Hello

 

 

I'm testing Nuxeo 5.0.0 and I have some issues regarding security.

 

 

1.      I created a new Domain
2.      I created a new group "Valideurs"
3.      I added a new user on that group
4.      I added the group on the domain root : READ
5.      I'm log in with the new user and it throws the exception below.

 

        at
org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.p

rocessConnection(Http11BaseProtocol.java:664)

        at
org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpo

int.java:527)

        at
org.apache.tomcat.util.net.MasterSlaveWorkerThread.run(MasterSlaveWor

kerThread.java:112)

        at java.lang.Thread.run(Unknown Source)

Caused by: java.lang.SecurityException: Privilege 'ReadChildren' is not
granted

to 'sfr2'

        at
org.nuxeo.ecm.core.api.AbstractSession.checkPermission(AbstractSessio

n.java:205)

        at
org.nuxeo.ecm.core.api.AbstractSession.getChildren(AbstractSession.ja

va:517)

        at
org.nuxeo.ecm.core.api.ejb.DocumentManagerBean.getChildren(DocumentMa

nagerBean.java:244)

        ... 416 more

14:08:15,015 ERROR [ErrorHandlingInterceptor] Exception caught,
redirecting to t

he error page...

 

 

 

I don't known if it's a configuration problem. I used JRE 1.6.0_01.

 

 

I also have problem when I delete user from Administrator group, If I
disconnect and reconnect the user without restarting server, the user
has always admin functions... 

 

 

Regards,

 

 

Sebastien FRESCINA

 

 

 

 

_______________________________________________
ECM mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm

Reply via email to