incubator-jspwiki-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Ulrich Gemkow (JIRA)" <j...@apache.org>
Subject [jira] Commented: (JSPWIKI-281) Unexspected permission required for editing page references
Date Sat, 07 Jun 2008 10:11:44 GMT

    [ https://issues.apache.org/jira/browse/JSPWIKI-281?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12603295#action_12603295
] 

Ulrich Gemkow commented on JSPWIKI-281:
---------------------------------------

When looking at my bug report I saw that the interface removed the stars in the policy lines
which I included in the report. The lines were correct (i.e. "<star>:PO<star>"
and <star>:<star>). Sorry about this.

> Unexspected permission required for editing page references
> -----------------------------------------------------------
>
>                 Key: JSPWIKI-281
>                 URL: https://issues.apache.org/jira/browse/JSPWIKI-281
>             Project: JSPWiki
>          Issue Type: Bug
>          Components: Authentication&Authorization
>    Affects Versions: 2.6.3
>         Environment: Linux, tomcat 5.5
>            Reporter: Ulrich Gemkow
>            Priority: Minor
>
> I tried to restrict authenticated users ability to create and modifiy pages to pages
with names starting with selected letters (i.e. PO*).
> I used the following settings in the policy file
>    permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:PO*", "modify,rename";
>    permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:IF*", "modify,rename";
>    permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:IO*", "modify,rename";
>    permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", "createPages";
> However this did not work . Whenever a used wanted to add a reference to another page
in a page he edited (typing "[a" for
> example), he got the error poopup "No permission to access this AJAX method!". The message
results from the
> JSONRPCManager which tried to display related page names.
> I had to add
>    permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:*", "rename";
>    permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:*", "rename";
>    permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:*", "rename";
> to the policy (trial and error, I did not really understood where the problem comes from)
to make this message
> disappear.
> This behaviour is at least unexpected. I cannot judge whether it is a bug.
> Thanks for listening and the great work!

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message