[4suite-dev] URIs in the repo, revisited (addendum)

Mike Olson Mike.Olson at fourthought.com
Wed Dec 11 18:08:57 MST 2002


On Tue, 2002-12-10 at 14:21, Jeremy Kloth wrote:
> On Tuesday 10 December 2002 09:42 am, Mike Brown wrote:
> > Can you tell me what the intent is for file URIs? e.g., when the current
> > doc is something from the repo, and it contains an absolute URI ref like
> > 'file:///path/to/some/file', do you want to look on the local filesystem,
> > or should this be interpreted as the repo path /path/to/some/file?
> >
> 
> >From a security standpoint, a don't like the ability for documents to get 
> access with the server's system access to a file on the host system.  

I agree.  FYI, the original intent was to allow people to reference
things outside of the repository.  We first checked in the repo to see
if it was there, and if not, try to resolve it normally.

Given 
> that, it would then be possible to implement the file scheme as the way into 
> the repository, since the file scheme is defined as as being machine 
> dependent anyway.

I think this is a good idea.

Mike

> 
> Jeremy
-- 
Mike Olson                                Principal Consultant
mike.olson at fourthought.com                +1 303 583 9900 x 102
Fourthought, Inc.                         http://Fourthought.com 
PO Box 270590,                            http://4Suite.org
Louisville, CO 80027-5009, USA
XML strategy, XML tools, knowledge management




More information about the 4suite-dev mailing list