Hi Sean, sorry for the late answer. On May 28, 2010, at 10:04 PM, McMains, Sean A wrote:
> > Hi Jan, > > We're currently running 4.2.4. As near as I can tell, our test account on > which we're seeing this problem has permissions set up pretty much just like > Eric on your test site, so I'm a trifle baffled as to what could be > different. Is it possible that our versioning command is setting up > permissions on the versions incorrectly? Our code just calls > Content.addVersion(), which doesn't seem to leave much room for problems (and > appears to be what VersionsList.java is doing). No, there's no issue with creating versions. No explicit permissions are set for them so there is nothing to set wrong. > But changing our editor role permissions for the website repository from "/$" > to "/" does allow the user to view the version history (as well as everyone > else's websites) correctly. Could you give me temporary access to the system or export the user and all the groups she has assigned and all the roles assigned to her directly and/or assigned via groups? BTW I remember there were some such issues in the past and should be fixed in 4.3 (see [1], [2], [3] for example). Tho I'm not sure it is related directly to your case, tho the last one (and specially the duplicate issue 2990 sounds exactly like your problem). [1] http://jira.magnolia-cms.com/browse/MAGNOLIA-3061 [2] http://jira.magnolia-cms.com/browse/MAGNOLIA-3140 [3] http://jira.magnolia-cms.com/browse/MAGNOLIA-2975 Thanks, Jan > > Here's the Exception that shows in the log when a non-superuser tries to > access the version history: > > ---- > 2010-05-28 14:31:12,091 ERROR info.magnolia.cms.core.version.ContentVersion > : User not allowed to Read path > [/jcr:system/jcr:versionStorage/8b/88/fb/8b88fb97-ebf9-461a-a3b8-8f5da6880264/1.0/jcr:frozenNode/mgnl:versionMetaData] > info.magnolia.cms.security.AccessDeniedException: User not allowed to Read > path > [/jcr:system/jcr:versionStorage/8b/88/fb/8b88fb97-ebf9-461a-a3b8-8f5da6880264/1.0/jcr:frozenNode/mgnl:versionMetaData] > at info.magnolia.cms.core.Access.isGranted(Access.java:64) > at info.magnolia.cms.core.DefaultContent.<init>(DefaultContent.java:124) > at > info.magnolia.cms.core.DefaultContent.getContent(DefaultContent.java:197) > at > info.magnolia.cms.core.version.BaseVersionManager.getSystemNode(BaseVersionManager.java:482) > at > info.magnolia.cms.core.version.BaseVersionManager.getUsedFilter(BaseVersionManager.java:459) > at > info.magnolia.cms.core.version.ContentVersion.init(ContentVersion.java:125) > at > info.magnolia.cms.core.version.ContentVersion.<init>(ContentVersion.java:114) > at > info.magnolia.cms.core.DefaultContent.getVersionedContent(DefaultContent.java:761) > at > info.magnolia.cms.gui.controlx.version.VersionListModel.getResult(VersionListModel.java:104) > at > info.magnolia.cms.gui.controlx.list.AbstractListModel.getListModelIterator(AbstractListModel.java:98) > at > info.magnolia.cms.gui.controlx.list.ListControl.getIterator(ListControl.java:115) > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > at > sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) > at > sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) > at java.lang.reflect.Method.invoke(Method.java:597) > at freemarker.ext.beans.BeansWrapper.invokeMethod(BeansWrapper.java:840) > at > freemarker.ext.beans.BeanModel.invokeThroughDescriptor(BeanModel.java:276) > at freemarker.ext.beans.BeanModel.get(BeanModel.java:183) > at freemarker.core.Dot._getAsTemplateModel(Dot.java:76) > at freemarker.core.Expression.getAsTemplateModel(Expression.java:89) > at freemarker.core.IteratorBlock.accept(IteratorBlock.java:94) > at freemarker.core.Environment.visit(Environment.java:209) > at freemarker.core.MixedContent.accept(MixedContent.java:92) > at freemarker.core.Environment.visit(Environment.java:209) > at freemarker.core.Environment.include(Environment.java:1482) > at freemarker.core.Include.accept(Include.java:169) > at freemarker.core.Environment.visit(Environment.java:209) > at freemarker.core.MixedContent.accept(MixedContent.java:92) > at freemarker.core.Environment.visit(Environment.java:209) > at freemarker.core.Environment.process(Environment.java:189) > at freemarker.template.Template.process(Template.java:237) > at > info.magnolia.freemarker.FreemarkerHelper.render(FreemarkerHelper.java:132) > at > info.magnolia.freemarker.FreemarkerHelper.render(FreemarkerHelper.java:114) > at > info.magnolia.freemarker.FreemarkerUtil.process(FreemarkerUtil.java:106) > at > info.magnolia.freemarker.FreemarkerUtil.process(FreemarkerUtil.java:92) > at > info.magnolia.cms.gui.controlx.impl.TemplatedRenderer.render(TemplatedRenderer.java:78) > at > info.magnolia.cms.gui.controlx.impl.AbstractControl.render(AbstractControl.java:162).... > ---- > > Thanks for any suggestions! > > Sean > > On May 24, 2010, at 4:00 AM, Jan Haderka wrote: > >> Hi Sean, >> what version of Magnolia are we talking about here? >> Just a simple test: >> - login to demoauthor instance as "eric" (editor) >> - activate a page >> - once a version is created, try to view it >> ==> you can see the versions. >> If you login as a superuser and check Eric's permissions, you will see that >> he has restricted access to root as well (via role demo-project-editor). >> >> The only permission you need to give is to access the node itself (/$) but >> not anything underneath. >> Cheers, >> Jan > > > ---------------------------------------------------------------- > For list details see > http://www.magnolia-cms.com/home/community/mailing-lists.html > To unsubscribe, E-mail to: <[email protected]> > ---------------------------------------------------------------- - Best regards, Jan Haderka, PhD. Magnolia International Ltd. http://www.magnolia-cms.com You should join us at Magnolia Conference 2010: http://www.magnolia-cms.com/conference http://twitter.com/magnolia_cms http://facebook.com/Magnolia -------------------------------------- Magnolia® - Simple Open-Source Content Management ---------------------------------------------------------------- For list details see http://www.magnolia-cms.com/home/community/mailing-lists.html To unsubscribe, E-mail to: <[email protected]> ----------------------------------------------------------------
