Only allow access to Form Runner

CONTENTS DELETED

Hi Michael, it would be helpful to know what server environment you use?  I think this document might help:

http://www.orbeon.com/orbeon/doc/reference-authentication

Rod

-----Original Message-----
From: MichaelCap [mailto:[hidden email]]
Sent: August 6, 2010 7:56 AM
To: [hidden email]
Subject: [ops-users] Only allow access to Form Runner


Hi,

I am wondering if anyone would be able to tell me what I need to do to only allow users access to Form Runner. I want to turn off Form Builder and the Home screen and anything else that is available.

Users should only be able to see forms. e.g.
http://site.com/orbeon/fr/app/form/new

and not

http://site.com/orbeon/home/
http://site.com/orbeon/fr/orbeon/builder/
http://site.com/orbeon/fr/orbeon/xforms-controls/
.
.
.

Any help is appreciated.

Thanks

Michael
--
View this message in context: http://orbeon-forms-ops-users.24843.n4.nabble.com/Only-allow-access-to-Form-Runner-tp2316348p2316348.html
Sent from the Orbeon Forms (ops-users) mailing list archive at Nabble.com.


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws

CONTENTS DELETED

CONTENTS DELETED

Michael,

I would remove WEB-INF/resources/apps, to get rid of all the examples.
Then to restrict access to Form Builder, I would set a
<security-constraint> in the web.xml for /fr/orbeon/builder/*, to
require a login to access Form Builder.

Alex

On Friday, August 6, 2010, MichaelCap <[hidden email]> wrote:

--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws

Here is my example (from the web.xml file) of a security constraint that should do what you need:

    <security-role>
        <role-name>orbeon-admin</role-name>
    </security-role>

    <security-constraint>
        <web-resource-collection>
            <web-resource-name>FR</web-resource-name>
            <url-pattern/fr/orbeon/builder/*</url-pattern>
        </web-resource-collection>        
        <auth-constraint>
            <role-name>orbeon-admin</role-name>
        </auth-constraint>
    </security-constraint>

    <login-config>
        <auth-method>BASIC</auth-method>
    </login-config>

The above constraint assumes that you have a role of orbeon-admin setup in your java server and will pop up an authentication dialog box when you visit form builder.  Hope this helps.  Sorry about the lateness of the reply ai was away for a few days.

Rod

-----Original Message-----
From: Alessandro Vernet [mailto:[hidden email]]
Sent: August 10, 2010 11:29 AM
To: [hidden email]
Subject: [ops-users] Re: Only allow access to Form Runner

Michael,

I would remove WEB-INF/resources/apps, to get rid of all the examples.
Then to restrict access to Form Builder, I would set a <security-constraint> in the web.xml for /fr/orbeon/builder/*, to require a login to access Form Builder.

Alex

On Friday, August 6, 2010, MichaelCap <[hidden email]> wrote:

--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws

CONTENTS DELETED

Michael,

This happens most likely when you go to http://localhost:8080/orbeon/.
Then you are redirected to http://localhost:8080/orbeon/home/, which
loads the "home" app, which doesn't exist as you removed it. But that
is fine, as nobody should go to http://localhost:8080/orbeon/.
Instead, they should go to the "new" page for one of your forms, say
http://localhost:8080/orbeon/fr/orbeon/bookshelf/new/.

In addition to this you'll need to block access to Form Builder, as
mentioned earlier by Rod.

Or you can do all this in a front-end (say Apache), which you setup to
only forward requests for certain paths to Orbeon Forms.

Alex

On Tue, Aug 10, 2010 at 11:45 AM, MichaelCap <[hidden email]> wrote:

--
Orbeon Forms - Web forms, open-source, for the Enterprise -
http://www.orbeon.com/
My Twitter: http://twitter.com/avernet


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws