It is definitely a problem (since rc2). I quote from a email fabrizio wrote

- first of all the permission problem... when I tried to use rc2 I
realized that any user, created with read-only permissions on the
website repository, was allowed to edit *everything*. For some reason
in AccessManagerImpl permissions are not set and Permission.ALL is
always returned at line 90. This is a show stopper for rc3.

Would be cool if you could have a look at it. The exception is thrown to make this visible.

On Aug 2, 2006, at 9:52 AM, Nicolas Modrzyk wrote:

Hi devs,

I'm getting some exception with the new filters:
userPermissions not set, returning Permission.ALL
java.lang.Exception
at info.magnolia.cms.security.AccessManagerImpl.getPermissions (AccessManagerImpl.java:89) at info.magnolia.cms.security.AccessManagerImpl.isGranted (AccessManagerImpl.java:49) at info.magnolia.cms.filters.MgnlInterceptFilter.isAuthorized (MgnlInterceptFilter.java:218) at info.magnolia.cms.filters.MgnlInterceptFilter.doFilter (MgnlInterceptFilter.java:122) at info.magnolia.cms.filters.MagnoliaManagedFilter $CustomFilterChain.doFilter(MagnoliaManagedFilter.java:87) at info.magnolia.cms.filters.MgnlContextFilter.doFilter (MgnlContextFilter.java:45) at info.magnolia.cms.filters.MagnoliaManagedFilter $CustomFilterChain.doFilter(MagnoliaManagedFilter.java:87) at info.magnolia.cms.security.SecurityFilter.doFilter (SecurityFilter.java:96) at info.magnolia.cms.filters.MagnoliaManagedFilter $CustomFilterChain.doFilter(MagnoliaManagedFilter.java:87) at info.magnolia.cms.filters.MultipartRequestFilter.doFilter (MultipartRequestFilter.java:80) at info.magnolia.cms.filters.MagnoliaManagedFilter $CustomFilterChain.doFilter(MagnoliaManagedFilter.java:87) at info.magnolia.cms.filters.MgnlVirtualUriFilter.doFilter (MgnlVirtualUriFilter.java:74) at info.magnolia.cms.filters.MagnoliaManagedFilter $CustomFilterChain.doFilter(MagnoliaManagedFilter.java:87) at info.magnolia.cms.filters.ContentTypeFilter.doFilter (ContentTypeFilter.java:66) at info.magnolia.cms.filters.MagnoliaManagedFilter $CustomFilterChain.doFilter(MagnoliaManagedFilter.java:87) at info.magnolia.cms.filters.MagnoliaManagedFilter.doFilter (MagnoliaManagedFilter.java:56) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter (ApplicationFilterChain.java:202) at org.apache.catalina.core.ApplicationFilterChain.doFilter (ApplicationFilterChain.java:173) at org.apache.catalina.core.StandardWrapperValve.invoke (StandardWrapperValve.java:213) at org.apache.catalina.core.StandardContextValve.invoke (StandardContextValve.java:178) at org.apache.catalina.core.StandardHostValve.invoke (StandardHostValve.java:126) at org.apache.catalina.valves.ErrorReportValve.invoke (ErrorReportValve.java:105) at org.apache.catalina.core.StandardEngineValve.invoke (StandardEngineValve.java:107) at org.apache.catalina.connector.CoyoteAdapter.service (CoyoteAdapter.java:148) at org.apache.coyote.http11.Http11Processor.process (Http11Processor.java:869) at org.apache.coyote.http11.Http11BaseProtocol $Http11ConnectionHandler.processConnection(Http11BaseProtocol.java: 664) at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket (PoolTcpEndpoint.java:527) at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt (LeaderFollowerWorkerThread.java:80) at org.apache.tomcat.util.threads.ThreadPool $ControlRunnable.run(ThreadPool.java:684)
        at java.lang.Thread.run(Thread.java:619)

Is this there for Debug ? or should I look a bit deeper to see the cause ?

Niko,

----------------------------------------------------------------
for list details see
http://www.magnolia.info/en/magnolia/developer.html
----------------------------------------------------------------


----------------------------------------------------------------
for list details see
http://www.magnolia.info/en/magnolia/developer.html
----------------------------------------------------------------

Reply via email to