[gollem] Problem with gollem

[Jan Schneider]

Zitat von Predrag Culum <pedja at etron.rs>:

> ----- Message from Arjen de Korte <build+horde at de-korte.org> ---------
>    Date: Sun, 12 Jan 2020 20:30:28 +0100
>    From: Arjen de Korte <build+horde at de-korte.org>
> Subject: Re: [gollem] Problem with gollem
>      To: gollem at lists.horde.org
>
>> Citeren Predrag Culum <pedja at etron.rs>:
>>
>>> Hi everyone,
>>>  i have successfully configure horde for my purposes but i have  
>>> problem with gollem.
>>> Everything is working fine except permitions for editing files.
>>> For example , if I deny access to folder everything is working  
>>> fine, but if i allow user to read file he is immediately in  
>>> possibility to edit file even i have not permitted that . Adress  
>>> book , tasks are working fine , just problem with gollem .
>>> Any suggestions?
>>
>> Which backend do you use (content of  
>> 'horde/gollem/config/backends.local.php')? And exactly how did you  
>> configure the permissions?
>>
>> --
>> gollem mailing list
>> Frequently Asked Questions: http://wiki.horde.org/FAQTo  
>> unsubscribe, mail: gollem-unsubscribe at lists.horde.org
>
> ----- End message from Arjen de Korte <build+horde at de-korte.org> -----
>
> Hi ,
>
>  i have made dir /var/www/webmail/vfsroot  owned apache:apache
>
> i have used suggested setings .
>  $backends['file'] = array(
>        // Disabled by default
>        'disabled' => false,
>        'name' =>  'Server',
>        'driver' => 'file',
>        'hordeauth' => true,
>       'params' => array(
>            // The base location under which the user home directories live.
>            'vfsroot' => '/var/www/webmail/vfsroot/home/',
>            // The default permissions to set for newly created  
> folders and file>
>            'permissions' => '750'
>        ),
>        'loginparams' => array(),
>        'root' => '/',
>        'home' => $GLOBALS['registry']->getAuth(),
>
>      'createhome' => true,
>        // 'filter' => '^regex$',
>        // 'quota' => false,
> 'clipboard' => true,
>        'shares' => true,
>        'attributes' => array(
>            'type',
>            'name',
>            'share',
>            'edit',
>            'download',
>            'modified',
>            'size',
>            'permission',
>            'owner',
>            'group'
>        )
>    );
>
> i would like to use ldap but i am still learning how to use . i have  
> make ldap server but still i am confused how to make it work .  
> anyway i think this is valid problem in golem .
> Best regards,
> Pedja

There are file-level permissions that are only supported on backends  
that have filesystem permissions too, like SSH/SFTP.

And then there are Shares that work on folders instead. You cannot set  
permissions on the file level for Shares.

-- 
Jan Schneider
The Horde Project
https://www.horde.org/