Hi Markus, Thanks for the reply. I appreciate the timely response. I am a complete newbie to magnolia and jsp development in general (although I have been developing java applications professionally for several years).
>From my very limited knowledge I guessed that the template I would need to modify would be samples/global/mainBar.jsp. Yet, when I browse this jsp nothing pops out at me. Would you mind giving me a bit more direction? The more specific the better considering my sheer lack of knowledge of this subject. Thanks again, I really appreciate the help! --Ron On 3/16/06, Markus Strickler <[email protected]> wrote: > Hi Ron- > > I think I stumbled over the same problem a while ago. It turened out to be > the simplenaviagtion that caused the problem (ait tries > to access the / node and fials with the user not allowed to access path). If > you modify your template to display naviagtion starting > from the current node, you should be OK. > > -markus > > > -----Original Message----- > > From: [email protected] [mailto:[EMAIL PROTECTED] > > Sent: Thursday, March 16, 2006 12:26 AM > > To: [email protected] > > Subject: [magnolia-user] secureURIList > > > > Hello All, > > > > I have been having some difficulty understanding how to successfully > > secure a web page. After many attempts, I removed the > > repositories and > > re-bootstrapped magnolia. Here is the process I am taking, > > and the end > > result: > > > > Bootstrap completes successfully, with only the following error, > > repeated several times: > > > > ERROR > > org.apache.jackrabbit.core.nodetype.virtual.VirtualNodeTypeSta > > teManager > > 15.03.2006 14:05:59 -- Unable to index new nodetype: > > javax.jcr.ItemNotFoundException > > > > Apparently, this is ok (see jira: > > http://jira.magnolia.info/browse/MAGNOLIA-579). > > > > Next I change my subscribers to port to 8181, the port tomcat > > is running > > on. This saves just fine. > > > > I then add the page I am going to secure to the deny cache list. > > Config->server->cache->level1->URI->deny->0002->URI=/features/search* > > I activate this change without problem. > > > > Next I add the secure page to the secureURIList. > > Config->server->secureURIList->0002->URI=/features/search* > > I activate this change without problem. > > > > I now create a userrole with read only access to selected and > > sub pages, > > selecting /features. This activates just fine. > > > > Next I create a user with the above mentioned userrole. This > > activates > > just fine. > > > > Up to this point, the logs show no additional errors, only > > the innocent > > few mentioned above. > > > > I attempt to navigate to /features/search on the public > > instance. I am > > presented with the login dialog, and my username and password > > are accepted. > > > > The page loads, but is blank. Viewing the source reveals an > > empty body: > > <HTML><HEAD> > > <META http-equiv=Content-Type content="text/html; > > charset=utf-8"></HEAD> > > <BODY></BODY></HTML> > > > > Looking at the logs, I now see an exception: > > ERROR info.magnolia.cms.servlets.EntryServlet 15.03.2006 14:42:35 -- > > javax.servlet.jsp.JspException: User not allowed to Read path [/] > > javax.servlet.ServletException: > > javax.servlet.jsp.JspException: User not > > allowed to Read path [/] > > > > I have attempted to be very careful and thoughtful while > > trying to get > > this to work, but I have not gotten anywhere. I can > > reproduce this in > > many various forms, but all ultimately lead to this type of problem. > > > > If anyone could help I would appreciate it very much. > > > > I am using: > > Magnolia 2.1.5 bundled with tomcat. > > JDK 1.5.0_06. > > Ubuntu Linux 5.1 > > > > Thanks, > > Ron > > > > ---------------------------------------------------------------- > > for list details see > > http://www.magnolia.info/en/magnolia/developer.html > > ---------------------------------------------------------------- > > > > > ---------------------------------------------------------------- > for list details see > http://www.magnolia.info/en/magnolia/developer.html > ---------------------------------------------------------------- > ---------------------------------------------------------------- for list details see http://www.magnolia.info/en/magnolia/developer.html ----------------------------------------------------------------
