Re: jspwiki.policy and anonymous users

You are on the right track here.  My guess is that you are editing a
different file than what JSPWiki is using.  Please check from your log
file where jspwiki thinks the policy file is (we output it at
startup).

For example, you might have a global policy file.

Another thing is that if you have *two* JSPWiki instances, we will
randomly use one (since there can be only one Java policy file - it's
a part of Java's security model.  We've fixed this in 2.6, though
;-).  In this case, you must use the command-line switch
"-Djava.security.policy" to point at a global policy file.

/Janne

On Mon, Aug 20, 2007 at 02:37:23PM +0100, James Cowan wrote:
> 
> I want to stop anonymous users from being able to edit pages etc.
> 
> I have removed the roles from the Anonymous and Asserted users as below and 
> restarted tomcat but this seems to have no effect.
> 
> Is there something else I need to do?
> 
> James
> 
> grant signedBy "jspwiki",
>  principal com.ecyrd.jspwiki.auth.authorize.Role "Anonymous" {
>    permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:*", 
> "view";
>    permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:*", 
> "modify";
>    permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", 
> "createPages";
>    permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", 
> "editPreferences";
>    permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", 
> "editProfile";
>    permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", 
> "login";
> };
> 
> changed to
> 
> grant signedBy "jspwiki",
>  principal com.ecyrd.jspwiki.auth.authorize.Role "Anonymous" {
>    permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:*", 
> "view";
>    permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", 
> "login";
> }; 
> 
> _______________________________________________
> This is the Jspwiki-users mailing list, in which we discuss the 
> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues. 
> For development discussion, please join jspwiki-dev.
> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> http://www.jspwiki.org/JSPWikiMailingList