Return-Path: Delivered-To: apmail-incubator-jspwiki-dev-archive@locus.apache.org Received: (qmail 83238 invoked from network); 19 Aug 2008 19:44:08 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 19 Aug 2008 19:44:08 -0000 Received: (qmail 86755 invoked by uid 500); 19 Aug 2008 19:44:07 -0000 Delivered-To: apmail-incubator-jspwiki-dev-archive@incubator.apache.org Received: (qmail 86684 invoked by uid 500); 19 Aug 2008 19:44:07 -0000 Mailing-List: contact jspwiki-dev-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: jspwiki-dev@incubator.apache.org Delivered-To: mailing list jspwiki-dev@incubator.apache.org Received: (qmail 86673 invoked by uid 99); 19 Aug 2008 19:44:07 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 19 Aug 2008 12:44:07 -0700 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of Janne.Jalkanen@ecyrd.com designates 193.64.5.122 as permitted sender) Received: from [193.64.5.122] (HELO mail.ecyrd.com) (193.64.5.122) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 19 Aug 2008 19:43:10 +0000 Received: from [192.168.0.13] (cs181005170.pp.htv.fi [82.181.5.170]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by mail.ecyrd.com (Postfix) with ESMTP id EF055481A7 for ; Tue, 19 Aug 2008 22:43:38 +0300 (EEST) In-Reply-To: <10B87E37-C707-488D-B046-D79A27520835@ecyrd.com> References: <1691554938.20080815182011@holeczek.de> <343765960.20080815192644@holeczek.de> <1218829201.26491.615.camel@netframe> <806492132.20080817135014@holeczek.de> <649486680.20080817140221@holeczek.de> <979985907.20080817220716@holeczek.de> <89170034.20080817225427@holeczek.de> <18110291576.20080819092749@holeczek.de> <3a6c97f00808190118g1178c889l5c5806332b290798@mail.gmail.com> <1875300216.20080819141413@holeczek.de> <44BD3EBD-FAFB-4106-8166-089B5FE0D8F7@me.com> <271089479.20080819203749@holeczek.de> <73A57EA8-6A43-429B-BBE6-DCADF85DB4AB@ecyrd.com> <10B87E37-C707-488D-B046-D79A27520835@ecyrd.com> Mime-Version: 1.0 (Apple Message framework v753.1) X-Priority: 3 (Normal) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: Janne Jalkanen Subject: Re: weird access rights issue, was: Re: security configuration question Date: Tue, 19 Aug 2008 22:43:34 +0300 To: jspwiki-dev@incubator.apache.org X-Mailer: Apple Mail (2.753.1) X-Virus-Checked: Checked by ClamAV on apache.org On 19 Aug 2008, at 22:35, Janne Jalkanen wrote: >> >> Not because of ACLs, but because request.getParameter() is >> returning the *page content without edits*. This should NOT be >> happening. > > Looks like our Javascript is inserting an extraneous