Re: Link to a PDF on IFS -- WEB400

I've always understood it this way:
*R = you can read the list of contents
*W = you can modify the list of contents
*X = you can modify or use the contents

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Scott Klement
Sent: Tuesday, February 26, 2013 9:44 AM
To: Web Enabling the IBM i (AS/400 and iSeries)
Subject: Re: [WEB400] Link to a PDF on IFS

The *R authority is needed to read the directory. The *X authority is needed to use the directory name in a path.

When working with directories, you almost always need both... so you need *RX authority.

It has nothing to do with CGI -- at least, with regard to directories it doesn't. If we are talking about shell scripts or PASE programs, then *X means "execute", and means that you can run it. In that case you'd need *X for shell scripts or PASE programs that are to be run via CGI (or any other means of running them, as well)

But, for directories, you pretty much need *RX.

On 2/26/2013 8:33 AM, Schadd Gray wrote:

I think *RX is only needed for CGI type directories. HTML, images, etc.
files only need *R.

Thank you,
Schadd Gray
Damon Technologies, Inc.
www.damontech.com
-----Original Message-----
From: Bradley Stone
Sent: Tuesday, February 26, 2013 8:18 AM
To: Web Enabling the IBM i (AS/400 and iSeries)
Subject: Re: [WEB400] Link to a PDF on IFS

QTMHHTP1 as well if it's CGI. And I recall needing to give
directories *RX authority, just *R didn't work.

That may have changed.. I haven't played around with authorities since
I got them working.. :)

Brad
www.bvstools.com

On Tue, Feb 26, 2013 at 8:16 AM, Vernon Hamberg
<vhamberg@xxxxxxxxxxxxxxx>wrote:

LOL - Oh, good! ;)

On 2/26/2013 6:29 AM, Schadd Gray wrote:

Vern,

You are correct.

Thank you,
Schadd Gray
Damon Technologies, Inc.
www.damontech.com
-----Original Message-----
From: Vernon Hamberg
Sent: Monday, February 25, 2013 9:58 PM
To: Web Enabling the IBM i (AS/400 and iSeries)
Subject: Re: [WEB400] Link to a PDF on IFS

Schadd

Do you really need to give *R to *PUBLIC? Shouldn't it be enough to
give it to the user of the Apache server, which would be QTMHHTTP, probably?

Vern

On 2/25/2013 8:05 PM, Schadd Gray wrote:

Yes, you could use Alias to map outside of the htdocs sandbox,
however that just opens you up to potential security issues. You
would need to grant *R authority to *Public on those folders. If
you are going to do that you should just put them under the htdocs
structure and let the inheritance handle authorization. What would
be the purpose of opening up other

parts

of your IFS? This method also makes it so that anyone can access
those PDF files. The second method easily allows for restricting
the user that

can

access the file, you only hand them the ones they should see.

Thank you,
Schadd Gray
Damon Technologies, Inc.
www.damontech.com
-----Original Message-----
From: franz400
Sent: Monday, February 25, 2013 5:32 PM
To: Web Enabling the IBM i (AS/400 and iSeries)
Subject: Re: [WEB400] Link to a PDF on IFS

I'd like to disagree with the "outside of htdocs...you cannot
expose it

to

the web" statement.
It just takes a directive in the Apache config, and it can be a
naming that is hidden from the url so you are not exposing your
true dir structure. Then it's a matter of

the

url pointing to
the .pdf instead of a .html and your browser will know what to do.
Have been serving .pdf (or .csv or .xls) this way to the web since
2000 in a similar tool - Websmart.
Jim Franz

----- Original Message -----
From: "Schadd Gray" <list@xxxxxxxxxxxxx>
To: "Web Enabling the IBM i (AS/400 and iSeries)"
<web400@xxxxxxxxxxxx>
Sent: Monday, February 25, 2013 8:40 AM
Subject: Re: [WEB400] Link to a PDF on IFS

I do not know much about LANSA, but in other web languages, if the
PDF file on the IFS is outside of the web directory
(/www/mysite/htdocs) you cannot expose it to the web. You have
two choices. 1) Place the PDF in the

web

directory, but this allows every web user to access this PDF if
they

know

the path (not very secure). 2) Write a program to read the file
from

the

IFS and pipe it to the browser. You would need to change the
content type to "application/pdf".

Thank you,
Schadd Gray
Damon Technologies, Inc.
www.damontech.com
-----Original Message-----
From: Jack Tucky
Sent: Sunday, February 24, 2013 7:37 PM
To: web400@xxxxxxxxxxxx
Subject: [WEB400] Link to a PDF on IFS

I'm using LANSA on Iseries to run a website. The user can press a
button, I call a CLP and create a PDF and email it to the end
user.

I'd like to change it to display the PDF in the browser. The PDF
is on the IFS. I know the path and file name of the PDF.

What do I have to do to change the webserver show files from a
specific directory on the IFS?

Thanks, Jack.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)

mailing

list
To post a message email: WEB400@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at
http://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)

mailing

list
To post a message email: WEB400@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at
http://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
mailing list To post a message email: WEB400@xxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/web400.