Hi,
I am a beginner to Orbeon forms and I just tried exploring the form runner access control part. I have followed the document http://wiki.orbeon.com/forms/doc/developer-guide/form-runner/access-control and i am able to successfully implement Container-driven method but not with Header-driven method. I have created an app and a form (test/testform) and in my form-builder-permissions.xml i have set the permission as <role name="orbeon-user" app="test" form="*"/> and in properties-local.xml, the following properties are defined <property as="xs:string" name="oxf.fr.authentication.method" value="header"/> <property as="xs:string" name="oxf.fr.authentication.header.username" value="My-Username-Header"/> <property as="xs:string" name="oxf.fr.authentication.header.group" value="My-Group-Header"/> <property as="xs:string" name="oxf.fr.authentication.header.roles" value="My-Roles-Header"/> <property as="xs:string" name="oxf.xforms.forward-submission-headers" value="My-Username-Header My-Roles-Header"/> now when i try to access the form through browser "/orbeon/fr/test/testform/summary" i got the summary page though i was not passing any headers (with a role "orbeon-user" specified) Am i missing any configuration? I am using "orbeon-4.3.1.0.201308300457-PE" on Tomcat 7 Regards, Vadivel |
Administrator
|
Hi Vadivel,
form-builder-permissions.xml defines permissions for people using Form Builder. So with <role name="orbeon-user" app="test" form="*"/>, you're saying that to be able edit or create forms in the "test" app, users need to have the orbeon-user role. But this says nothing about what role is needed to be able to fill out forms in that app. For that, you'll want to define access permission within Form Builder when editing that form. See: http://wiki.orbeon.com/forms/doc/developer-guide/form-runner/access-control#TOC-Since-Orbeon-Forms-4.0 Alex
--
Follow Orbeon on Twitter: @orbeon Follow me on Twitter: @avernet |
Hi Alex, I understood what was missing and now it is working fine for me. Thanks for your support! Regards, Vadivel From: Alessandro Vernet [via Orbeon Forms
community mailing list] [mailto:[hidden email]] Hi Vadivel, -- If you reply to this email, your message will be added to the
discussion below: http://discuss.orbeon.com/issue-when-implementing-Header-driven-method-tp4657913p4657921.html
To unsubscribe from issue when
implementing Header-driven method, click
here. View this message in context: RE: issue when implementing Header-driven method Sent from the Orbeon Forms community mailing list mailing list archive at Nabble.com. -- You received this message because you are subscribed to the Google Groups "Orbeon Forms" group. To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email]. To post to this group, send email to [hidden email]. |
In reply to this post by Alessandro Vernet
Hi Alex, I understood what was missing and now it is working fine for me. Thanks for your support! Regards, Vadivel From: Alessandro Vernet [via Orbeon Forms
community mailing list] [mailto:[hidden email]] Hi Vadivel, -- If you reply to this email, your message will be added to the
discussion below: http://discuss.orbeon.com/issue-when-implementing-Header-driven-method-tp4657913p4657921.html
To unsubscribe from issue when
implementing Header-driven method, click
here. |
Administrator
|
In reply to this post by Vadivel
Hi Vadivel,
Excellent then, and thanks for the update. Alex
--
Follow Orbeon on Twitter: @orbeon Follow me on Twitter: @avernet |
Hi Alex, I have configured Orbeon forms to use MySQL persistence layer and
the form data is getting saved in “orbeon_form_data” table. But the issue is, the username that i pass through header is not
getting saved in “username” column. The following are my configuration details, <property as="xs:string"
name="oxf.fr.authentication.method" value="header"/>
<property as="xs:string"
name="oxf.fr.authentication.header.username"
value="My-Username-Header"/> <property as="xs:string" name="oxf.fr.authentication.header.group"
value="My-Group-Header"/> <property as="xs:string"
name="oxf.fr.authentication.header.roles"
value="My-Roles-Header"/> <property as="xs:string"
name="oxf.xforms.forward-submission-headers"
value="My-Username-Header My-Roles-Header"/> <property as="xs:anyURI"
name="oxf.fr.persistence.app.uri.*.*.*" value="/fr/service/mysql"
/> <property as="xs:anyURI"
name="oxf.fr.persistence.service.mysql.datasource" value="mysql"
/> <property as="xs:string" name="oxf.fr.persistence.provider.*.*.*"
value="mysql" /> <property as="xs:anyURI"
name="oxf.fr.persistence.mysql.uri" value="/fr/service/mysql"
/> <property as="xs:string"
name="oxf.fr.persistence.mysql.datasource" value="mysql"
/> <property as="xs:boolean" name="oxf.fr.persistence.mysql.active"
value="true" /> <property as="xs:string"
name="oxf.http.forward-headers" value="mysql"/> <resource-ref> <description>DataSource</description> <res-ref-name>jdbc/mysql</res-ref-name> <res-type>javax.sql.DataSource</res-type> <res-auth>Container</res-auth> </resource-ref> Am i missing any steps? Regards, Vadivel From: Alessandro Vernet [via Orbeon Forms
community mailing list] [mailto:[hidden email]] Hi Vadivel, -- If you reply to this email, your message will be added to the
discussion below: http://discuss.orbeon.com/issue-when-implementing-Header-driven-method-tp4657913p4657933.html
To unsubscribe from issue when
implementing Header-driven method, click
here. |
In reply to this post by Alessandro Vernet
Hi Alex, I have configured Orbeon forms to use MySQL persistence layer and
the form data is getting saved in “orbeon_form_data” table. But the issue is, the username that i pass through header is not
getting saved in “username” column. The following are my configuration details, <property as="xs:string"
name="oxf.fr.authentication.method" value="header"/>
<property as="xs:string"
name="oxf.fr.authentication.header.username"
value="My-Username-Header"/> <property as="xs:string" name="oxf.fr.authentication.header.group"
value="My-Group-Header"/> <property as="xs:string"
name="oxf.fr.authentication.header.roles"
value="My-Roles-Header"/> <property as="xs:string"
name="oxf.xforms.forward-submission-headers"
value="My-Username-Header My-Roles-Header"/> <property as="xs:anyURI"
name="oxf.fr.persistence.app.uri.*.*.*" value="/fr/service/mysql"
/> <property as="xs:anyURI"
name="oxf.fr.persistence.service.mysql.datasource" value="mysql"
/> <property as="xs:string" name="oxf.fr.persistence.provider.*.*.*"
value="mysql" /> <property as="xs:anyURI"
name="oxf.fr.persistence.mysql.uri" value="/fr/service/mysql"
/> <property as="xs:string"
name="oxf.fr.persistence.mysql.datasource" value="mysql"
/> <property as="xs:boolean" name="oxf.fr.persistence.mysql.active"
value="true" /> <property as="xs:string"
name="oxf.http.forward-headers" value="mysql"/> <resource-ref> <description>DataSource</description> <res-ref-name>jdbc/mysql</res-ref-name> <res-type>javax.sql.DataSource</res-type> <res-auth>Container</res-auth> </resource-ref> Am i missing any steps? Regards, Vadivel From: Alessandro Vernet [via Orbeon Forms
community mailing list] [mailto:[hidden email]] Hi Vadivel, -- If you reply to this email, your message will be added to the
discussion below: http://discuss.orbeon.com/issue-when-implementing-Header-driven-method-tp4657913p4657933.html
To unsubscribe from issue when
implementing Header-driven method, click
here. View this message in context: RE: issue when implementing Header-driven method Sent from the Orbeon Forms community mailing list mailing list archive at Nabble.com. -- You received this message because you are subscribed to the Google Groups "Orbeon Forms" group. To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email]. To post to this group, send email to [hidden email]. |
Administrator
|
Hi Vadivel,
The last property looks suspicious: <property as="xs:string" name="oxf.http.forward-headers" value="mysql"/> It should be: <property as="xs:string" name="oxf.http.forward-headers" value="My-Username-Header My-Roles-Header"/> You'll let us know if this solves the problem, Alex
--
Follow Orbeon on Twitter: @orbeon Follow me on Twitter: @avernet |
Hi Alex, Thanks for the support, I have included this property to forward the headers to this
datasource (“mysql” is my data source name) <property as="xs:string"
name="oxf.http.forward-headers" value="mysql"/> Since i was not able to get through with the following properties,
i tried to include that one as well. <property as="xs:string"
name="oxf.fr.authentication.method"
value="header"/>
<property as="xs:string"
name="oxf.fr.authentication.header.username"
value="My-Username-Header"/> <property as="xs:string"
name="oxf.fr.authentication.header.group" value="My-Group-Header"/> <property as="xs:string"
name="oxf.fr.authentication.header.roles"
value="My-Roles-Header"/> <property as="xs:string"
name="oxf.xforms.forward-submission-headers"
value="My-Username-Header My-Roles-Header"/> As i mentioned in my earlier reply, i am able to pass the role
header with these settings, only the user name that i pass is not getting saved in the database. Regards, Vadivel From: Alessandro Vernet [via Orbeon Forms
community mailing list] [mailto:[hidden email]] Hi Vadivel, -- If you reply to this email, your message will be added to the
discussion below: http://discuss.orbeon.com/issue-when-implementing-Header-driven-method-tp4657913p4657964.html
To unsubscribe from issue when
implementing Header-driven method, click
here. |
In reply to this post by Alessandro Vernet
Hi Alex, Thanks for the support, I have included this property to forward the headers to this
datasource (“mysql” is my data source name) <property as="xs:string"
name="oxf.http.forward-headers" value="mysql"/> Since i was not able to get through with the following properties,
i tried to include that one as well. <property as="xs:string"
name="oxf.fr.authentication.method"
value="header"/>
<property as="xs:string"
name="oxf.fr.authentication.header.username"
value="My-Username-Header"/> <property as="xs:string"
name="oxf.fr.authentication.header.group" value="My-Group-Header"/> <property as="xs:string"
name="oxf.fr.authentication.header.roles"
value="My-Roles-Header"/> <property as="xs:string"
name="oxf.xforms.forward-submission-headers"
value="My-Username-Header My-Roles-Header"/> As i mentioned in my earlier reply, i am able to pass the role
header with these settings, only the user name that i pass is not getting saved in the database. Regards, Vadivel From: Alessandro Vernet [via Orbeon Forms
community mailing list] [mailto:[hidden email]] Hi Vadivel, -- If you reply to this email, your message will be added to the
discussion below: http://discuss.orbeon.com/issue-when-implementing-Header-driven-method-tp4657913p4657964.html
To unsubscribe from issue when
implementing Header-driven method, click
here. View this message in context: RE: issue when implementing Header-driven method Sent from the Orbeon Forms community mailing list mailing list archive at Nabble.com. -- You received this message because you are subscribed to the Google Groups "Orbeon Forms" group. To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email]. To post to this group, send email to [hidden email]. |
Administrator
|
Try instead:
<property as="xs:string" name="oxf.xforms.forward-submission-headers" value="My-Username-Header My-Roles-Header"/> -Erik |
Hi Erik, Thanks for the support, I didn’t see any difference between the one you mentioned, <property as="xs:string" name="oxf.xforms.forward-submission-headers" value="My-Username-Header My-Roles-Header"/> and the one that i already have <property as="xs:string"
name="oxf.xforms.forward-submission-headers"
value="My-Username-Header My-Roles-Header"/> As i mentioned the following are the list of property settings i
have <property as="xs:string" name="oxf.fr.authentication.method"
value="header"/>
<property as="xs:string"
name="oxf.fr.authentication.header.username"
value="My-Username-Header"/> <property as="xs:string"
name="oxf.fr.authentication.header.group" value="My-Group-Header"/> <property as="xs:string"
name="oxf.fr.authentication.header.roles"
value="My-Roles-Header"/> <property as="xs:string"
name="oxf.xforms.forward-submission-headers"
value="My-Username-Header My-Roles-Header"/> Am i missing your point? I thought you may be asking me to remove all my property
settings and include “only” the one you mentioned And tried with the following properties alone and
removed other ones <property as="xs:string" name="oxf.fr.authentication.method"
value="header"/> <property as="xs:string"
name="oxf.xforms.forward-submission-headers"
value="My-Username-Header My-Roles-Header"/> Still i see the same behaviour. Username is not stored in the
database. Regards, Vadivel From: Erik Bruchez [via Orbeon Forms community
mailing list] [mailto:[hidden email]] Try instead: If you reply to this email, your message will be added to the
discussion below: http://discuss.orbeon.com/issue-when-implementing-Header-driven-method-tp4657913p4657970.html
To unsubscribe from issue when
implementing Header-driven method, click
here. |
In reply to this post by Erik Bruchez
Hi Erik, Thanks for the support, I didn’t see any difference between the one you mentioned, <property as="xs:string" name="oxf.xforms.forward-submission-headers" value="My-Username-Header My-Roles-Header"/> and the one that i already have <property as="xs:string"
name="oxf.xforms.forward-submission-headers"
value="My-Username-Header My-Roles-Header"/> As i mentioned the following are the list of property settings i
have <property as="xs:string" name="oxf.fr.authentication.method"
value="header"/>
<property as="xs:string"
name="oxf.fr.authentication.header.username"
value="My-Username-Header"/> <property as="xs:string"
name="oxf.fr.authentication.header.group" value="My-Group-Header"/> <property as="xs:string"
name="oxf.fr.authentication.header.roles"
value="My-Roles-Header"/> <property as="xs:string"
name="oxf.xforms.forward-submission-headers"
value="My-Username-Header My-Roles-Header"/> Am i missing your point? I thought you may be asking me to remove all my property
settings and include “only” the one you mentioned And tried with the following properties alone and
removed other ones <property as="xs:string" name="oxf.fr.authentication.method"
value="header"/> <property as="xs:string"
name="oxf.xforms.forward-submission-headers"
value="My-Username-Header My-Roles-Header"/> Still i see the same behaviour. Username is not stored in the
database. Regards, Vadivel From: Erik Bruchez [via Orbeon Forms community
mailing list] [mailto:[hidden email]] Try instead: If you reply to this email, your message will be added to the
discussion below: http://discuss.orbeon.com/issue-when-implementing-Header-driven-method-tp4657913p4657970.html
To unsubscribe from issue when
implementing Header-driven method, click
here. View this message in context: RE: issue when implementing Header-driven method Sent from the Orbeon Forms community mailing list mailing list archive at Nabble.com. -- You received this message because you are subscribed to the Google Groups "Orbeon Forms" group. To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email]. To post to this group, send email to [hidden email]. |
Administrator
|
Hi Vadivel,
Sorry for the delay, but we haven't gotten a chance to verify this yet. However, we created a issue for this (linked below), and scheduled it for 4.5, so we'll at least double check this, and if we can fix it before the release. We'll also make sure to post updates here. https://github.com/orbeon/orbeon-forms/issues/1541 Alex
--
Follow Orbeon on Twitter: @orbeon Follow me on Twitter: @avernet |
Hi Alex, Thanks for the support, Will wait for the updates. Regards, Vadivel From: Alessandro Vernet [via Orbeon Forms
community mailing list] [mailto:[hidden email]] Hi Vadivel, -- If you reply to this email, your message will be added to the
discussion below: http://discuss.orbeon.com/issue-when-implementing-Header-driven-method-tp4657913p4657986.html
To unsubscribe from issue when
implementing Header-driven method, click
here. |
In reply to this post by Alessandro Vernet
Hi Alex, Thanks for the support, Will wait for the updates. Regards, Vadivel From: Alessandro Vernet [via Orbeon Forms
community mailing list] [mailto:[hidden email]] Hi Vadivel, -- If you reply to this email, your message will be added to the
discussion below: http://discuss.orbeon.com/issue-when-implementing-Header-driven-method-tp4657913p4657986.html
To unsubscribe from issue when
implementing Header-driven method, click
here. View this message in context: RE: issue when implementing Header-driven method Sent from the Orbeon Forms community mailing list mailing list archive at Nabble.com. -- You received this message because you are subscribed to the Google Groups "Orbeon Forms" group. To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email]. To post to this group, send email to [hidden email]. |
Administrator
|
Hi Vadivel,
I was unable to reproduce this. See my comment on the issue linked below, and you'll let me know if I should do anything differently to reproduce the problem you're seeing. https://github.com/orbeon/orbeon-forms/issues/1541 Alex
--
Follow Orbeon on Twitter: @orbeon Follow me on Twitter: @avernet |
Hi Alex,
Thanks for the support. We have discussed this use case earlier in this thread. "As i mentioned in my earlier reply, i am able to pass the role header with these settings, only the user name that i pass is not getting saved in the database." Means, i get access based on the 'role header' that i send. This works fine for me. This is the use case you just confirmed now. Are you able to save the "user name" that you send through "user name header" in the database? Basically i want to keep track of which user has created/modified the form data. Can you please confirm this? Regards, Vadivel |
Administrator
|
Hi Vadivel,
Sorry about that: I reopened the issue, renamed it to "Username not persisted with header based permission", will check if this works, and post an update here. And just to confirm, you're saying that if, after saving, you look at what you have in the database, then the username isn't present in the last_modified_by column? And specifically, what relational database are you using? Alex
--
Follow Orbeon on Twitter: @orbeon Follow me on Twitter: @avernet |
Hi Alex, Thanks for the support. “And just to confirm, you're saying that if, after saving,
you look at what you have in the database, then the username isn't present in
the last_modified_by column?” Yes, this what happening in my case and I use
"mysql-5.6.15". Regards, Vadivel From: Alessandro Vernet [via Orbeon Forms
community mailing list] [mailto:[hidden email]] Hi Vadivel, -- If you reply to this email, your message will be added to the
discussion below: http://discuss.orbeon.com/issue-when-implementing-Header-driven-method-tp4657913p4658023.html
To unsubscribe from issue when
implementing Header-driven method, click
here. View this message in context: RE: issue when implementing Header-driven method Sent from the Orbeon Forms community mailing list mailing list archive at Nabble.com. -- You received this message because you are subscribed to the Google Groups "Orbeon Forms" group. To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email]. To post to this group, send email to [hidden email]. |
Free forum by Nabble | Edit this page |