Deploy BaseX 7.3 as a web application

On Sat, Jul 28, 2012 at 11:21 PM, <jSb_line at gmx.de> wrote: > Hi, > > we deployed BaseX 7.3 as web application in a tomcat7 cluster environment. > > The rest service is running fine in local mode, but we ve a security issue... > > We don't want that someone can modify the xml databases, so it must be readonly, but with no password protection. > > Is there a way to do this in local mode? > > Thanks in advance, > jan > _______________________________________________ > BaseX-Talk mailing list > BaseX-Talk at mailman.uni-konstanz.de > https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk

> Datum: Sun, 29 Jul 2012 13:31:06 +0200 > Von: "Christian Grün" <christian.gruen at gmail.com> > An: jSb_line at gmx.de > CC: basex-talk at mailman.uni-konstanz.de > Betreff: Re: [basex-talk] Deploy BaseX 7.3 as a web application > Hi Jan, > > the usual approach is to create a new user with read permissions, and > assign it as default user in the web.xml file [1]. > > Hope this helps, feel free to ask for more, > Christian > > [1] > https://github.com/BaseXdb/basex-api/blob/master/src/main/webapp/WEB-INF/web.xml > _____________________________________ > > On Sat, Jul 28, 2012 at 11:21 PM, <jSb_line at gmx.de> wrote: > > Hi, > > > > we deployed BaseX 7.3 as web application in a tomcat7 cluster > environment. > > > > The rest service is running fine in local mode, but we ve a security > issue... > > > > We don't want that someone can modify the xml databases, so it must be > readonly, but with no password protection. > > > > Is there a way to do this in local mode? > > > > Thanks in advance, > > jan > > _______________________________________________ > > BaseX-Talk mailing list > > BaseX-Talk at mailman.uni-konstanz.de > > https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk

On Sun, Jul 29, 2012 at 2:01 PM, <jSb_line at gmx.de> wrote: > Hi Christian, > > I tried it this way already, but maybe i do sth wrong here... > > I created a database and a second user with read permission via basexclient. After that i copied the database files to a central file location. I referenced this file location in the web.xml and I also changed the user settings to my readonly user... But when i call the rest service, the service prompts for password and only the default user admin is accepted. > > best regards, > jan > > > -------- Original-Nachricht -------- >> Datum: Sun, 29 Jul 2012 13:31:06 +0200 >> Von: "Christian Grün" <christian.gruen at gmail.com> >> An: jSb_line at gmx.de >> CC: basex-talk at mailman.uni-konstanz.de >> Betreff: Re: [basex-talk] Deploy BaseX 7.3 as a web application > >> Hi Jan, >> >> the usual approach is to create a new user with read permissions, and >> assign it as default user in the web.xml file [1]. >> >> Hope this helps, feel free to ask for more, >> Christian >> >> [1] >> https://github.com/BaseXdb/basex-api/blob/master/src/main/webapp/WEB-INF/web.xml >> _____________________________________ >> >> On Sat, Jul 28, 2012 at 11:21 PM, <jSb_line at gmx.de> wrote: >> > Hi, >> > >> > we deployed BaseX 7.3 as web application in a tomcat7 cluster >> environment. >> > >> > The rest service is running fine in local mode, but we ve a security >> issue... >> > >> > We don't want that someone can modify the xml databases, so it must be >> readonly, but with no password protection. >> > >> > Is there a way to do this in local mode? >> > >> > Thanks in advance, >> > jan >> > _______________________________________________ >> > BaseX-Talk mailing list >> > BaseX-Talk at mailman.uni-konstanz.de >> > https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk

> Datum: Mon, 30 Jul 2012 19:22:29 +0200 > Von: "Christian Grün" <christian.gruen at gmail.com> > An: jSb_line at gmx.de > CC: basex-talk at mailman.uni-konstanz.de > Betreff: Re: [basex-talk] Deploy BaseX 7.3 as a web application > Jan, > sorry for the delay. I'm currently looking at this issue, and will > give you an update soon. > > Christian > ___________________________ > > On Sun, Jul 29, 2012 at 2:01 PM, <jSb_line at gmx.de> wrote: > > Hi Christian, > > > > I tried it this way already, but maybe i do sth wrong here... > > > > I created a database and a second user with read permission via > basexclient. After that i copied the database files to a central file location. I > referenced this file location in the web.xml and I also changed the user > settings to my readonly user... But when i call the rest service, the service > prompts for password and only the default user admin is accepted. > > > > best regards, > > jan > > > > > > -------- Original-Nachricht -------- > >> Datum: Sun, 29 Jul 2012 13:31:06 +0200 > >> Von: "Christian Grün" <christian.gruen at gmail.com> > >> An: jSb_line at gmx.de > >> CC: basex-talk at mailman.uni-konstanz.de > >> Betreff: Re: [basex-talk] Deploy BaseX 7.3 as a web application > > > >> Hi Jan, > >> > >> the usual approach is to create a new user with read permissions, and > >> assign it as default user in the web.xml file [1]. > >> > >> Hope this helps, feel free to ask for more, > >> Christian > >> > >> [1] > >> > https://github.com/BaseXdb/basex-api/blob/master/src/main/webapp/WEB-INF/web.xml > >> _____________________________________ > >> > >> On Sat, Jul 28, 2012 at 11:21 PM, <jSb_line at gmx.de> wrote: > >> > Hi, > >> > > >> > we deployed BaseX 7.3 as web application in a tomcat7 cluster > >> environment. > >> > > >> > The rest service is running fine in local mode, but we ve a security > >> issue... > >> > > >> > We don't want that someone can modify the xml databases, so it must > be > >> readonly, but with no password protection. > >> > > >> > Is there a way to do this in local mode? > >> > > >> > Thanks in advance, > >> > jan > >> > _______________________________________________ > >> > BaseX-Talk mailing list > >> > BaseX-Talk at mailman.uni-konstanz.de > >> > https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk

Am 30.07.2012 19:50 schrieb <jSb_line at gmx.de>: > Hi Christian, > > thx for your help, it works now. > > I just forgot to copy the .basexperm file to the webapp folder. > > best regards, > jan > > > -------- Original-Nachricht -------- > > Datum: Mon, 30 Jul 2012 19:22:29 +0200 > > Von: "Christian Grün" <christian.gruen at gmail.com> > > An: jSb_line at gmx.de > > CC: basex-talk at mailman.uni-konstanz.de > > Betreff: Re: [basex-talk] Deploy BaseX 7.3 as a web application > > > Jan, > > sorry for the delay. I'm currently looking at this issue, and will > > give you an update soon. > > > > Christian > > ___________________________ > > > > On Sun, Jul 29, 2012 at 2:01 PM, <jSb_line at gmx.de> wrote: > > > Hi Christian, > > > > > > I tried it this way already, but maybe i do sth wrong here... > > > > > > I created a database and a second user with read permission via > > basexclient. After that i copied the database files to a central file > location. I > > referenced this file location in the web.xml and I also changed the user > > settings to my readonly user... But when i call the rest service, the > service > > prompts for password and only the default user admin is accepted. > > > > > > best regards, > > > jan > > > > > > > > > -------- Original-Nachricht -------- > > >> Datum: Sun, 29 Jul 2012 13:31:06 +0200 > > >> Von: "Christian Grün" <christian.gruen at gmail.com> > > >> An: jSb_line at gmx.de > > >> CC: basex-talk at mailman.uni-konstanz.de > > >> Betreff: Re: [basex-talk] Deploy BaseX 7.3 as a web application > > > > > >> Hi Jan, > > >> > > >> the usual approach is to create a new user with read permissions, and > > >> assign it as default user in the web.xml file [1]. > > >> > > >> Hope this helps, feel free to ask for more, > > >> Christian > > >> > > >> [1] > > >> > > > https://github.com/BaseXdb/basex-api/blob/master/src/main/webapp/WEB-INF/web.xml > > >> _____________________________________ > > >> > > >> On Sat, Jul 28, 2012 at 11:21 PM, <jSb_line at gmx.de> wrote: > > >> > Hi, > > >> > > > >> > we deployed BaseX 7.3 as web application in a tomcat7 cluster > > >> environment. > > >> > > > >> > The rest service is running fine in local mode, but we ve a security > > >> issue... > > >> > > > >> > We don't want that someone can modify the xml databases, so it must > > be > > >> readonly, but with no password protection. > > >> > > > >> > Is there a way to do this in local mode? > > >> > > > >> > Thanks in advance, > > >> > jan > > >> > _______________________________________________ > > >> > BaseX-Talk mailing list > > >> > BaseX-Talk at mailman.uni-konstanz.de > > >> > https://mailman.uni-konstanz.de/mailman/listinfo/basex-talk >