Re: Re: Security probs upg from 2.4.100 to 2.5.107

Hi again Milt:
I corrected my problem.
I forced a recompile by stopping Tomcat and deleting the contents of the
TOMCAT_HOME/work directory. This forces Tomcat to recompile everything.
Don't recall how its done in JBoss. Now all the permissions are working as
expected
and I finally don't need the ACL's. Don't know if this helps you in any way
but it seems
my problem was a caching thing :-(

Claudia

On 7/27/07, Claudia Frers <[email protected]> wrote:
>
> Hi Milt:
> Check my post Testing Security 2.5.
> Wouldn't you say I have the same or at least similar issues?
> I got around it by using ACL's but as I remember this wasn't necessary
> with the 2.4 version.
> Maybe
>
> >Even adding AllPermissions
> to Authenticated makes no difference.
>
> Correct.
>
> >>I will run this in a dev environment with totally out of the box
> settings and see what happens.
>
> Am currently doing that. No difference there.
>
> I think Andrew is the expert on this...
> I have not been able to assess if the ACL are mandatory but the policy
> file should suffice
> you'd think. I am using the default policy file. No changes to the
> container policy file.
>
> Claudia
>
>
>
> On 7/27/07, Milt Taylor <[email protected]> wrote:
> >
> > Further to my posting, I have discovered that:
> >
> > 1. By running SecurityConfig.jsp off the URL - which I can get into
> > after logging in - it all looks OK there. Policy seems to be loading
> > correctly.
> >
> > 2. After the error (after login form), I can manually enter the URL for
> > the home page and am able to view and follow hyperlinks. But Edit gives
> > me the error page, same as I get after Login. Even adding AllPermissions
> > to Authenticated makes no difference.
> >
> > I will run this in a dev environment with totally out of the box
> > settings and see what happens.
> >
> > _______________________________________________
> > This is the Jspwiki-users mailing list, in which we discuss the
> > stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
> > For development discussion, please join jspwiki-dev.
> > http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> > http://www.jspwiki.org/JSPWikiMailingList
> >
>
>