This file is indexed.

/usr/share/doc/refdb/refdb-manual/ch09s06.html is in refdb-doc 1.0.2-3ubuntu1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

1
2
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>To share or not to share extended notes</title><link rel="stylesheet" type="text/css" href="manual.css" /><meta name="generator" content="DocBook XSL Stylesheets V1.79.1" /><link rel="home" href="index.html" title="RefDB handbook" /><link rel="up" href="ch09.html" title="Chapter 9. Notes management" /><link rel="prev" href="ch09s05.html" title="Link existing notes to other objects in the database" /><link rel="next" href="ch10.html" title="Chapter 10. Bibliographies" /></head><body><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">To share or not to share extended notes</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ch09s05.html">Prev</a> </td><th width="60%" align="center">Chapter 9. Notes management</th><td width="20%" align="right"> <a accesskey="n" href="ch10.html">Next</a></td></tr></table><hr /></div><div class="sect1"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="sect-share-extended-notes"></a>To share or not to share extended notes</h2></div></div></div><p>RefDB was written with facilitating the cooperation of users in mind. Therefore extended notes are visible to all users of the system by default. However, situations may arise where you don't want to share any notes or where you want to protect only individual notes from your colleague's prying eyes. RefDB supports all these variants. Accessibility of notes is controlled by two filters: the default server setting and the settings in the individual notes.</p><div class="sect2"><div class="titlepage"><div><div><h3 class="title"><a id="idp64457008"></a>The refdbd default</h3></div></div></div><p>The refdbd server can be configured to either treat all extended notes as public or as private by default. Use the <code class="option">-S</code> command line option or the <code class="varname">share_default</code> config file option to set the default mode. See the chapter about <a class="link" href="ch12.html" title="Chapter 12. The application server">refdbd administration</a> for further details. As the names imply, <em class="parameter"><code>public</code></em> will make all notes available to every user by default. Similarly, <em class="parameter"><code>private</code></em> will restrict access to the user who added the note by default. Use the server setting to define a default policy for your installation.</p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>A warning for all admins: switching your server from "private" to "public" without prior announcement <span class="emphasis"><em>will</em></span> alienate your users. Don't even think about it.</p></div></div><div class="sect2"><div class="titlepage"><div><div><h3 class="title"><a id="idp64213792"></a>The <code class="sgmltag-attribute">share</code> attribute of the extended notes</h3></div></div></div><p>The <a class="ulink" href="http://refdb.sourceforge.net/xnote/index.html" target="_top">xnote.dtd</a> defines an optional <code class="sgmltag-attribute">share</code> attribute which offers the same choice of values as the server setting above. If the attribute is set, the extended note will be public or private regardless of the server setting. The server setting only kicks in if a note does not set the <code class="sgmltag-attribute">share</code> attribute. Each user can decide for each note whether or not she wants to share it with the world. The following table summarizes the settings.</p><div class="table"><a id="idp64342784"></a><p class="title"><strong>Table 9.1. Sharing extended notes</strong></p><div class="table-contents"><table class="table" summary="Sharing extended notes" border="1"><colgroup><col /><col /><col /><col /></colgroup><thead><tr><th> </th><th>share attribute "public"</th><th>share attribute "private"</th><th>share attribute not set</th></tr></thead><tbody><tr><td>share_default "public"</td><td>public</td><td>private</td><td>public</td></tr><tr><td>share_default "private"</td><td>public</td><td>private</td><td>private</td></tr></tbody></table></div></div><br class="table-break" /></div><div class="sect2"><div class="titlepage"><div><div><h3 class="title"><a id="idp64300160"></a>Data privacy</h3></div></div></div><p>The above settings control only the access to the extended notes through the RefDB interface. You should be aware that anyone who can access the database directly with an SQL client will be able to read and change the notes of every user, regardless of the settings mentioned above. The simplest way to secure the data is to run refdbd on a server that no user has shell access to. If the database engine access control is set in a way that users can only connect from the box that runs RefDB, they won't be able to connect from a SQL client running on their workstations.</p></div></div><div class="navfooter"><hr /><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="ch09s05.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="ch09.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="ch10.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Link existing notes to other objects in the database </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 10. Bibliographies</td></tr></table></div></body></html>