List Info

Thread: access rights




access rights
user name
2006-06-03 06:13:34
This is different from the documentation on wiki.

See
http://www.jspwiki.org/wiki/Security2.3#section-Secu
rity2.3- 
ImpliedPermissions


dirk

Begin forwarded message:

> From: Janne Jalkanen <Janne.Jalkanenecyrd.com>
> Date: Fri 2 Jun 2006 19:16:24 CEST
> To: JSPWiki Users discussion list <jspwiki-usersecyrd.com>
> Subject: Re: [Jspwiki-users] access rights
> Reply-To: JSPWiki Users discussion list
<jspwiki-usersecyrd.com>
>
>
> Hi!
>
> Edit permission does not imply "view"
permission.  So you need to add
>
> "[{ALLOW view All}]" on your page.  Once
there is any kind of access  
> restriction on the page, any defaults from
jspwiki.policy are gone.
>
> /Janne
>
> On Jun 2, 2006, at 17:18 , Adler wrote:
>
>>
>> I have a wiki page with
>> [{SET members='Member One'}]
>>
>> however this user doesn't have access to the page.
>>
>> ----- Log:
>> 2006-06-02 16:10:20,632 [http-6080-Processor24]
INFO SecurityLog Wiki  
>> Group Wiki:http://URL/wiki/Wiki.jsp
- WikiSecurityEvent.ACCESS_DENIED  
>>
[source=com.ecyrd.jspwiki.auth.AuthorizationManager13f449f, 

>> princpal=[WikiPrincipal (loginName): userone],  
>>
target=("com.ecyrd.jspwiki.auth.permissions.PagePermis
sion","Wiki  
>> Group
Wiki:GroupProjectX","view")]
>> 2006-06-02 16:10:20,632 [http-6080-Processor24]
INFO  
>> com.ecyrd.jspwiki.WikiContext HCI Group Wiki:http://URL/wiki/Wiki.jsp
 
>> - User Member One has no access - forbidden  
>>
(permission=("com.ecyrd.jspwiki.auth.permissions.PageP
ermission","HCI  
>> Group
Wiki:GroupProjectSPOI","view"))
>> --------
>>
>> I also tried with
>>
>> [{SET members='userone'}] (the wiki name)
>>
>>
>> I have this in the page
>> [{ALLOW edit ProjectX.studies}]
>>
>> URL replaces the URL of the site
>>
>>
>> from what I read in the documentation it should
work... also I don't  
>> know why my account has admin rights (I can delete
pages) while  
>> others don't... I would like to set this for some
other people. I  
>> duplicated the wiki and in this new wiki I don't
have access rights  
>> anymore to delete pages... no one does in fact :(
>>
>> any help or pointers (if I miss some information in
the  
>> documentation) is welcome.
>>
>> thanks
>> Adler
>>
>> _______________________________________________
>> Jspwiki-users mailing list
>> Jspwiki-usersecyrd.com
>> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
>
> _______________________________________________
> Jspwiki-users mailing list
> Jspwiki-usersecyrd.com
> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
>

_______________________________________________
Jspwiki-users mailing list
Jspwiki-usersecyrd.com
http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
access rights
user name
2006-06-03 09:28:47
Hmm... So it is.  Andrew?

It would also seem that the new group code is broken; I lost
admin  
rights to jspwiki.org 

/Janne

On Jun 3, 2006, at 09:13 , Dirk Frederickx wrote:

> This is different from the documentation on wiki.
>
> See
> http://www.jspwiki.org/wiki/Security2.3#section-Secu
rity2.3- 
> ImpliedPermissions
>
>
> dirk
>
> Begin forwarded message:
>
>> From: Janne Jalkanen <Janne.Jalkanenecyrd.com>
>> Date: Fri 2 Jun 2006 19:16:24 CEST
>> To: JSPWiki Users discussion list
<jspwiki-usersecyrd.com>
>> Subject: Re: [Jspwiki-users] access rights
>> Reply-To: JSPWiki Users discussion list
<jspwiki-usersecyrd.com>
>>
>>
>> Hi!
>>
>> Edit permission does not imply "view"
permission.  So you need to add
>>
>> "[{ALLOW view All}]" on your page. 
Once there is any kind of  
>> access restriction on the page, any defaults from
jspwiki.policy  
>> are gone.
>>
>> /Janne
>>
>> On Jun 2, 2006, at 17:18 , Adler wrote:
>>
>>>
>>> I have a wiki page with
>>> [{SET members='Member One'}]
>>>
>>> however this user doesn't have access to the
page.
>>>
>>> ----- Log:
>>> 2006-06-02 16:10:20,632 [http-6080-Processor24]
INFO SecurityLog  
>>> Wiki Group Wiki:http://URL/wiki/Wiki.jsp
-  
>>> WikiSecurityEvent.ACCESS_DENIED  
>>>
[source=com.ecyrd.jspwiki.auth.AuthorizationManager13f449f, 

>>> princpal=[WikiPrincipal (loginName): userone],
target= 
>>>
("com.ecyrd.jspwiki.auth.permissions.PagePermission&q
uot;,"Wiki Group  
>>> Wiki:GroupProjectX","view")]
>>> 2006-06-02 16:10:20,632 [http-6080-Processor24]
INFO  
>>> com.ecyrd.jspwiki.WikiContext HCI Group Wiki:http://URL/wiki/ 
>>> Wiki.jsp - User Member One has no access -
forbidden (permission= 
>>>
("com.ecyrd.jspwiki.auth.permissions.PagePermission&q
uot;,"HCI Group  
>>>
Wiki:GroupProjectSPOI","view"))
>>> --------
>>>
>>> I also tried with
>>>
>>> [{SET members='userone'}] (the wiki name)
>>>
>>>
>>> I have this in the page
>>> [{ALLOW edit ProjectX.studies}]
>>>
>>> URL replaces the URL of the site
>>>
>>>
>>> from what I read in the documentation it should
work... also I  
>>> don't know why my account has admin rights (I
can delete pages)  
>>> while others don't... I would like to set this
for some other  
>>> people. I duplicated the wiki and in this new
wiki I don't have  
>>> access rights anymore to delete pages... no one
does in fact :(
>>>
>>> any help or pointers (if I miss some
information in the  
>>> documentation) is welcome.
>>>
>>> thanks
>>> Adler
>>>
>>> _______________________________________________
>>> Jspwiki-users mailing list
>>> Jspwiki-usersecyrd.com
>>> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
>>
>> _______________________________________________
>> Jspwiki-users mailing list
>> Jspwiki-usersecyrd.com
>> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
>>
>
> _______________________________________________
> Jspwiki-users mailing list
> Jspwiki-usersecyrd.com
> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users

_______________________________________________
Jspwiki-users mailing list
Jspwiki-usersecyrd.com
http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
[1-2]

about | contact  Other archives ( Real Estate discussion Medical topics )