Re: FTP file authorization and transfer progress support

[Brian Gix <bgix@codeaurora.org>]

Hi Jaganath,

On 11/29/2011 10:34 PM, Jaganath wrote:
> From: "Luiz Augusto von Dentz" <luiz.dentz@gmail.com>
>> On Tue, Nov 29, 2011 at 3:53 PM, Johan Hedberg
>> <johan.hedberg@gmail.com> wrote:
>>> On Tue, Nov 29, 2011, Jaganath wrote:
>>>> Currently in OBEXD, only OPP put has authorization and file progress
>>>> indication. I am planning to implement the same in FTP
>>>> put/get/delete the
>>>> same way as it does in OPP. But application may need to know the
>>>> type of the
>>>> obex operation to which the Authorize method is invoked. So I am
>>>> planning to
>>>> add a new method namely GetProperties in transfer, which returns the
>>>> type of
>>>> the operation (put/get/delete) so that application can use it in
>>>> Authorize
>>>> method. Please let me know your suggestions.
>>>
>>> We try to avoid such extra round-trips in our D-Bus APIs. If such a
>>> feature is really needed the essential context information should be
>>> provided as parameters to the "authorize" call.
>>
>> Im not so sure authorize here is really useful since FTP requires
>> connection authorization anyway, we can create transfers if the
>> purpose is to log them.
>
> Thanks for your reply.
> Even if FTP has connection authorization I think it is better to ask
> file authorization for put/get/delete. This gives more flexibility to
> application. It is up to application to decide whether to ask end user
> or simply accept. Also in put case if a file with same filename is already
> there, then this approach will be useful for application to handle that.

I think you may be confusing use cases.

If you are an FTP server, you are giving authorized remote users blanket 
authority to read, write or browse, or some combination, your exposed 
FTP file system.  I suppose you could require additional 
operation-by-operation request/confirm, but that would quickly make the 
system very clumsy. It's not the usage model that FTP was designed for.

That is why we have the OPP profile, which is specifically for single 
object sharing, and that has that kind of request/confirm model.

-- 
Brian Gix
bgix@codeaurora.org
Employee of Qualcomm Innovation Center, Inc.
Qualcomm Innovation Center, Inc. is a member of Code Aurora Forum