WebdavLDAPAuthentication

Introduction

The Open Project Services WebDav Authentication Filter provides authorized access to ics files (calendars and timesheets) listed in ldap. The filter will deny access to an ics file if the user is not a the owner of the file or not in the admin group for OPS. Users can only modify their current timesheet, archived timesheet files are readable but cannot be written to.

The OPS WebDav uses ldap to determine if a user gets access to the requested ics file. For this the ldap needs to run with the ops ldap schema and the requestad resource has to be listed in the ldap group Timesheets.

Several parts of OPS can be used to view or modify ics files:

• OPS Sunbird add-on for accessing and updating timesheets
• the OPS Project web interface for archiving timesheets
• OPS Admin for creating reports from timesheets

Starting with ops OPS WebDav

OPS WebDav can only serve existing ics files that are listed in ldap. When starting with ops the sys admin has to create one ics file for every user in a 'timesheets' directory in the OPS WebDav context root on the server and an entry in the Timesheets group in ldap for that file.

Alternative

It is also possible to provide access to ics files directly, see SimpleWebDavAccess. However, this allows all OPS users to view and alter all ics files.

-- IvanaCace - 22 Dec 2008