Re: Link to a PDF on IFS

[Bradley Stone <bvstone@xxxxxxxxx>]

QTMHHTP1 as well if it's CGI.  And I recall needing to give directories *RX
authority, just *R didn't work.

That may have changed.. I haven't played around with authorities since I
got them working.. :)

Brad
www.bvstools.com


On Tue, Feb 26, 2013 at 8:16 AM, Vernon Hamberg <vhamberg@xxxxxxxxxxxxxxx>wrote:

> LOL - Oh, good!  ;)
>
> On 2/26/2013 6:29 AM, Schadd Gray wrote:
> > Vern,
> >
> > You are correct.
> >
> > Thank you,
> > Schadd Gray
> > Damon Technologies, Inc.
> > www.damontech.com
> > -----Original Message-----
> > From: Vernon Hamberg
> > Sent: Monday, February 25, 2013 9:58 PM
> > To: Web Enabling the IBM i (AS/400 and iSeries)
> > Subject: Re: [WEB400] Link to a PDF on IFS
> >
> > Schadd
> >
> > Do you really need to give *R to *PUBLIC? Shouldn't it be enough to give
> > it to the user of the Apache server, which would be QTMHHTTP, probably?
> >
> > Vern
> >
> > On 2/25/2013 8:05 PM, Schadd Gray wrote:
> > > Yes, you could use Alias to map outside of the htdocs sandbox, however
> > > that
> > > just opens you up to potential security issues.  You would need to grant
> > > *R
> > > authority to *Public on those folders.  If you are going to do that you
> > > should just put them under the htdocs structure and let the inheritance
> > > handle authorization.  What would be the purpose of opening up other
> parts
> > > of your IFS?  This method also makes it so that anyone can access those
> > > PDF
> > > files.  The second method easily allows for restricting the user that
> can
> > > access the file, you only hand them the ones they should see.
> > >
> > > Thank you,
> > > Schadd Gray
> > > Damon Technologies, Inc.
> > > www.damontech.com
> > > -----Original Message-----
> > > From: franz400
> > > Sent: Monday, February 25, 2013 5:32 PM
> > > To: Web Enabling the IBM i (AS/400 and iSeries)
> > > Subject: Re: [WEB400] Link to a PDF on IFS
> > >
> > > I'd like to disagree with the "outside of htdocs...you cannot expose it
> to
> > > the web" statement.
> > > It just takes a directive in the Apache config, and it can be a naming
> > > that
> > > is hidden from the url
> > > so you are not exposing your true dir structure. Then it's a matter of
> the
> > > url pointing to
> > > the .pdf instead of a .html and your browser will know what to do. Have
> > > been
> > > serving .pdf
> > > (or .csv or .xls) this way to the web since 2000 in a similar tool -
> > > Websmart.
> > > Jim Franz
> > >
> > > ----- Original Message -----
> > > From: "Schadd Gray" <list@xxxxxxxxxxxxx>
> > > To: "Web Enabling the IBM i (AS/400 and iSeries)" <web400@xxxxxxxxxxxx>
> > > Sent: Monday, February 25, 2013 8:40 AM
> > > Subject: Re: [WEB400] Link to a PDF on IFS
> > >
> > >
> > > > I do not know much about LANSA, but in other web languages, if the PDF
> > > > file
> > > > on the IFS is outside of the web directory (/www/mysite/htdocs) you
> > > > cannot
> > > > expose it to the web.  You have two choices. 1) Place the PDF in the
> web
> > > > directory, but this allows every web user to access this PDF if they
> know
> > > > the path (not very secure).  2) Write a program to read the file from
> the
> > > > IFS and pipe it to the browser.  You would need to change the content
> > > > type
> > > > to "application/pdf".
> > > >
> > > > Thank you,
> > > > Schadd Gray
> > > > Damon Technologies, Inc.
> > > > www.damontech.com
> > > > -----Original Message-----
> > > > From: Jack Tucky
> > > > Sent: Sunday, February 24, 2013 7:37 PM
> > > > To: web400@xxxxxxxxxxxx
> > > > Subject: [WEB400] Link to a PDF on IFS
> > > >
> > > > I'm using LANSA on Iseries to run a website.  The user can press a
> > > > button,
> > > > I
> > > > call a CLP and create a PDF and email it to the end user.
> > > >
> > > >
> > > >
> > > > I'd like to change it to display the PDF in the browser.  The PDF is on
> > > > the
> > > > IFS.  I know the path and file name of the PDF.
> > > >
> > > >
> > > >
> > > > What do I have to do to change the webserver show files from a specific
> > > > directory on the IFS?
> > > >
> > > >
> > > >
> > > > Thanks, Jack.
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > --
> > > > This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> mailing
> > > > list
> > > > To post a message email: WEB400@xxxxxxxxxxxx
> > > > To subscribe, unsubscribe, or change list options,
> > > > visit: http://lists.midrange.com/mailman/listinfo/web400
> > > > or email: WEB400-request@xxxxxxxxxxxx
> > > > Before posting, please take a moment to review the archives
> > > > at http://archive.midrange.com/web400.
> > > >
> > > > --
> > > > This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> mailing
> > > > list
> > > > To post a message email: WEB400@xxxxxxxxxxxx
> > > > To subscribe, unsubscribe, or change list options,
> > > > visit: http://lists.midrange.com/mailman/listinfo/web400
> > > > or email: WEB400-request@xxxxxxxxxxxx
> > > > Before posting, please take a moment to review the archives
> > > > at http://archive.midrange.com/web400.
>
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.