Re: Re: Security probs upg from 2.4.100 to 2.5.107

Hi Milt:
Check my post Testing Security 2.5.
Wouldn't you say I have the same or at least similar issues?
I got around it by using ACL's but as I remember this wasn't necessary with
the 2.4 version.
Maybe

>Even adding AllPermissions
to Authenticated makes no difference.

Correct.

>>I will run this in a dev environment with totally out of the box
settings and see what happens.

Am currently doing that. No difference there.

I think Andrew is the expert on this...
I have not been able to assess if the ACL are mandatory but the policy file
should suffice
you'd think. I am using the default policy file. No changes to the container
policy file.

Claudia



On 7/27/07, Milt Taylor <[email protected]> wrote:
>
> Further to my posting, I have discovered that:
>
> 1. By running SecurityConfig.jsp off the URL - which I can get into
> after logging in - it all looks OK there. Policy seems to be loading
> correctly.
>
> 2. After the error (after login form), I can manually enter the URL for
> the home page and am able to view and follow hyperlinks. But Edit gives
> me the error page, same as I get after Login. Even adding AllPermissions
> to Authenticated makes no difference.
>
> I will run this in a dev environment with totally out of the box
> settings and see what happens.
>
> _______________________________________________
> This is the Jspwiki-users mailing list, in which we discuss the
> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
> For development discussion, please join jspwiki-dev.
> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> http://www.jspwiki.org/JSPWikiMailingList
>