Sorry don't want to spam but this was not the solution -----Oorspronkelijk bericht----- Van: Ferdinandus, Humphrey Verzonden: donderdag 26 mei 2005 9:55 Aan: Discussion list for developers Onderwerp: RE: [Developers] Cloud Context Security
Hi! Solved!!! Got this weeks 'Aha erlebnis'. Forgot to grant the right 'change relation' to the usergroup. Thanks for the answers anyway -----Oorspronkelijk bericht----- Van: Ferdinandus, Humphrey Verzonden: donderdag 26 mei 2005 8:16 Aan: Kees Jongenburger; Discussion list for developers Onderwerp: RE: [Developers] Cloud Context Security Hi, The owner of the reldef is system. To which the user has got read rights. The nodes and the relationnode are owned by the context the user is working in. I am using mmbase version 1.7.3. Cloud context security should be upwards compatible or not? The node manager of the relation is the posrel builder and should be fairly standard: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE builder PUBLIC "-//MMBase//DTD builder config 1.1//EN" "http://www.mmbase.org/dtd/builder_1_1.dtd";> <builder extends="insrel" maintainer="mmbase.org" name="posrel" version="0"> <classfile>PosRel</classfile> <names> <singular xml:lang="en">Position Relation</singular> <singular xml:lang="fr">Placez La Relation</singular> <singular xml:lang="nl">Positierelatie</singular> <plural xml:lang="en">Position Relations</plural> <plural xml:lang="fr">Placez La Relations</plural> <plural xml:lang="nl">Positie Relaties</plural> </names> <descriptions> <description xml:lang="en">This relation has a position attribute</description> <description xml:lang="fr">Cette relation a un attribut de position</description> <description xml:lang="nl">Deze relatie heeft een positie attribuut</description> </descriptions> <fieldlist> <field> <descriptions> <description xml:lang="en">Position number, useful for ordering the relations</description> <description xml:lang="nl">Postitie of volgordenummer, te gebruiken voor het sorteren van de relaties</description> </descriptions> <gui> <guiname xml:lang="en">Position</guiname> <guiname xml:lang="fr">Placent</guiname> <guiname xml:lang="nl">Positie</guiname> <guitype>integer</guitype> </gui> <editor> <positions> <input>3</input> <list>3</list> <search>3</search> </positions> </editor> <db> <name>pos</name> <type key="false" notnull="false" state="persistent">INTEGER</type> </db> </field> </fieldlist> </builder> -----Oorspronkelijk bericht----- Van: Kees Jongenburger [mailto:[EMAIL PROTECTED] Verzonden: woensdag 25 mei 2005 17:05 Aan: Discussion list for developers Onderwerp: Re: [Developers] Cloud Context Security Hello , I had similar problems, and I didn't found the answer. my gues was that relation.getField("owner") sometime can return the owner of the reldef and not the owner of the relation. what version are you using? perhaps you can print things like the nodemanager of the relation. On 5/25/05, Emile <[EMAIL PROTECTED]> wrote: > > > > Hi - I'm hazarding a guess here - check that cookies are allowed for your > server. > > > > > Implemented cloud context security an ran into this problem. > > > > When editing a relation between 2 nodes I get the following message when > pressing Change or Delete: > > org.mmbase.security.SecurityException: Operation 'read' on > 108 was NOT permitted to anonymous > > > > > > _______________________________________________ > Developers mailing list > [email protected] > http://lists.mmbase.org/mailman/listinfo/developers > > > _______________________________________________ Developers mailing list [email protected] http://lists.mmbase.org/mailman/listinfo/developers _______________________________________________ Developers mailing list [email protected] http://lists.mmbase.org/mailman/listinfo/developers _______________________________________________ Developers mailing list [email protected] http://lists.mmbase.org/mailman/listinfo/developers _______________________________________________ Developers mailing list [email protected] http://lists.mmbase.org/mailman/listinfo/developers
