Hi Ron- I think I stumbled over the same problem a while ago. It turened out to be the simplenaviagtion that caused the problem (ait tries to access the / node and fials with the user not allowed to access path). If you modify your template to display naviagtion starting from the current node, you should be OK.
-markus > -----Original Message----- > From: [email protected] [mailto:[EMAIL PROTECTED] > Sent: Thursday, March 16, 2006 12:26 AM > To: [email protected] > Subject: [magnolia-user] secureURIList > > Hello All, > > I have been having some difficulty understanding how to successfully > secure a web page. After many attempts, I removed the > repositories and > re-bootstrapped magnolia. Here is the process I am taking, > and the end > result: > > Bootstrap completes successfully, with only the following error, > repeated several times: > > ERROR > org.apache.jackrabbit.core.nodetype.virtual.VirtualNodeTypeSta > teManager > 15.03.2006 14:05:59 -- Unable to index new nodetype: > javax.jcr.ItemNotFoundException > > Apparently, this is ok (see jira: > http://jira.magnolia.info/browse/MAGNOLIA-579). > > Next I change my subscribers to port to 8181, the port tomcat > is running > on. This saves just fine. > > I then add the page I am going to secure to the deny cache list. > Config->server->cache->level1->URI->deny->0002->URI=/features/search* > I activate this change without problem. > > Next I add the secure page to the secureURIList. > Config->server->secureURIList->0002->URI=/features/search* > I activate this change without problem. > > I now create a userrole with read only access to selected and > sub pages, > selecting /features. This activates just fine. > > Next I create a user with the above mentioned userrole. This > activates > just fine. > > Up to this point, the logs show no additional errors, only > the innocent > few mentioned above. > > I attempt to navigate to /features/search on the public > instance. I am > presented with the login dialog, and my username and password > are accepted. > > The page loads, but is blank. Viewing the source reveals an > empty body: > <HTML><HEAD> > <META http-equiv=Content-Type content="text/html; > charset=utf-8"></HEAD> > <BODY></BODY></HTML> > > Looking at the logs, I now see an exception: > ERROR info.magnolia.cms.servlets.EntryServlet 15.03.2006 14:42:35 -- > javax.servlet.jsp.JspException: User not allowed to Read path [/] > javax.servlet.ServletException: > javax.servlet.jsp.JspException: User not > allowed to Read path [/] > > I have attempted to be very careful and thoughtful while > trying to get > this to work, but I have not gotten anywhere. I can > reproduce this in > many various forms, but all ultimately lead to this type of problem. > > If anyone could help I would appreciate it very much. > > I am using: > Magnolia 2.1.5 bundled with tomcat. > JDK 1.5.0_06. > Ubuntu Linux 5.1 > > Thanks, > Ron > > ---------------------------------------------------------------- > for list details see > http://www.magnolia.info/en/magnolia/developer.html > ---------------------------------------------------------------- > ---------------------------------------------------------------- for list details see http://www.magnolia.info/en/magnolia/developer.html ----------------------------------------------------------------
