Interesting Take On A Wiki - Testing Now

black3dynamite

@nashbrydges said in Interesting Take On A Wiki - Testing Now:

This looks like it could work for multi-tenant environment.

Created a new role and granted no permissions whatsoever.

Created a new book with a sample page within the book

Clicked on "More" at top right and assigned View only privileges to this new role I created

Created new user and assigned user to new role

Logged in as new user and all I can see is the test book to which I granted permissions. I also can't create any new material because those permissions weren't granted. When I search for a document that was created in the Admin role, I cannot see any search results that I know exist under the Admin role but that haven't been granted access to on this restricted user role. All I can see as this restricted user is the single book that I've granted View access to.

The book permissions also cascade to other pages created in the same book so once permissions are set at the book, the are also set for child sections.

That works well.

JaredBusch

I opened an issue on their github last night (well this morning) before I went to bed.
https://github.com/BookStackApp/BookStack/issues/708

The built in .htaccess file should have handled the rewrite rules and it is not.

So the quesiton for anyone who knows is why not?

black3dynamite

@jaredbusch said in Interesting Take On A Wiki - Testing Now:

I opened an issue on their github last night (well this morning) before I went to bed.
https://github.com/BookStackApp/BookStack/issues/708

The built in .htaccess file should have handled the rewrite rules and it is not.

So the quesiton for anyone who knows is why not?

The only thing that is different to me is Options +FollowSymLinks
https://www.bookstackapp.com/docs/admin/installation/

dafyre

@jaredbusch said in Interesting Take On A Wiki - Testing Now:

I opened an issue on their github last night (well this morning) before I went to bed.
https://github.com/BookStackApp/BookStack/issues/708

The built in .htaccess file should have handled the rewrite rules and it is not.

So the quesiton for anyone who knows is why not?

Weren't there some major changes to Apache's syntax for the Rewrite rules? Could that be part of the issue?

JaredBusch

@black3dynamite said in Interesting Take On A Wiki - Testing Now:

@jaredbusch said in Interesting Take On A Wiki - Testing Now:

I opened an issue on their github last night (well this morning) before I went to bed.
https://github.com/BookStackApp/BookStack/issues/708

The built in .htaccess file should have handled the rewrite rules and it is not.

So the quesiton for anyone who knows is why not?

The only thing that is different to me is Options +FollowSymLinks
https://www.bookstackapp.com/docs/admin/installation/

This is what is in the defualt htaccess

[root@bookstack ~]# cat /var/www/html/bookstack/public/.htaccess 
<IfModule mod_rewrite.c>
    <IfModule mod_negotiation.c>
        Options -MultiViews
    </IfModule>

    RewriteEngine On

    # Redirect Trailing Slashes If Not A Folder...
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule ^(.*)/$ /$1 [L,R=301]

    # Handle Front Controller...
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteRule ^ index.php [L]
</IfModule>

JaredBusch

So it looks to me like their provided file does not follow their own guide....

JaredBusch

I added that to the htaccess and change apache confs back and restarted apache and broke again.

Looking at httpd.conf I see some differences between that and the vhost config also. so bah.

So thinking to just go with providing a vhost file.

NashBrydges

Btw, I noticed directory browsing is enabled by default. Is it best to make the changes to the /etc/httpd/conf.d/autoindex.conf file to disable this for the server globally?

JaredBusch

@nashbrydges said in Interesting Take On A Wiki - Testing Now:

Btw, I noticed directory browsing is enabled by default. Is it best to make the changes to the /etc/httpd/conf.d/autoindex.conf file to disable this for the server globally?

That would be an apache security setting and not directly related to the install.

NashBrydges

@jaredbusch said in Interesting Take On A Wiki - Testing Now:

@nashbrydges said in Interesting Take On A Wiki - Testing Now:

Btw, I noticed directory browsing is enabled by default. Is it best to make the changes to the /etc/httpd/conf.d/autoindex.conf file to disable this for the server globally?

That would be an apache security setting and not directly related to the install.

Thanks. Disabled it in the vhost file.

black3dynamite

I've got it. In /etc/httpd/conf/httpd.conf file.

Changing <Directory "/var/www/html"> to <Directory "/var/www/html/bookstack/public">
And also changing AllowOverride None to AllowOverride All fixes the not found page.

dafyre

So from start to finish, running JB's script everything worked for me out of the box, except for one thing. I had to

firewall-cmd --set-default-zone=public

But that may be because my install was done with the Server DVD and not a minimal install.

black3dynamite

@dafyre said in Interesting Take On A Wiki - Testing Now:

So from start to finish, running JB's script everything worked for me out of the box, except for one thing. I had to

firewall-cmd --set-default-zone=public

But that may be because my install was done with the Server DVD and not a minimal install.

The default zone is FedoraServer.

dafyre

@black3dynamite said in Interesting Take On A Wiki - Testing Now:

@dafyre said in Interesting Take On A Wiki - Testing Now:

So from start to finish, running JB's script everything worked for me out of the box, except for one thing. I had to

firewall-cmd --set-default-zone=public

But that may be because my install was done with the Server DVD and not a minimal install.

The default zone is FedoraServer.

Yeah. The script JB posted uses --zone=public so that's the reason I had to do that on mine.

JaredBusch

@dafyre said in Interesting Take On A Wiki - Testing Now:

So from start to finish, running JB's script everything worked for me out of the box, except for one thing. I had to

firewall-cmd --set-default-zone=public

But that may be because my install was done with the Server DVD and not a minimal install.

Not my problem that you failed to follow instruction.
0_1519057716158_f26429b9-383d-4a49-8fc7-5c9d0834e3aa-image.png

Obsolesce

Dont specify a zone and it will default to the current one in use...

JaredBusch

@black3dynamite said in Interesting Take On A Wiki - Testing Now:

I've got it. In /etc/httpd/conf/httpd.conf file.

Changing <Directory "/var/www/html"> to <Directory "/var/www/html/bookstack/public">
And also changing AllowOverride None to AllowOverride All fixes the not found page.

Just tested this and it does resolve the issues.
But, I think it will be cleaner to use the vhost file simply named bookstack.conf

JaredBusch

@tim_g said in Interesting Take On A Wiki - Testing Now:

Dont specify a zone and it will default to the current one in use...

JaredBusch

I will clean up the above instructions and make a how to install post today.

dafyre

@jaredbusch said in Interesting Take On A Wiki - Testing Now:

@dafyre said in Interesting Take On A Wiki - Testing Now:

So from start to finish, running JB's script everything worked for me out of the box, except for one thing. I had to

firewall-cmd --set-default-zone=public

But that may be because my install was done with the Server DVD and not a minimal install.

Not my problem that you failed to follow instruction.

Yes, yes, I know. I posted that for others who don't follow your instructions.

Admittedly, I did look for the "Minimal" option, but that must not be available on the 2GB iso.