Re: Re: Testing Security wiki 2.5

Thx Murray, tried
[{ALLOW view Authorized,Asserted,Anonymous}
>
> ]
> [{ALLOW comment Authorized,Asserted,Anonymous}]
> [{ALLOW edit Authorized}]
>
> Result:
registered users are not given access even with your suggestion Murray.
I have registered new users and get the same results:" you are not
allowed...."
I will deploy a new version with a clean policy file and report again.

To make sure I got this straight:
shouldn't this line:
permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:*",
"view,comment";

give all users access to view and comment the main page as well?...
My tests say that I need an ACL in order to see it.



On 7/25/07, Murray Altheim <[email protected]> wrote:
>
> Claudia Frers wrote:
> > I've change the ACL to
> > [{ALLOW view Asserted,Anonymous}]
> > [{ALLOW comment Asserted,Anonymous}]
> > [{ALLOW edit Authorized}]
>
> At first glance I'd say you need to consider that once you're
> logged in you are now "Authorized" but you've not given yourself
> view rights. Change the lines above to:
>
> [{ALLOW view Authorized,Asserted,Anonymous}
> >
> > ]
> > [{ALLOW comment Authorized,Asserted,Anonymous}]
> > [{ALLOW edit Authorized}]
> >
> > I think that will do it.
>
> Murray
>
>
> ...........................................................................
> Murray Altheim <murray07 at altheim.com>                           ===  =
> =
> http://www.altheim.com/murray/                                     =
> =  ===
> SGML Grease Monkey, Banjo Player, Wantanabe Zen Monk               = =  =
> =
>
>        Boundless wind and moon - the eye within eyes,
>        Inexhaustible heaven and earth - the light beyond light,
>        The willow dark, the flower bright - ten thousand houses,
>        Knock at any door - there's one who will respond.
>                                        -- The Blue Cliff Record
> _______________________________________________
> This is the Jspwiki-users mailing list, in which we discuss the
> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
> For development discussion, please join jspwiki-dev.
> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> http://www.jspwiki.org/JSPWikiMailingList
>