
>> > You receive this message as a subscriber of the [hidden email]
>> > mailing
>> > list.
>> > To unsubscribe: mailto:[hidden email]
>> > For general help: mailto:[hidden email]?subject=help
>> > OW2 mailing lists service home page: http://www.ow2.org/wws
>> >
>> >
>>
>>
>> --
>> You receive this message as a subscriber of the [hidden email] mailing
>> list.
>> To unsubscribe: mailto:[hidden email]
>> For general help: mailto:[hidden email]?subject=help
>> OW2 mailing lists service home page: http://www.ow2.org/wws
>>
>
>
>
> --
> You receive this message as a subscriber of the [hidden email] mailing
> list.
> To unsubscribe: mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> OW2 mailing lists service home page: http://www.ow2.org/wws
>
>


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: Re: Re: Re: Form Builder - how to restrict available applications

Alexey Vasyukov
2010/12/11 Erik Bruchez <[hidden email]>
Alexey,

> BTW, are there some specific undocumented options for form-runner-roles.xml?
> If it as simple as I see it (everything restricted by default, access to
> apps and forms is granted explicitely role-based) - may I contribute to
> security-related documentation? :-)

Sure, that would be great!


Ok. I'll definitely do it - from my point of view it is pretty important topic. But first I should understand myself how security works for Orbeon...

Erik, please, could you take a look at new thread "Orbeon and Apache auth - need help"? I'm trying to create a complete auth and role-based access control and encountered the issue that is really strange for me.

 

-Erik

> #2 - I got it. I'll finish translation and proofreading on live system in a
> week. As soon as it is ready - I'll send you the files.
>
> Alexey
>
> 2010/12/2 Erik Bruchez <[hidden email]>
>>
>> Alexey,
>>
>> On #1: there is a (still undocumented) file called
>> RESOURCES/config/form-runner-roles.xml, which allows you to map
>> incoming user roles to a list of apps. You still need an external
>> system to configure users and roles, as that's not a built-in feature
>> of Form Runner yet.
>>
>> On #2: you need to modify 2 files:
>>
>> * in orbeon-form-runner.jar: apps/fr/i18n/resources.xml
>> * in orbeon-form-builder.jar: forms/orbeon/builder/form/resources.xml
>>
>> Or, if you are working from the source:
>>
>>
>> https://github.com/orbeon/orbeon-forms/blob/master/src/resources/apps/fr/i18n/resources.xml
>>
>> https://github.com/orbeon/orbeon-forms/blob/master/src/resources/forms/orbeon/builder/form/resources.xml
>>
>> There are already resources for "en" and "fr", and you need to add "ru".
>>
>> When you are done you can simply send us these modified files!
>>
>> -Erik
>>
>> On Wed, Dec 1, 2010 at 3:11 PM, Alexey Vasyukov <[hidden email]>
>> wrote:
>> > Hi folks,
>> > I am playing with Orbeon Form Builder now and have two questions.
>> > 1. It is mentioned in user guide
>> >
>> > at http://wiki.orbeon.com/forms/doc/user-guide/form-builder-user-guide that:
>> >> NOTE: Depending on your permissions, the application name might have
>> >> been
>> >> picked for you already,
>> >> or you might have the choice of a restricted set of application names.
>> > The question is how to implement this limitation? Is it possible to
>> > define
>> > few applications and give users just multiple select between them?
>> >
>> > 2. I'd like to contribute Russian translation of Form Builder and Form
>> > Runner. What is the procedure for it?
>> >
>> > Many thanks in advance!
>> >
>> > Best regards,
>> > Alexey
>> >
>> > --
>> > You receive this message as a subscriber of the [hidden email]
>> > mailing
>> > list.
>> > To unsubscribe: mailto:[hidden email]
>> > For general help: mailto:[hidden email]?subject=help
>> > OW2 mailing lists service home page: http://www.ow2.org/wws
>> >
>> >
>>
>>
>> --
>> You receive this message as a subscriber of the [hidden email] mailing
>> list.
>> To unsubscribe: mailto:[hidden email]
>> For general help: mailto:[hidden email]?subject=help
>> OW2 mailing lists service home page: http://www.ow2.org/wws
>>
>
>
>
> --
> You receive this message as a subscriber of the [hidden email] mailing
> list.
> To unsubscribe: mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> OW2 mailing lists service home page: http://www.ow2.org/wws
>
>


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws