Hi Jan,
We're currently running 4.2.4. As near as I can tell, our test account on which
we're seeing this problem has permissions set up pretty much just like Eric on
your test site, so I'm a trifle baffled as to what could be different. Is it
possible that our versioning command is setting up permissions on the versions
incorrectly? Our code just calls Content.addVersion(), which doesn't seem to
leave much room for problems (and appears to be what VersionsList.java is
doing). But changing our editor role permissions for the website repository
from "/$" to "/" does allow the user to view the version history (as well as
everyone else's websites) correctly.
Here's the Exception that shows in the log when a non-superuser tries to access
the version history:
----
2010-05-28 14:31:12,091 ERROR info.magnolia.cms.core.version.ContentVersion
: User not allowed to Read path
[/jcr:system/jcr:versionStorage/8b/88/fb/8b88fb97-ebf9-461a-a3b8-8f5da6880264/1.0/jcr:frozenNode/mgnl:versionMetaData]
info.magnolia.cms.security.AccessDeniedException: User not allowed to Read path
[/jcr:system/jcr:versionStorage/8b/88/fb/8b88fb97-ebf9-461a-a3b8-8f5da6880264/1.0/jcr:frozenNode/mgnl:versionMetaData]
at info.magnolia.cms.core.Access.isGranted(Access.java:64)
at info.magnolia.cms.core.DefaultContent.<init>(DefaultContent.java:124)
at
info.magnolia.cms.core.DefaultContent.getContent(DefaultContent.java:197)
at
info.magnolia.cms.core.version.BaseVersionManager.getSystemNode(BaseVersionManager.java:482)
at
info.magnolia.cms.core.version.BaseVersionManager.getUsedFilter(BaseVersionManager.java:459)
at
info.magnolia.cms.core.version.ContentVersion.init(ContentVersion.java:125)
at
info.magnolia.cms.core.version.ContentVersion.<init>(ContentVersion.java:114)
at
info.magnolia.cms.core.DefaultContent.getVersionedContent(DefaultContent.java:761)
at
info.magnolia.cms.gui.controlx.version.VersionListModel.getResult(VersionListModel.java:104)
at
info.magnolia.cms.gui.controlx.list.AbstractListModel.getListModelIterator(AbstractListModel.java:98)
at
info.magnolia.cms.gui.controlx.list.ListControl.getIterator(ListControl.java:115)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at freemarker.ext.beans.BeansWrapper.invokeMethod(BeansWrapper.java:840)
at
freemarker.ext.beans.BeanModel.invokeThroughDescriptor(BeanModel.java:276)
at freemarker.ext.beans.BeanModel.get(BeanModel.java:183)
at freemarker.core.Dot._getAsTemplateModel(Dot.java:76)
at freemarker.core.Expression.getAsTemplateModel(Expression.java:89)
at freemarker.core.IteratorBlock.accept(IteratorBlock.java:94)
at freemarker.core.Environment.visit(Environment.java:209)
at freemarker.core.MixedContent.accept(MixedContent.java:92)
at freemarker.core.Environment.visit(Environment.java:209)
at freemarker.core.Environment.include(Environment.java:1482)
at freemarker.core.Include.accept(Include.java:169)
at freemarker.core.Environment.visit(Environment.java:209)
at freemarker.core.MixedContent.accept(MixedContent.java:92)
at freemarker.core.Environment.visit(Environment.java:209)
at freemarker.core.Environment.process(Environment.java:189)
at freemarker.template.Template.process(Template.java:237)
at
info.magnolia.freemarker.FreemarkerHelper.render(FreemarkerHelper.java:132)
at
info.magnolia.freemarker.FreemarkerHelper.render(FreemarkerHelper.java:114)
at
info.magnolia.freemarker.FreemarkerUtil.process(FreemarkerUtil.java:106)
at
info.magnolia.freemarker.FreemarkerUtil.process(FreemarkerUtil.java:92)
at
info.magnolia.cms.gui.controlx.impl.TemplatedRenderer.render(TemplatedRenderer.java:78)
at
info.magnolia.cms.gui.controlx.impl.AbstractControl.render(AbstractControl.java:162)....
----
Thanks for any suggestions!
Sean
On May 24, 2010, at 4:00 AM, Jan Haderka wrote:
> Hi Sean,
> what version of Magnolia are we talking about here?
> Just a simple test:
> - login to demoauthor instance as "eric" (editor)
> - activate a page
> - once a version is created, try to view it
> ==> you can see the versions.
> If you login as a superuser and check Eric's permissions, you will see that
> he has restricted access to root as well (via role demo-project-editor).
>
> The only permission you need to give is to access the node itself (/$) but
> not anything underneath.
> Cheers,
> Jan
----------------------------------------------------------------
For list details see
http://www.magnolia-cms.com/home/community/mailing-lists.html
To unsubscribe, E-mail to: <[email protected]>
----------------------------------------------------------------
