[mapguide-internals] Please review RFC 103

[Christine Bao]

Hi Tom,

     There is one similar operation in Studio named GetSiteProperties().
        public SiteProperties GetSiteProperties()
        {
            SiteInformation siteInformation = this.requestManager.GetSiteInfo();
            return new SiteProperties(siteInformation);
        }
     It gets information about how long the server has been running, the number of connections, the server's version etc. The information is not from repository.
     Similar as GetDocument(), it needs the user information of current connect to open the service:
                        // Create ServerAdmin object
                        Ptr<MgServerAdmin> serverAdmin = new MgServerAdmin();
                        serverAdmin->Open(siteInfo->GetTarget(), m_userInfo);
     This call is frequently used in Studio, and I think it works for most user account. So GetDocument should not limit to high privilege user account also.

Thanks & regards,
Christine


From: Tom Fukushima <tom.fukushima at autodesk.com>

Subject: RE: [mapguide-internals] Please review RFC 103

To: MapGuide Internals Mail List <mapguide-internals at lists.osgeo.org>

Message-ID:

      <E293C44DED1B9244B074153AE675B5612AB0135FEE at ADSK-NAMSG-01.MGDADSK.autodesk.com>



Content-Type: text/plain; charset="us-ascii"



Along with SetDocument, what kind of user would be allowed access to this file? For example, since the RFC mentions the Studio user perhaps these operations only be available to someone with Author (or above) privileges.  Do we need a way to set security on this document so that we can restrict who can access it? I would hope not since that seems like overkill.



Are there any other operations in MGOS that are similar to this (i.e., access documents or information outside of the repository) in behavior?





Thanks

Tom