You are right, the tables need to be updated for each model that has been changed to SecuredStandardLogEnabledModel. An automatic way would be to add lines like the following to app-security's org.keel.apps.security.models.ComponentSecurity:
* @persist.record * component="org.keel.models.util.CreateDB" * instance="all" * groupname="root" * alloperationsallowed="Y"
Then, assemble-deploy and run createdb once again.
I think explicit security is better than implicitly allowing root access to everything, could open up unforeseen holes otherwise.
Another way, instead of adding all the default records in UserComponentSecurity, is to add some default-persistent configuration snippets in each module's system.xconf.
Shash
Stephen Davidson wrote:
Hi Shash.
A bit of an improvement. I can now log in w/o crashing.
However, now when I try to access any thing out of the
Database Schema menu, I get "Authorization Failed", with;
java.lang.SecurityException: Service 'org.keel.services.model.Model/crud.list' Not Authorized
at org.keel.core.container.KeelServiceManager.lookup(KeelServiceManager.java:81)
I don't think the privileges for root were added when the database was created? Or is there another bug floating around?
Or should root be hardcoded to have all privileges everywhere (like root on Unix?).
Regards, Steve
Sasvata (Shash) Chatterjee wrote:
The suppression happens on the menu only, not the model. So, you can still access http://localhost:8080/model.do?model=createdb (I think, can't check at the moment).
Ummm, one problem;
Topic: Chicken Before Egg
If there is no database (clean build), one can't log in.
If one can't log in, one can't create the Database, as the Create Schema option is (or was) in the Keel Menu.
So, how do I create the Database so I can log in to create the database so I can log in to create the database ....ARRRGGGHHHHH!!!!! <grin>
Infinite logic loop!
http://keelframework.org/documentation Keelgroup mailing list [EMAIL PROTECTED] http://lists.keelframework.com/listinfo.cgi/keelgroup-keelframework.com
http://keelframework.org/documentation Keelgroup mailing list [EMAIL PROTECTED] http://lists.keelframework.com/listinfo.cgi/keelgroup-keelframework.com
