04-15-2009 10:57 AM
05-26-2009 02:12 PM
05-26-2009 02:24 PM
05-28-2009 12:01 PM
05-28-2009 12:49 PM
05-29-2009 05:27 AM
05-29-2009 07:23 PM
05-29-2009 07:34 PM
mysql> status;
————–
mysql Ver 14.12 Distrib 5.0.51b, for apple-darwin9.0.0b5 (i686) using readline 5.0
Connection id: 71
Current database:
Current user: root@localhost
SSL: Not in use
Current pager: stdout
Using outfile: ''
Using delimiter: ;
Server version: 5.0.51b-log MySQL Community Server (GPL)
Protocol version: 10
Connection: Localhost via UNIX socket
Server characterset: latin1
Db characterset: latin1
Client characterset: latin1
Conn. characterset: latin1
UNIX socket: /tmp/mysql.sock
Uptime: 4 days 22 hours 27 min 10 sec
Threads: 22 Questions: 203200 Slow queries: 0 Opens: 175 Flush tables: 1 Open tables: 169 Queries per second avg: 0.477
05-29-2009 07:36 PM
05-30-2009 10:49 PM
06-01-2009 06:51 AM
Hi,
What's happening is that the MySpaces webscript adds a cookie with the Alfresco ticket in it to the client browser when the webscript is first rendered. Subsequent calls to the Alfresco download servlet will then be authenticated as the Liferay user.
The portlet will call the Alfresco login webscript initially to get an Alfresco ticket for the Liferay user. As a side note, this ticket is sent on every request from the AWPr portlet instance to Alfresco via a URL argument called 't'. This is to allow webscript authors to do whatever they want with that ticket.
If you copied the Alfresco download URL and pasted it into a browser that doesn't have the Alfresco cookie you will be redirected to the Alfresco login page. But if you add the parameter 'ticket=TICKET_<ticket-value>' you will be able to download the document if the user who owns the ticket has read rights on it.
The drawback here is that you wouldn't be able to robustly have more than one portlet on the same portal page displaying webscripts that serve download URLs from different unclustered Alfresco servers because the cookie would keep getting overwritten. The only way would be to append the ticket to the download URL like so:This is ok but not desirable since accessing this URL from any browser will authenticate the request as that user which could pose a security risk.
/alfresco/d/d/workspace/SpacesStore/771fbc61-d11a-4685-8a4d-143c310d07f0/image.png?ticket=TICKET_fb8dfe0f9fdf48b62e428fbe8f6665ddab01db55
–Alaaeldin
Tags
Find what you came for
We want to make your experience in Hyland Connect as valuable as possible, so we put together some helpful links.