Re: jspwiki.policy and anonymous users

thanks. the very admin/SecurityConfig.jsp confirmed that it was looking at 
the policy of the default jspwiki installation.

James

----- Original Message ----- 
From: "Janne Jalkanen" <[email protected]>
To: "JSPWiki Users discussion list" <[email protected]>
Sent: Monday, August 20, 2007 2:46 PM
Subject: Re: [Jspwiki-users] jspwiki.policy and anonymous users


> You are on the right track here.  My guess is that you are editing a
> different file than what JSPWiki is using.  Please check from your log
> file where jspwiki thinks the policy file is (we output it at
> startup).
>
> For example, you might have a global policy file.
>
> Another thing is that if you have *two* JSPWiki instances, we will
> randomly use one (since there can be only one Java policy file - it's
> a part of Java's security model.  We've fixed this in 2.6, though
> ;-).  In this case, you must use the command-line switch
> "-Djava.security.policy" to point at a global policy file.
>
> /Janne
>
> On Mon, Aug 20, 2007 at 02:37:23PM +0100, James Cowan wrote:
>>
>> I want to stop anonymous users from being able to edit pages etc.
>>
>> I have removed the roles from the Anonymous and Asserted users as below 
>> and
>> restarted tomcat but this seems to have no effect.
>>
>> Is there something else I need to do?
>>
>> James
>>
>> grant signedBy "jspwiki",
>>  principal com.ecyrd.jspwiki.auth.authorize.Role "Anonymous" {
>>    permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:*",
>> "view";
>>    permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:*",
>> "modify";
>>    permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*",
>> "createPages";
>>    permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*",
>> "editPreferences";
>>    permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*",
>> "editProfile";
>>    permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*",
>> "login";
>> };
>>
>> changed to
>>
>> grant signedBy "jspwiki",
>>  principal com.ecyrd.jspwiki.auth.authorize.Role "Anonymous" {
>>    permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:*",
>> "view";
>>    permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*",
>> "login";
>> };
>>
>> _______________________________________________
>> This is the Jspwiki-users mailing list, in which we discuss the
>> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
>> For development discussion, please join jspwiki-dev.
>> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
>> http://www.jspwiki.org/JSPWikiMailingList
> _______________________________________________
> This is the Jspwiki-users mailing list, in which we discuss the
> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
> For development discussion, please join jspwiki-dev.
> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> http://www.jspwiki.org/JSPWikiMailingList