I've just tested this and i can reproduce the error. Installed CF8.0.1 in developer mode using built in webserver turn on Sandbox security and add sandox for <cf_root>\wwwroot, restart server Place ModelGlue, Coldspring and the modelglueapptemplate in wwwroot hit http://localhost:8500/modelglueapplicationtemplate/index.cfm and you get the described error
Error Occurred While Processing RequestSecurity: The requested template has been denied access to \ModelGlue\gesture\configuration\ModelGlueConfiguration.xml Tested on Windows XP with CF 8,0,1,195765 and java 1.6.0_04 I believe i have found the cause of this, and i'll post back when i can confirm and hopefully should have a patch 2009/9/17 Brian Swartzfager <[email protected]> > > I encountered the same error Jen did ("Security: The requested > template has been denied access to \ModelGlue > \gesture\configuration\ModelGlueConfiguration.xml.") when I uploaded > my fledgling MG3 app from my local box to the hosting environment at > my workplace (where sandbox security is implemented). > > It certainly seems to be an issue with sandbox security, because MG3 > ran perfectly fine on my local box until I implemented sandbox > security on my local box and threw the Apache virtual host where the > app lived into a sandbox: as soon as I did that, I got the same > security error on my local box. > > The only explicit restrictions the sandbox put in place were what > files and directories could be accessed (all tags, all functions were > allowed), I did a LOT of playing around with the sandbox file/ > directory permissions to see if I could make MG3 happy again. The > only way I could get MG3 to run under the sandbox was to give the > sandbox the "<<ALL FILES>>" permission (basically letting it access > any file on the machine, as if the sandbox wasn't at all in place), or > permission to "/Volumes/Macintosh HD" (the entire hard drive on my > MacBook Pro machine). I tried narrowing down the permission scope to > the the directories under "/Volumes/Macintosh HD", to no avail: it > wouldn't settle for anything less than the entire hard drive. Maybe > that's what Jen's hosting people observed, which would explain their > assertion about it needing the C: drive. > > I tried the diagnostic step Dan suggested earlier in the thread > (adding a cfdump prior to line 38 of the ColdSpringBootstrapper.cfc), > and got the following error: > > "The method getClass was not found in component /Users/Brian/Sites/ > mgWork/htdocs/ModelGlue/gesture/loading/ColdSpringBootstrapper.cfc. > Ensure that the method is defined, and that it is spelled correctly. > > The error occurred in E:\cf8_updates\cfusion\wwwroot\WEB-INF\cftags > \dump.cfm: line 1570" > > ...my machine is a Mac: there is no "E:" drive (unless CF creates a > virtual drive, which I doubt). Bizarre. > > The question I have at this point is if anyone has successfully run > MG3 on their local machine within a CF sandbox, and if so under what > conditions? I don't think my local setup is all that unusual: OS X, > CF 8 using Apache with virtual hosts. > > --Brian > > > > --~--~---------~--~----~------------~-------~--~----~ Model-Glue Sites: Home Page: http://www.model-glue.com Documentation: http://docs.model-glue.com Bug Tracker: http://bugs.model-glue.com Blog: http://www.model-glue.com/blog You received this message because you are subscribed to the Google Groups "model-glue" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/model-glue?hl=en -~----------~----~----~----~------~----~------~--~---
