Re: Security probs upg from 2.4.100 to 2.5.107

No I don't think it's the same problem...I have now run an out of the 
box clean install of jspwiki under jboss 4.2 and I still get the same 
problem immediately following the login form.

I'm now trying under jboss 4.0.5, because the version of tomcat is much 
more recent in jboss 4.2.

Also still could be something configurational that has changed between 
wiki 2.4. and 2.5.x



Claudia Frers wrote:
> Hi again Milt:
> I corrected my problem.
> I forced a recompile by stopping Tomcat and deleting the contents of the
> TOMCAT_HOME/work directory. This forces Tomcat to recompile everything.
> Don't recall how its done in JBoss. Now all the permissions are working as
> expected
> and I finally don't need the ACL's. Don't know if this helps you in any way
> but it seems
> my problem was a caching thing :-(
> 
> Claudia
> 
> On 7/27/07, Claudia Frers <[email protected]> wrote:
>> Hi Milt:
>> Check my post Testing Security 2.5.
>> Wouldn't you say I have the same or at least similar issues?
>> I got around it by using ACL's but as I remember this wasn't necessary
>> with the 2.4 version.
>> Maybe
>>
>>> Even adding AllPermissions
>> to Authenticated makes no difference.
>>
>> Correct.
>>
>>>> I will run this in a dev environment with totally out of the box
>> settings and see what happens.
>>
>> Am currently doing that. No difference there.
>>
>> I think Andrew is the expert on this...
>> I have not been able to assess if the ACL are mandatory but the policy
>> file should suffice
>> you'd think. I am using the default policy file. No changes to the
>> container policy file.
>>
>> Claudia
>>
>>
>>
>> On 7/27/07, Milt Taylor <[email protected]> wrote:
>>> Further to my posting, I have discovered that:
>>>
>>> 1. By running SecurityConfig.jsp off the URL - which I can get into
>>> after logging in - it all looks OK there. Policy seems to be loading
>>> correctly.
>>>
>>> 2. After the error (after login form), I can manually enter the URL for
>>> the home page and am able to view and follow hyperlinks. But Edit gives
>>> me the error page, same as I get after Login. Even adding AllPermissions
>>> to Authenticated makes no difference.
>>>
>>> I will run this in a dev environment with totally out of the box
>>> settings and see what happens.
>>>
>>> _______________________________________________
>>> This is the Jspwiki-users mailing list, in which we discuss the
>>> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
>>> For development discussion, please join jspwiki-dev.
>>> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
>>> http://www.jspwiki.org/JSPWikiMailingList
>>>
>>