FP 2002 Extensions: Permissions Administration / Send an Invitation
am 10.09.2004 19:11:07 von Support
I'm using FP 2002 extensions on an Apache server through
a hosting company. I understand that there are some
limitations with FPE in a unix environment, however I
cannot find anything about the following:
The website in question contains a password protected sub
web (anonymous browsing disabled, using unique
permissions).
In setting up new users, the send an invitation wizard on
the Permissions Administration page seems to function
properly, allowing me to enter in an e-mail addresss,
account name, full name, personal greeting, and role
assignment (defaults to browser). It then sends an e-
mail with the userid and system generated password to the
recipient. The e-mail contains a link to a page on the
site located in a subdirectory named
_vti_bin/_vti_aut/passwd.htm.
The problem exists when any recipient links to this page,
it is immediately requiring a userid and password to gain
access. The only userid and password that it is
accepting is an administrator userid and password. Once
into the page, everything else functions properly, and
the user can change the password.
From my perspective, I can't give out administrator
permission to general users. I can't believe that this
is functioning properly since it would be a violation of
every security best practice to not allow a user to have
privacy on their password.
What the hosting company is telling me is that the
htaccess file is limiting access to the page, thus not
allowing people with browser level access to change their
own passwords.
Is this a limitation of FP Extensions 2002 installed in a
unix environment, or is this an configuration problem on
their end, or do I have a misunderstanding of the
functionality and how to use it?
I need enough information to communicate this to the
hosting company.
They are looking into this problem, but their suggestion
is to discontinue using FPE.
Thanks for any assistance that you can provide.
Re: FP 2002 Extensions: Permissions Administration / Send an Invitation
am 10.09.2004 22:37:29 von pheonix1t
Thomas T wrote:
> I'm using FP 2002 extensions on an Apache server through
> a hosting company. I understand that there are some
> limitations with FPE in a unix environment, however I
> cannot find anything about the following:
>
> The website in question contains a password protected sub
> web (anonymous browsing disabled, using unique
> permissions).
>
> In setting up new users, the send an invitation wizard on
> the Permissions Administration page seems to function
> properly, allowing me to enter in an e-mail addresss,
> account name, full name, personal greeting, and role
> assignment (defaults to browser). It then sends an e-
> mail with the userid and system generated password to the
> recipient. The e-mail contains a link to a page on the
> site located in a subdirectory named
> _vti_bin/_vti_aut/passwd.htm.
>
> The problem exists when any recipient links to this page,
> it is immediately requiring a userid and password to gain
> access. The only userid and password that it is
> accepting is an administrator userid and password. Once
> into the page, everything else functions properly, and
> the user can change the password.
>
> From my perspective, I can't give out administrator
> permission to general users. I can't believe that this
> is functioning properly since it would be a violation of
> every security best practice to not allow a user to have
> privacy on their password.
>
> What the hosting company is telling me is that the
> htaccess file is limiting access to the page, thus not
> allowing people with browser level access to change their
> own passwords.
>
> Is this a limitation of FP Extensions 2002 installed in a
> unix environment, or is this an configuration problem on
> their end, or do I have a misunderstanding of the
> functionality and how to use it?
>
> I need enough information to communicate this to the
> hosting company.
>
> They are looking into this problem, but their suggestion
> is to discontinue using FPE.
>
> Thanks for any assistance that you can provide.
>
>
I'd agree with their recommendation. Why do you have to use FPSE?
I just got through dealing with FPSE 2002 on unix for a client site and
it was such a PITA that I finally gave up. I told the client about
Macromedia ColdFusion and they really liked it. It's much better than
FPSE can ever be, and it's doesn't 'trap' you with proprietary junk like
FPSE does.
You should really check that out as a much better alternative to FPSE
(if you need to make complex web pages with back-end databases, or
creating web applications). Otherwise, learn how to code well or get a
good web developer that can code very well.
If you don't need all the power of ColdFusion, try dreamweaver....it's
got a free 30-day trial period. www.macromedia.com
You can also pick from Adobe products. www.adobe.com
Either one is better than FPSE....