hmag Posted June 3, 2003 Posted June 3, 2003 Hi again, I have installed OSC & got the demo up & running, plus modified the demo slightly to get the hang of it. Now, I have installed a second OSC installation for a client, but before I gave them access, I logged in & checked out the admin functionality & found a big problem that might be my stupidity & maybe I need to do the install slightly differently. so, when I looked at the admin, I can navigate above the 'root' directory of the second store, then actually go in & modify the files in the demo store. How do I lock it so that the 'catalog' directory is the uppermost thing the store owner can see? Understandably, if I add another store (or more), in the directory, with different owners, I don't want them able to modify (or even see) the first store's files. I'm running Apache 2 w/SSL, PHP 4.3.1, MySQL 4.0.12 under Mac OSX if that helps. Many thanks for help with this one. Bye for now, Terry Allen
hmag Posted June 4, 2003 Author Posted June 4, 2003 Hi again, I have installed OSC & got the demo up & running, plus modified the demo slightly to get the hang of it. Now, I have installed a second OSC installation for a client, but before I gave them access, I logged in & checked out the admin functionality & found a big problem that might be my stupidity & maybe I need to do the install slightly differently. so, when I looked at the admin, I can navigate above the 'root' directory of the second store, then actually go in & modify the files in the demo store. How do I lock it so that the 'catalog' directory is the uppermost thing the store owner can see? Understandably, if I add another store (or more), in the directory, with different owners, I don't want them able to modify (or even see) the first store's files. I'm running Apache 2 w/SSL, PHP 4.3.1, MySQL 4.0.12 under Mac OSX if that helps. Many thanks for help with this one. Hi again, Just thought I might lay the paths out here for this problem - I want to store any additional stores in a directory under the main webserving directory called shop, which in absolute path is like so: /Library/WebServer/WebSites/domain.com/shop/ I then have the demoshop & another shop listed like so: /Library/WebServer/WebSites/domain.com/shop/demoshop/ /Library/WebServer/WebSites/domain.com/shop/anothershop/ The problem is, in the file manager admin for anothershop - I can then navigate up into the /Library/WebServer/WebSites/domain.com/shop/ directory & head into the demoshop directory - I know I can cure this by simply installing into /Library/WebServer/WebSites/domain.com/ & then this is not possible, but this means I need to have directories for each store right under the root directory for the main site - how can I avoid this? A big thanks for any help with this one. Bye for now, Terry Allen
hmag Posted June 4, 2003 Author Posted June 4, 2003 Hi again, Sorry for all the posts on this, but I'd like to knock this off ASAP - one further point in what I'm trying to achieve with this. I want to have one directory - housed under: /Library/WebServer/Websites/domain.com/shop/ i.e. /Library/WebServer/Websites/domain.com/shop/shop1 /Library/WebServer/Websites/domain.com/shop/shop2 /Library/WebServer/Websites/domain.com/shop/shop3 /Library/WebServer/Websites/domain.com/shop/shop4 etc.... - all served out of the one SSL domain I want each store to use a completely separate install of OsCommerce, completely separate SQL database & have each store's admin can see only the shop I have enabled them to & that the admin file manager can see only the files for that individual shop & no other. Hopefully, this makes it a little clearer if I haven't already - many thanks Bye for now, Terry Allen
MjrGaelic Posted June 4, 2003 Posted June 4, 2003 If you have admin access to this server, then create seperate user names for each subdirectory.. with permissions chrooted for each user.. Then they shouldn't be able to dir ../ beyond thier "root" directory. Good luck !
hmag Posted June 5, 2003 Author Posted June 5, 2003 If you have admin access to this server, then create seperate user names for each subdirectory.. with permissions chrooted for each user.. Then they shouldn't be able to dir ../ beyond thier "root" directory. Good luck ! Hi again, Thanks for that - yes, I do have access - the platform is Mac OSX 'client'. I'm not sure about the ability to chroot on OSX - but I guess what you're saying is - it's not possible to stop one admin from seeing another store's files unless I actually create a directory immediately underneath the documentroot of the host - would that be correct, or is there a way to do it. Bye for now, Terry Allen
MjrGaelic Posted June 5, 2003 Posted June 5, 2003 I have a setup similar to what your looking for.. In my example, we had 7 outlets sharing 1 product database, 1 customer database, and seperate order databases, and seperate configurations for each store.. To accomplish this I have for example /store then /store/location1 Created user for main admin, and created users for each location making the location name thier home dir. Using a common images direcotry, and only 1 database it runs very smoothly. and is relatively easy on space as well. I have no experience with OSX as a server environment, all my stuff is done in Linux *as it should be *grin**
hmag Posted June 5, 2003 Author Posted June 5, 2003 I have a setup similar to what your looking for.. In my example, we had 7 outlets sharing 1 product database, 1 customer database, and seperate order databases, and seperate configurations for each store.. To accomplish this I have for example /store then /store/location1 Created user for main admin, and created users for each location making the location name thier home dir. Using a common images direcotry, and only 1 database it runs very smoothly. and is relatively easy on space as well. I have no experience with OSX as a server environment, all my stuff is done in Linux *as it should be *grin** Hi again, Thanks for that - I'll create a new user & home them to the top directory in the new store & see what happens. I have used Linux for serving before, but have found little difference between it & OSX really - all very similar. As long as it's some form of UNIX I reckon we're better off than those using Microsoft server products. Bye for now, Terry Allen
hmag Posted June 7, 2003 Author Posted June 7, 2003 Hi again, After receivving a few replies on this topic, I scrounged around & found no info - however, after fiddling with the config myself, I found that it was as simple as defining the documentroot in the initial setup (or later in configure.php), as the directory in which you house your OSC install. After changing this, there are no directories above the store listed in the file manager - which is exactly the way I like it. Bye for now, Terry Allen
hmag Posted June 7, 2003 Author Posted June 7, 2003 Hi again, After receivving a few replies on this topic, I scrounged around & found no info - however, after fiddling with the config myself, I found that it was as simple as defining the documentroot in the initial setup (or later in configure.php), as the directory in which you house your OSC install. After changing this, there are no directories above the store listed in the file manager - which is exactly the way I like it. Bye for now, Terry Allen
New 
Recommended Posts
Archived
This topic is now archived and is closed to further replies.