Hi Nuwan, According to my knowledge tags do not have a permissions attached. But resources that are tagged with those tags have permissions. Even if a user can get all the tags, user will be able to read only the permitted resources even though they are tagged.
As the reported exception related to retrieving a resource path (/_system/governance/appmgt/applicationdata/provider/admin/myapp/1/webapp) by an unauthorized user (anonymous), Resource retrieving process here should check permission before retrieving the resource. Caused by: org.wso2.carbon.registry.core.secure.AuthorizationFailedException: User wso2.anonymous.user is not authorized to read the resource /_system/governance/appmgt/applicationdata/provider/admin/myapp/1/webapp. Thank you, SameeraK. On Fri, Oct 9, 2015 at 2:07 PM, Nuwan Dias <nuw...@wso2.com> wrote: > You means tags have permissions? Since tags are attached to artifacts, > shouldn't it inherit the permissions of the artifact instead of having its > own? > > On Fri, Oct 9, 2015 at 1:34 PM, Sameera Kannangara <samee...@wso2.com> > wrote: > >> Hi Jena, >> >> I assume that anon user does not have access to these tags. >> If so why does process try to retrieve tags which are not allowed to be >> read by anon user? >> Above exception is expected when a user tries to perform a restricted >> operation. >> >> Problem seems to be trying to access a restricted resource using anon >> user. >> If that back end error occurs as soon as you log out, then may be the log >> out operation redirects user (who is anon since he just logged out) to a >> page containing a restricted operation. >> If this is the situation, solution would be to redirect user to a common >> page like landing page when logged out, or add a permission check before >> performing the restricted operation (in here the read operation). >> >> Thank you, >> SameeraK. >> >> >> >> >> On Fri, Oct 9, 2015 at 1:17 PM, Jenananthan Yogendran < >> jenanant...@wso2.com> wrote: >> >>> Hi All, >>> >>> I am getting following exception when try to view the web app as >>> anonymous user in app manger(1.1.0 snapshot) store >>> >>> Steps to reproduce >>> 1 . Create a web app with tags and restrict its visibility by role >>> 2. log in to store with user who has correct role and list the webapps >>> (tags are retrieved without any problem) >>> 3. log out and view the web apps as anonymous user -> exception thrown >>> in the backend >>> >>> >>> In the tag retrieving process, >>> >>> 1. get all the tags >>> 2. get resource(uuid) by tag >>> 3. get webapp artifact related to uuid -> this will return null if user >>> is not authorized to access that artifact. based on that only tags >>> associated to visible webapps will be filtered. >>> >>> >>> caching the artifact path in getArtifactPath(Registry registry, String >>> artifactId) [1] method seems to cause this issue, >>> >>> 1. When authorized user access the store, path of artifact which is >>> restricted by role will be cached in the tag retrieving process. >>> 2. So when anonymous user try to view the store, in the tag retrieving >>> process artifact path of role restricted artifact will be return from cache >>> and exception will be thrown when try to get the artifact from this >>> path.since anonymous user is not authorized to access that path. >>> >>> This issue was not there in appm1.0.0 which >>> uses org.wso2.carbon.governance.api_4.2.1 ,which doesn't have this caching >>> mechanism. So when try to get the artifact path of role restricted >>> artifact based on uuid, registry query written will return null and rest of >>> the >>> logic will return null for artifact.. >>> >>> wso2appm-1.1.0-SNAPSHOT uses org.wso2.carbon.governance.api_4.5.1. >>> Same issue is observed in APIM wso2am-1.10.0-SNAPSHOT. where it >>> uses org.wso2.carbon.governance.api_4.5.8. >>> >>> >>> >>> 1 . >>> https://github.com/wso2/carbon-governance/blob/release-4.5.9/components/governance/org.wso2.carbon.governance.api/src/main/java/org/wso2/carbon/governance/api/util/GovernanceUtils.java >>> >>> >>> >>> >>> [2015-10-09 11:55:42,502] ERROR - GovernanceUtils Error in retrieving >>> governance artifact by path. path: >>> /appmgt/applicationdata/provider/admin/myapp/1/webapp. >>> org.wso2.carbon.registry.core.secure.AuthorizationFailedException: User >>> wso2.anonymous.user is not authorized to read the resource >>> /_system/governance/appmgt/applicationdata/provider/admin/myapp/1/webapp. >>> at >>> org.wso2.carbon.registry.core.caching.CacheBackedRegistry.get(CacheBackedRegistry.java:164) >>> at >>> org.wso2.carbon.registry.core.session.UserRegistry.getInternal(UserRegistry.java:613) >>> at >>> org.wso2.carbon.registry.core.session.UserRegistry.access$400(UserRegistry.java:60) >>> at >>> org.wso2.carbon.registry.core.session.UserRegistry$5.run(UserRegistry.java:596) >>> at >>> org.wso2.carbon.registry.core.session.UserRegistry$5.run(UserRegistry.java:593) >>> at java.security.AccessController.doPrivileged(Native Method) >>> at >>> org.wso2.carbon.registry.core.session.UserRegistry.get(UserRegistry.java:593) >>> at >>> org.wso2.carbon.governance.api.util.GovernanceUtils.retrieveGovernanceArtifactByPath(GovernanceUtils.java:938) >>> at >>> org.wso2.carbon.governance.api.util.GovernanceUtils.retrieveGovernanceArtifactById(GovernanceUtils.java:908) >>> at >>> org.wso2.carbon.governance.api.common.GovernanceArtifactManager.getGovernanceArtifact(GovernanceArtifactManager.java:503) >>> at >>> org.wso2.carbon.governance.api.generic.GenericArtifactManager.getGenericArtifact(GenericArtifactManager.java:239) >>> at >>> org.wso2.carbon.appmgt.impl.APIConsumerImpl.getAPIsWithTag(APIConsumerImpl.java:194) >>> at >>> org.wso2.carbon.appmgt.impl.APIConsumerImpl.getAllTags(APIConsumerImpl.java:749) >>> at >>> org.wso2.carbon.appmgt.impl.UserAwareAPIConsumer.getAllTags(UserAwareAPIConsumer.java:35) >>> at >>> org.wso2.carbon.appmgt.hostobjects.APIStoreHostObject.jsFunction_getAllTags(APIStoreHostObject.java:864) >>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) >>> at >>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) >>> at >>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) >>> at java.lang.reflect.Method.invoke(Method.java:606) >>> at org.mozilla.javascript.MemberBox.invoke(MemberBox.java:126) >>> at org.mozilla.javascript.FunctionObject.call(FunctionObject.java:386) >>> at org.mozilla.javascript.optimizer.OptRuntime.call1(OptRuntime.java:32) >>> at >>> org.jaggeryjs.rhino.store.modules.c1._c_anonymous_31(/store/modules/store.js:426) >>> at org.jaggeryjs.rhino.store.modules.c1.call(/store/modules/store.js) >>> at org.mozilla.javascript.optimizer.OptRuntime.call1(OptRuntime.java:32) >>> at >>> org.jaggeryjs.rhino.store.extensions.assets.webapp.pages.c0._c_anonymous_8(/store/extensions/assets/webapp/pages/assets.jag:360) >>> at >>> org.jaggeryjs.rhino.store.extensions.assets.webapp.pages.c0.call(/store/extensions/assets/webapp/pages/assets.jag) >>> at >>> org.mozilla.javascript.optimizer.OptRuntime.callProp0(OptRuntime.java:85) >>> at >>> org.jaggeryjs.rhino.<caramel>.scripts.c0._c_anonymous_23(<caramel>/scripts/caramel.handlebars.js:372) >>> at >>> org.jaggeryjs.rhino.<caramel>.scripts.c0.call(<caramel>/scripts/caramel.handlebars.js) >>> at >>> org.mozilla.javascript.optimizer.OptRuntime.callName(OptRuntime.java:63) >>> at >>> org.jaggeryjs.rhino.<caramel>.scripts.c0._c_anonymous_3(<caramel>/scripts/caramel.handlebars.js:35) >>> at >>> org.jaggeryjs.rhino.<caramel>.scripts.c0.call(<caramel>/scripts/caramel.handlebars.js) >>> at >>> org.mozilla.javascript.ScriptRuntime.applyOrCall(ScriptRuntime.java:2430) >>> at org.mozilla.javascript.BaseFunction.execIdCall(BaseFunction.java:269) >>> at org.mozilla.javascript.IdFunctionObject.call(IdFunctionObject.java:97) >>> at >>> org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1473) >>> at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:815) >>> at >>> org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:109) >>> at >>> org.mozilla.javascript.ScriptRuntime.applyOrCall(ScriptRuntime.java:2430) >>> at org.mozilla.javascript.BaseFunction.execIdCall(BaseFunction.java:269) >>> at org.mozilla.javascript.IdFunctionObject.call(IdFunctionObject.java:97) >>> at org.mozilla.javascript.optimizer.OptRuntime.callN(OptRuntime.java:52) >>> at >>> org.jaggeryjs.rhino.<handlebars>.scripts.c0._c_anonymous_129(<handlebars>/scripts/handlebars.js:1512) >>> at >>> org.jaggeryjs.rhino.<handlebars>.scripts.c0.call(<handlebars>/scripts/handlebars.js) >>> at >>> org.mozilla.javascript.ScriptRuntime.applyOrCall(ScriptRuntime.java:2430) >>> at org.mozilla.javascript.BaseFunction.execIdCall(BaseFunction.java:269) >>> at org.mozilla.javascript.IdFunctionObject.call(IdFunctionObject.java:97) >>> at org.mozilla.javascript.optimizer.OptRuntime.callN(OptRuntime.java:52) >>> at >>> org.jaggeryjs.rhino.<handlebars>.scripts.c0._c_anonymous_126(<handlebars>/scripts/handlebars.js:1483) >>> at >>> org.jaggeryjs.rhino.<handlebars>.scripts.c0.call(<handlebars>/scripts/handlebars.js) >>> at >>> org.mozilla.javascript.optimizer.OptRuntime.callName(OptRuntime.java:63) >>> at >>> org.jaggeryjs.rhino.<caramel>.scripts.c0._c_anonymous_31(<caramel>/scripts/caramel.handlebars.js:623) >>> at >>> org.jaggeryjs.rhino.<caramel>.scripts.c0.call(<caramel>/scripts/caramel.handlebars.js) >>> at org.mozilla.javascript.optimizer.OptRuntime.call2(OptRuntime.java:42) >>> at >>> org.jaggeryjs.rhino.store.extensions.assets.webapp.themes.store.renderers.extensions.assets.webapp.pages.c0._c_anonymous_1(/store/extensions/assets/webapp/themes/store/renderers/extensions/assets/webapp/pages/assets.js:36) >>> at >>> org.jaggeryjs.rhino.store.extensions.assets.webapp.themes.store.renderers.extensions.assets.webapp.pages.c0.call(/store/extensions/assets/webapp/themes/store/renderers/extensions/assets/webapp/pages/assets.js) >>> at >>> org.mozilla.javascript.optimizer.OptRuntime.callName(OptRuntime.java:63) >>> at >>> org.jaggeryjs.rhino.<caramel>.scripts.c0._c_anonymous_28(<caramel>/scripts/caramel.handlebars.js:453) >>> at >>> org.jaggeryjs.rhino.<caramel>.scripts.c0.call(<caramel>/scripts/caramel.handlebars.js) >>> at >>> org.mozilla.javascript.ScriptRuntime.applyOrCall(ScriptRuntime.java:2430) >>> at org.mozilla.javascript.BaseFunction.execIdCall(BaseFunction.java:269) >>> at org.mozilla.javascript.IdFunctionObject.call(IdFunctionObject.java:97) >>> at org.mozilla.javascript.optimizer.OptRuntime.callN(OptRuntime.java:52) >>> at >>> org.jaggeryjs.rhino.store.themes.store.c0._c_anonymous_21(/store/themes/store/theme.js:162) >>> at >>> org.jaggeryjs.rhino.store.themes.store.c0.call(/store/themes/store/theme.js) >>> at org.mozilla.javascript.optimizer.OptRuntime.call2(OptRuntime.java:42) >>> at >>> org.jaggeryjs.rhino.<caramel>.scripts.c0._c_anonymous_13(<caramel>/scripts/caramel-core.js:212) >>> at >>> org.jaggeryjs.rhino.<caramel>.scripts.c0.call(<caramel>/scripts/caramel-core.js) >>> at org.mozilla.javascript.optimizer.OptRuntime.call1(OptRuntime.java:32) >>> at >>> org.jaggeryjs.rhino.store.extensions.assets.webapp.pages.c0._c_anonymous_1(/store/extensions/assets/webapp/pages/assets.jag:341) >>> at >>> org.jaggeryjs.rhino.store.extensions.assets.webapp.pages.c0.call(/store/extensions/assets/webapp/pages/assets.jag) >>> at >>> org.mozilla.javascript.ScriptRuntime.applyOrCall(ScriptRuntime.java:2430) >>> at org.mozilla.javascript.BaseFunction.execIdCall(BaseFunction.java:269) >>> at org.mozilla.javascript.IdFunctionObject.call(IdFunctionObject.java:97) >>> at org.mozilla.javascript.optimizer.OptRuntime.call2(OptRuntime.java:42) >>> at >>> org.jaggeryjs.rhino.store.modules.c1._c_anonymous_70(/store/modules/store.js:1155) >>> at org.jaggeryjs.rhino.store.modules.c1.call(/store/modules/store.js) >>> at org.mozilla.javascript.optimizer.OptRuntime.call0(OptRuntime.java:23) >>> at >>> org.jaggeryjs.rhino.<store>.scripts.c0._c_anonymous_17(<store>/scripts/server.js:266) >>> at org.jaggeryjs.rhino.<store>.scripts.c0.call(<store>/scripts/server.js) >>> at org.mozilla.javascript.optimizer.OptRuntime.call2(OptRuntime.java:42) >>> at >>> org.jaggeryjs.rhino.store.modules.c1._c_anonymous_69(/store/modules/store.js:1150) >>> at org.jaggeryjs.rhino.store.modules.c1.call(/store/modules/store.js) >>> at org.mozilla.javascript.optimizer.OptRuntime.callN(OptRuntime.java:52) >>> at >>> org.jaggeryjs.rhino.store.extensions.assets.webapp.pages.c0._c_script_0(/store/extensions/assets/webapp/pages/assets.jag:34) >>> at >>> org.jaggeryjs.rhino.store.extensions.assets.webapp.pages.c0.call(/store/extensions/assets/webapp/pages/assets.jag) >>> at >>> org.jaggeryjs.rhino.store.extensions.assets.webapp.pages.c0.exec(/store/extensions/assets/webapp/pages/assets.jag) >>> at >>> org.jaggeryjs.scriptengine.engine.RhinoEngine.execScript(RhinoEngine.java:567) >>> at >>> org.jaggeryjs.scriptengine.engine.RhinoEngine.exec(RhinoEngine.java:273) >>> at >>> org.jaggeryjs.jaggery.core.manager.WebAppManager.executeScript(WebAppManager.java:308) >>> at >>> org.jaggeryjs.jaggery.core.manager.WebAppManager.include(WebAppManager.java:148) >>> at sun.reflect.GeneratedMethodAccessor93.invoke(Unknown Source) >>> at >>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) >>> at java.lang.reflect.Method.invoke(Method.java:606) >>> at org.mozilla.javascript.MemberBox.invoke(MemberBox.java:126) >>> at org.mozilla.javascript.FunctionObject.call(FunctionObject.java:386) >>> at >>> org.mozilla.javascript.optimizer.OptRuntime.callName(OptRuntime.java:63) >>> at >>> org.jaggeryjs.rhino.store.controllers.routers.c0._c_anonymous_1(/store/controllers/routers/assets.jag:40) >>> at >>> org.jaggeryjs.rhino.store.controllers.routers.c0.call(/store/controllers/routers/assets.jag) >>> at org.mozilla.javascript.optimizer.OptRuntime.call0(OptRuntime.java:23) >>> at >>> org.jaggeryjs.rhino.store.controllers.routers.c0._c_script_0(/store/controllers/routers/assets.jag:3) >>> at >>> org.jaggeryjs.rhino.store.controllers.routers.c0.call(/store/controllers/routers/assets.jag) >>> at >>> org.mozilla.javascript.ContextFactory.doTopCall(ContextFactory.java:394) >>> at >>> org.mozilla.javascript.ScriptRuntime.doTopCall(ScriptRuntime.java:3091) >>> at >>> org.jaggeryjs.rhino.store.controllers.routers.c0.call(/store/controllers/routers/assets.jag) >>> at >>> org.jaggeryjs.rhino.store.controllers.routers.c0.exec(/store/controllers/routers/assets.jag) >>> at >>> org.jaggeryjs.scriptengine.engine.RhinoEngine.execScript(RhinoEngine.java:567) >>> at >>> org.jaggeryjs.scriptengine.engine.RhinoEngine.exec(RhinoEngine.java:273) >>> at >>> org.jaggeryjs.jaggery.core.manager.WebAppManager.exec(WebAppManager.java:587) >>> at >>> org.jaggeryjs.jaggery.core.manager.WebAppManager.execute(WebAppManager.java:507) >>> at >>> org.jaggeryjs.jaggery.core.JaggeryServlet.doGet(JaggeryServlet.java:24) >>> at javax.servlet.http.HttpServlet.service(HttpServlet.java:620) >>> at javax.servlet.http.HttpServlet.service(HttpServlet.java:727) >>> at >>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303) >>> at >>> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) >>> at >>> org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:748) >>> at >>> org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:486) >>> at >>> org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:378) >>> at >>> org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:338) >>> at >>> org.jaggeryjs.jaggery.core.JaggeryFilter.doFilter(JaggeryFilter.java:21) >>> at >>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) >>> at >>> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) >>> at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) >>> at >>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) >>> at >>> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) >>> at >>> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220) >>> at >>> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122) >>> at >>> org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:504) >>> at >>> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:170) >>> at >>> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103) >>> at >>> org.wso2.carbon.tomcat.ext.valves.CompositeValve.continueInvocation(CompositeValve.java:99) >>> at >>> org.wso2.carbon.tomcat.ext.valves.CarbonTomcatValve$1.invoke(CarbonTomcatValve.java:47) >>> at >>> org.wso2.carbon.webapp.mgt.TenantLazyLoaderValve.invoke(TenantLazyLoaderValve.java:57) >>> at >>> org.wso2.carbon.tomcat.ext.valves.TomcatValveContainer.invokeValves(TomcatValveContainer.java:47) >>> at >>> org.wso2.carbon.tomcat.ext.valves.CompositeValve.invoke(CompositeValve.java:62) >>> at >>> org.wso2.carbon.tomcat.ext.valves.CarbonStuckThreadDetectionValve.invoke(CarbonStuckThreadDetectionValve.java:159) >>> at >>> org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:950) >>> at >>> org.wso2.carbon.tomcat.ext.valves.CarbonContextCreatorValve.invoke(CarbonContextCreatorValve.java:57) >>> at >>> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116) >>> at >>> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:421) >>> at >>> org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1074) >>> at >>> org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:611) >>> at >>> org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1739) >>> at >>> org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.java:1698) >>> at >>> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) >>> at >>> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) >>> at >>> org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) >>> at java.lang.Thread.run(Thread.java:745) >>> [2015-10-09 11:55:42,506] ERROR - UserAwareAPIConsumer Failed to get >>> WebApp for tag role >>> org.wso2.carbon.governance.api.exception.GovernanceException: Error in >>> retrieving governance artifact by path. path: >>> /appmgt/applicationdata/provider/admin/myapp/1/webapp. >>> at >>> org.wso2.carbon.governance.api.util.GovernanceUtils.retrieveGovernanceArtifactByPath(GovernanceUtils.java:1069) >>> at >>> org.wso2.carbon.governance.api.util.GovernanceUtils.retrieveGovernanceArtifactById(GovernanceUtils.java:908) >>> at >>> org.wso2.carbon.governance.api.common.GovernanceArtifactManager.getGovernanceArtifact(GovernanceArtifactManager.java:503) >>> at >>> org.wso2.carbon.governance.api.generic.GenericArtifactManager.getGenericArtifact(GenericArtifactManager.java:239) >>> at >>> org.wso2.carbon.appmgt.impl.APIConsumerImpl.getAPIsWithTag(APIConsumerImpl.java:194) >>> at >>> org.wso2.carbon.appmgt.impl.APIConsumerImpl.getAllTags(APIConsumerImpl.java:749) >>> at >>> org.wso2.carbon.appmgt.impl.UserAwareAPIConsumer.getAllTags(UserAwareAPIConsumer.java:35) >>> at >>> org.wso2.carbon.appmgt.hostobjects.APIStoreHostObject.jsFunction_getAllTags(APIStoreHostObject.java:864) >>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) >>> at >>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) >>> at >>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) >>> at java.lang.reflect.Method.invoke(Method.java:606) >>> at org.mozilla.javascript.MemberBox.invoke(MemberBox.java:126) >>> at org.mozilla.javascript.FunctionObject.call(FunctionObject.java:386) >>> at org.mozilla.javascript.optimizer.OptRuntime.call1(OptRuntime.java:32) >>> at >>> org.jaggeryjs.rhino.store.modules.c1._c_anonymous_31(/store/modules/store.js:426) >>> at org.jaggeryjs.rhino.store.modules.c1.call(/store/modules/store.js) >>> at org.mozilla.javascript.optimizer.OptRuntime.call1(OptRuntime.java:32) >>> at >>> org.jaggeryjs.rhino.store.extensions.assets.webapp.pages.c0._c_anonymous_8(/store/extensions/assets/webapp/pages/assets.jag:360) >>> at >>> org.jaggeryjs.rhino.store.extensions.assets.webapp.pages.c0.call(/store/extensions/assets/webapp/pages/assets.jag) >>> at >>> org.mozilla.javascript.optimizer.OptRuntime.callProp0(OptRuntime.java:85) >>> at >>> org.jaggeryjs.rhino.<caramel>.scripts.c0._c_anonymous_23(<caramel>/scripts/caramel.handlebars.js:372) >>> at >>> org.jaggeryjs.rhino.<caramel>.scripts.c0.call(<caramel>/scripts/caramel.handlebars.js) >>> at >>> org.mozilla.javascript.optimizer.OptRuntime.callName(OptRuntime.java:63) >>> at >>> org.jaggeryjs.rhino.<caramel>.scripts.c0._c_anonymous_3(<caramel>/scripts/caramel.handlebars.js:35) >>> at >>> org.jaggeryjs.rhino.<caramel>.scripts.c0.call(<caramel>/scripts/caramel.handlebars.js) >>> at >>> org.mozilla.javascript.ScriptRuntime.applyOrCall(ScriptRuntime.java:2430) >>> at org.mozilla.javascript.BaseFunction.execIdCall(BaseFunction.java:269) >>> at org.mozilla.javascript.IdFunctionObject.call(IdFunctionObject.java:97) >>> at >>> org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1473) >>> at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:815) >>> at >>> org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:109) >>> at >>> org.mozilla.javascript.ScriptRuntime.applyOrCall(ScriptRuntime.java:2430) >>> at org.mozilla.javascript.BaseFunction.execIdCall(BaseFunction.java:269) >>> at org.mozilla.javascript.IdFunctionObject.call(IdFunctionObject.java:97) >>> at org.mozilla.javascript.optimizer.OptRuntime.callN(OptRuntime.java:52) >>> at >>> org.jaggeryjs.rhino.<handlebars>.scripts.c0._c_anonymous_129(<handlebars>/scripts/handlebars.js:1512) >>> at >>> org.jaggeryjs.rhino.<handlebars>.scripts.c0.call(<handlebars>/scripts/handlebars.js) >>> at >>> org.mozilla.javascript.ScriptRuntime.applyOrCall(ScriptRuntime.java:2430) >>> at org.mozilla.javascript.BaseFunction.execIdCall(BaseFunction.java:269) >>> at org.mozilla.javascript.IdFunctionObject.call(IdFunctionObject.java:97) >>> at org.mozilla.javascript.optimizer.OptRuntime.callN(OptRuntime.java:52) >>> at >>> org.jaggeryjs.rhino.<handlebars>.scripts.c0._c_anonymous_126(<handlebars>/scripts/handlebars.js:1483) >>> at >>> org.jaggeryjs.rhino.<handlebars>.scripts.c0.call(<handlebars>/scripts/handlebars.js) >>> at >>> org.mozilla.javascript.optimizer.OptRuntime.callName(OptRuntime.java:63) >>> at >>> org.jaggeryjs.rhino.<caramel>.scripts.c0._c_anonymous_31(<caramel>/scripts/caramel.handlebars.js:623) >>> at >>> org.jaggeryjs.rhino.<caramel>.scripts.c0.call(<caramel>/scripts/caramel.handlebars.js) >>> at org.mozilla.javascript.optimizer.OptRuntime.call2(OptRuntime.java:42) >>> at >>> org.jaggeryjs.rhino.store.extensions.assets.webapp.themes.store.renderers.extensions.assets.webapp.pages.c0._c_anonymous_1(/store/extensions/assets/webapp/themes/store/renderers/extensions/assets/webapp/pages/assets.js:36) >>> at >>> org.jaggeryjs.rhino.store.extensions.assets.webapp.themes.store.renderers.extensions.assets.webapp.pages.c0.call(/store/extensions/assets/webapp/themes/store/renderers/extensions/assets/webapp/pages/assets.js) >>> at >>> org.mozilla.javascript.optimizer.OptRuntime.callName(OptRuntime.java:63) >>> at >>> org.jaggeryjs.rhino.<caramel>.scripts.c0._c_anonymous_28(<caramel>/scripts/caramel.handlebars.js:453) >>> at >>> org.jaggeryjs.rhino.<caramel>.scripts.c0.call(<caramel>/scripts/caramel.handlebars.js) >>> at >>> org.mozilla.javascript.ScriptRuntime.applyOrCall(ScriptRuntime.java:2430) >>> at org.mozilla.javascript.BaseFunction.execIdCall(BaseFunction.java:269) >>> at org.mozilla.javascript.IdFunctionObject.call(IdFunctionObject.java:97) >>> at org.mozilla.javascript.optimizer.OptRuntime.callN(OptRuntime.java:52) >>> at >>> org.jaggeryjs.rhino.store.themes.store.c0._c_anonymous_21(/store/themes/store/theme.js:162) >>> at >>> org.jaggeryjs.rhino.store.themes.store.c0.call(/store/themes/store/theme.js) >>> at org.mozilla.javascript.optimizer.OptRuntime.call2(OptRuntime.java:42) >>> at >>> org.jaggeryjs.rhino.<caramel>.scripts.c0._c_anonymous_13(<caramel>/scripts/caramel-core.js:212) >>> at >>> org.jaggeryjs.rhino.<caramel>.scripts.c0.call(<caramel>/scripts/caramel-core.js) >>> at org.mozilla.javascript.optimizer.OptRuntime.call1(OptRuntime.java:32) >>> at >>> org.jaggeryjs.rhino.store.extensions.assets.webapp.pages.c0._c_anonymous_1(/store/extensions/assets/webapp/pages/assets.jag:341) >>> at >>> org.jaggeryjs.rhino.store.extensions.assets.webapp.pages.c0.call(/store/extensions/assets/webapp/pages/assets.jag) >>> at >>> org.mozilla.javascript.ScriptRuntime.applyOrCall(ScriptRuntime.java:2430) >>> at org.mozilla.javascript.BaseFunction.execIdCall(BaseFunction.java:269) >>> at org.mozilla.javascript.IdFunctionObject.call(IdFunctionObject.java:97) >>> at org.mozilla.javascript.optimizer.OptRuntime.call2(OptRuntime.java:42) >>> at >>> org.jaggeryjs.rhino.store.modules.c1._c_anonymous_70(/store/modules/store.js:1155) >>> at org.jaggeryjs.rhino.store.modules.c1.call(/store/modules/store.js) >>> at org.mozilla.javascript.optimizer.OptRuntime.call0(OptRuntime.java:23) >>> at >>> org.jaggeryjs.rhino.<store>.scripts.c0._c_anonymous_17(<store>/scripts/server.js:266) >>> at org.jaggeryjs.rhino.<store>.scripts.c0.call(<store>/scripts/server.js) >>> at org.mozilla.javascript.optimizer.OptRuntime.call2(OptRuntime.java:42) >>> at >>> org.jaggeryjs.rhino.store.modules.c1._c_anonymous_69(/store/modules/store.js:1150) >>> at org.jaggeryjs.rhino.store.modules.c1.call(/store/modules/store.js) >>> at org.mozilla.javascript.optimizer.OptRuntime.callN(OptRuntime.java:52) >>> at >>> org.jaggeryjs.rhino.store.extensions.assets.webapp.pages.c0._c_script_0(/store/extensions/assets/webapp/pages/assets.jag:34) >>> at >>> org.jaggeryjs.rhino.store.extensions.assets.webapp.pages.c0.call(/store/extensions/assets/webapp/pages/assets.jag) >>> at >>> org.jaggeryjs.rhino.store.extensions.assets.webapp.pages.c0.exec(/store/extensions/assets/webapp/pages/assets.jag) >>> at >>> org.jaggeryjs.scriptengine.engine.RhinoEngine.execScript(RhinoEngine.java:567) >>> at >>> org.jaggeryjs.scriptengine.engine.RhinoEngine.exec(RhinoEngine.java:273) >>> at >>> org.jaggeryjs.jaggery.core.manager.WebAppManager.executeScript(WebAppManager.java:308) >>> at >>> org.jaggeryjs.jaggery.core.manager.WebAppManager.include(WebAppManager.java:148) >>> at sun.reflect.GeneratedMethodAccessor93.invoke(Unknown Source) >>> at >>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) >>> at java.lang.reflect.Method.invoke(Method.java:606) >>> at org.mozilla.javascript.MemberBox.invoke(MemberBox.java:126) >>> at org.mozilla.javascript.FunctionObject.call(FunctionObject.java:386) >>> at >>> org.mozilla.javascript.optimizer.OptRuntime.callName(OptRuntime.java:63) >>> at >>> org.jaggeryjs.rhino.store.controllers.routers.c0._c_anonymous_1(/store/controllers/routers/assets.jag:40) >>> at >>> org.jaggeryjs.rhino.store.controllers.routers.c0.call(/store/controllers/routers/assets.jag) >>> at org.mozilla.javascript.optimizer.OptRuntime.call0(OptRuntime.java:23) >>> at >>> org.jaggeryjs.rhino.store.controllers.routers.c0._c_script_0(/store/controllers/routers/assets.jag:3) >>> at >>> org.jaggeryjs.rhino.store.controllers.routers.c0.call(/store/controllers/routers/assets.jag) >>> at >>> org.mozilla.javascript.ContextFactory.doTopCall(ContextFactory.java:394) >>> at >>> org.mozilla.javascript.ScriptRuntime.doTopCall(ScriptRuntime.java:3091) >>> at >>> org.jaggeryjs.rhino.store.controllers.routers.c0.call(/store/controllers/routers/assets.jag) >>> at >>> org.jaggeryjs.rhino.store.controllers.routers.c0.exec(/store/controllers/routers/assets.jag) >>> at >>> org.jaggeryjs.scriptengine.engine.RhinoEngine.execScript(RhinoEngine.java:567) >>> at >>> org.jaggeryjs.scriptengine.engine.RhinoEngine.exec(RhinoEngine.java:273) >>> at >>> org.jaggeryjs.jaggery.core.manager.WebAppManager.exec(WebAppManager.java:587) >>> at >>> org.jaggeryjs.jaggery.core.manager.WebAppManager.execute(WebAppManager.java:507) >>> at >>> org.jaggeryjs.jaggery.core.JaggeryServlet.doGet(JaggeryServlet.java:24) >>> at javax.servlet.http.HttpServlet.service(HttpServlet.java:620) >>> at javax.servlet.http.HttpServlet.service(HttpServlet.java:727) >>> at >>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303) >>> at >>> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) >>> at >>> org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:748) >>> at >>> org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:486) >>> at >>> org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:378) >>> at >>> org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:338) >>> at >>> org.jaggeryjs.jaggery.core.JaggeryFilter.doFilter(JaggeryFilter.java:21) >>> at >>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) >>> at >>> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) >>> at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) >>> at >>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) >>> at >>> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) >>> at >>> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220) >>> at >>> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122) >>> at >>> org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:504) >>> at >>> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:170) >>> at >>> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103) >>> at >>> org.wso2.carbon.tomcat.ext.valves.CompositeValve.continueInvocation(CompositeValve.java:99) >>> at >>> org.wso2.carbon.tomcat.ext.valves.CarbonTomcatValve$1.invoke(CarbonTomcatValve.java:47) >>> at >>> org.wso2.carbon.webapp.mgt.TenantLazyLoaderValve.invoke(TenantLazyLoaderValve.java:57) >>> at >>> org.wso2.carbon.tomcat.ext.valves.TomcatValveContainer.invokeValves(TomcatValveContainer.java:47) >>> at >>> org.wso2.carbon.tomcat.ext.valves.CompositeValve.invoke(CompositeValve.java:62) >>> at >>> org.wso2.carbon.tomcat.ext.valves.CarbonStuckThreadDetectionValve.invoke(CarbonStuckThreadDetectionValve.java:159) >>> at >>> org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:950) >>> at >>> org.wso2.carbon.tomcat.ext.valves.CarbonContextCreatorValve.invoke(CarbonContextCreatorValve.java:57) >>> at >>> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116) >>> at >>> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:421) >>> at >>> org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1074) >>> at >>> org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:611) >>> at >>> org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1739) >>> at >>> org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.java:1698) >>> at >>> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) >>> at >>> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) >>> at >>> org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) >>> at java.lang.Thread.run(Thread.java:745) >>> Caused by: >>> org.wso2.carbon.registry.core.secure.AuthorizationFailedException: User >>> wso2.anonymous.user is not authorized to read the resource >>> /_system/governance/appmgt/applicationdata/provider/admin/myapp/1/webapp. >>> at >>> org.wso2.carbon.registry.core.caching.CacheBackedRegistry.get(CacheBackedRegistry.java:164) >>> at >>> org.wso2.carbon.registry.core.session.UserRegistry.getInternal(UserRegistry.java:613) >>> at >>> org.wso2.carbon.registry.core.session.UserRegistry.access$400(UserRegistry.java:60) >>> at >>> org.wso2.carbon.registry.core.session.UserRegistry$5.run(UserRegistry.java:596) >>> at >>> org.wso2.carbon.registry.core.session.UserRegistry$5.run(UserRegistry.java:593) >>> at java.security.AccessController.doPrivileged(Native Method) >>> at >>> org.wso2.carbon.registry.core.session.UserRegistry.get(UserRegistry.java:593) >>> at >>> org.wso2.carbon.governance.api.util.GovernanceUtils.retrieveGovernanceArtifactByPath(GovernanceUtils.java:938) >>> ... 141 more >>> >>> -- >>> Jenananthan Yogendran >>> *Software Engineer,* >>> *WSO2 inc., http://wso2.com <http://wso2.com>* >>> >>> >>> _______________________________________________ >>> Dev mailing list >>> Dev@wso2.org >>> http://wso2.org/cgi-bin/mailman/listinfo/dev >>> >>> >> >> >> -- >> *Sameera Kannangara* >> Software Engineer >> Platform TG; WSO2 Inc. http://wso2.com >> Contact: >> phone: +94719541577 >> Lean . Enterprise . Middleware >> > > > > -- > Nuwan Dias > > Technical Lead - WSO2, Inc. http://wso2.com > email : nuw...@wso2.com > Phone : +94 777 775 729 > -- *Sameera Kannangara* Software Engineer Platform TG; WSO2 Inc. http://wso2.com Contact: phone: +94719541577 Lean . Enterprise . Middleware
_______________________________________________ Dev mailing list Dev@wso2.org http://wso2.org/cgi-bin/mailman/listinfo/dev
