Mailing-List: contact users-help@jackrabbit.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@jackrabbit.apache.org
Received-SPF: pass (herse.apache.org: domain of stefan.guggisberg@gmail.com
 designates 64.233.182.186 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=XhESJBHczBDJkeHMD4BoaR3PzQHMv4jS3gD6l46xakuHoy+NeeZEKtO0H/6UNrtAfG5OxMmmNz9qXzIdopuCuuoPLvzf0vx3FN3p5UPCYJ5MturM1S8yIc2F3GhSH/+rWb49BJ+p3GZlDL70Wd9rOrqU7esAaoCdz09syIC4MAc=
Message-ID: <90a8d1c00707190056o5f5e4dfdndeec08a8927b68e5@mail.gmail.com>
Date: Thu, 19 Jul 2007 09:56:18 +0200
From: "Stefan Guggisberg" <stefan.guggisberg@gmail.com>
To: users@jackrabbit.apache.org
Subject: Re: Limiting access to the local file system?
In-Reply-To: <5c932c650707181726kdbadbcfle0f5e7ea2e4de431@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <5c932c650707181726kdbadbcfle0f5e7ea2e4de431@mail.gmail.com>

hi rob,

On 7/19/07, Rob Evans <objectiveous@gmail.com> wrote:
> Folks,
>
> In the environment where I intend to deploy jackrabbit there is a
> constraint preventing servlets from writing to disk ( I think I do
> have write access to /tmp ) . So, I tried configuring jackrabbit using
> the DBFileSystem thinking that would do the trick. No luck.

the lucene index is still written to the local file system. for more
details see

http://issues.apache.org/jira/browse/JCR-189
http://issues.apache.org/jira/browse/JCR-1026

furthermore, temp files will obviously be created on the local file system.

i guess there's no (easy) way to prevent local file system access completely.

cheers
stefan

>
> Any thoughts on getting around this limit?
>
> REPOSITORY CONFIG
> ----------------------------------
> <?xml version="1.0"?>
> <Repository>
>
>   <FileSystem class="org.apache.jackrabbit.core.fs.db.DbFileSystem">
>     <param name="driver" value="com.mysql.jdbc.Driver" />
>     <param name="url" value="jdbc:mysql://localhost/jcr" />
>     <param name="schema" value="mysql" />
>     <param name="schemaObjectPrefix" value="filesystem_" />
>     <param name="user" value="root" />
>     <param name="password" value="" />
>   </FileSystem>
>
>   <Security appName="Jackrabbit">
>     <AccessManager
> class="org.apache.jackrabbit.core.security.SimpleAccessManager"></AccessManager>
>
>     <LoginModule class="org.apache.jackrabbit.core.security.SimpleLoginModule">
>       <param name="anonymousId" value="anonymous" />
>     </LoginModule>
>   </Security>
>
>
>   <Workspaces  rootPath="${rep.home}/workspaces" defaultWorkspace="jcr" />
>
>   <Workspace name="jcr">
>
>     <FileSystem class="org.apache.jackrabbit.core.fs.db.DbFileSystem">
>       <param name="driver" value="com.mysql.jdbc.Driver" />
>       <param name="url" value="jdbc:mysql:///jcr" />
>       <param name="schema" value="mysql" />
>       <param name="schemaObjectPrefix" value="filesystem_" />
>       <param name="user" value="root" />
>       <param name="password" value="" />
>     </FileSystem>
>
>     <PersistenceManager
> class="org.apache.jackrabbit.core.state.db.SimpleDbPersistenceManager">
>       <param name="driver" value="com.mysql.jdbc.Driver" />
>       <param name="url" value="jdbc:mysql:///jcr" />
>       <param name="schema" value="mysql" />
>       <param name="schemaObjectPrefix" value="app_" />
>       <param name="externalBLOBs" value="false" />
>       <param name="user" value="root" />
>       <param name="password" value="" />
>     </PersistenceManager>
>
>     <SearchIndex class="org.apache.jackrabbit.core.query.lucene.SearchIndex">
>       <param name="path" value="${wsp.home}/index" />
>     </SearchIndex>
>   </Workspace>
>
>   <Versioning rootPath="${rep.home}/version">
>
>     <FileSystem class="org.apache.jackrabbit.core.fs.db.DbFileSystem">
>       <param name="driver" value="com.mysql.jdbc.Driver" />
>       <param name="url" value="jdbc:mysql:///jcr" />
>       <param name="schema" value="mysql" />
>       <param name="schemaObjectPrefix" value="rep_" />
>       <param name="user" value="root" />
>       <param name="password" value="" />
>     </FileSystem>
>
>     <PersistenceManager
> class="org.apache.jackrabbit.core.state.db.SimpleDbPersistenceManager">
>       <param name="driver" value="com.mysql.jdbc.Driver" />
>       <param name="url" value="jdbc:mysql:///jcr" />
>       <param name="schema" value="mysql" />
>       <param name="schemaObjectPrefix" value="app_" />
>       <param name="externalBLOBs" value="false" />
>       <param name="user" value="root" />
>       <param name="password" value="" />
>     </PersistenceManager>
>   </Versioning>
>
> </Repository>
>