search

irods-contrib / irods-cloud-browser

DFC Web Based cloud browser
BSD 2-Clause "Simplified" License
18 stars 13 forks source link

Can't read a file across federation with strict ACLs, even though user has permission #116

Closed danbedard closed 9 years ago

danbedard commented 9 years ago

zoneA and zoneB are federated. ACLs are strict in both zones.

alice#zoneA performs: ichmod -r read bobby#zoneB /zoneA/home/alice

With iCommands, bobby#zoneB (through zoneBicat) can navigate to /zoneA/home/alice and view/download files.

With Cloud Browser, bobby doesn't see alice in /zoneA/home. However, bobby can trick Cloud Browser by appending %2Falice to the URL in the address bar. At that point, bobby can see the files in /zoneA/home/alice . However, once bobby clicks info or attempts to download the file, "file not found" appears, and bobby is returned to /zoneB/home/bobby.

michael-conway commented 9 years ago

Is this using the code on the dfc test lab?

We have a general issue at #113 that this may a duplicate of, let's park this one and address 113 and retest...

danbedard commented 9 years ago

Uses the code on the dfc test lab, but different EC2 instances. I will re-test how and when ever you like.

michael-conway commented 9 years ago

OK I do think that this is fixed, Reagan ran into similar issues, it had to do with the iRODS path having a # in it an it not being url encoded

eg user#zone came across as user and dropping the zone

On 09/18/2015 04:10 PM, Dan Bedard wrote:

Uses the code on the dfc test lab, but different EC2 instances. I will re-test how and when ever you like.

— Reply to this email directly or view it on GitHub https://github.com/DICE-UNC/irods-cloud-browser/issues/116#issuecomment-141554234.