Mailing-List: contact jspwiki-user-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: jspwiki-user@incubator.apache.org
Received-SPF: pass (athena.apache.org: domain of harry.metske@gmail.com
 designates 64.233.166.177 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references;
        b=TVlVlQvuk8yd7JCDYs9grMCgbB+MfWYTlgYaV5VUpjSoPQG6JpjXrnHedG8RWWQdLIVfWEtFqz69383B/IEKkKSWTdWd1eQUnzn/A2NcjXjl+kRSIjuQ+yuPf5feBqZm+zE6ndw5j4NDTD1ja72U5DaVhy0f6jgS/u4PCXo7Y/Y=
Message-ID: <3a6c97f00805161141v2799005che548aa5536d4d7c@mail.gmail.com>
Date: Fri, 16 May 2008 20:41:38 +0200
From: "Harry Metske" <harry.metske@gmail.com>
To: jspwiki-user@incubator.apache.org
Subject: Re: Group based PagePermission in jspwiki.policy
In-Reply-To: <17255965.post@talk.nabble.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_15063_14351279.1210963298125"
References: <17255965.post@talk.nabble.com>

------=_Part_15063_14351279.1210963298125
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Martin,

maybe you can first check the group membership that is in effect, click "My
Prefs" and then the View Group tab.
You can also increase the debuglevel in jspwiki.properties
(log4j.logger.SecurityLog)

regards,
Harry

2008/5/15 mkabcde <martin.kirchner@cas.de>:

>
> Hello everybody!
>
> I encounter an unexpected behaviour with JSPWiki's access control system.
> (JSPWiki version 2.6.1)
> Unfortunately I did not find any older posts that could help me solving
> this
> problem.
>
> I have a user "test" that is a member of the group "Editors".
> The jspwiki.policy grants the following permissions to this group:
>
> grant principal com.ecyrd.jspwiki.auth.GroupPrincipal "Editors" {
>     permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:*",
> "view,edit,rename,comment,upload";
>     permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*",
> "createPages,createGroups";
>     permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*",
> "editPreferences";
>     permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*",
> "editProfile";
>     permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*",
> "login";
> };
>
> All the pages I try to edit do NOT have an ACL like [{ALLOW edit Admin}].
> However, I cannot edit a page.
> The log shows:
>
> 2008-05-15 17:07:21,798 [http-9080-7] INFO com.ecyrd.jspwiki.WikiContext
> JSPWiki:/JSPWiki/Edit.jsp
> JSPWiki:http://css-80-003.home.cas.de:9080/JSPWiki/Edit.jsp - User test
> has
> no access - forbidden
>
> (permission=("com.ecyrd.jspwiki.auth.permissions.PagePermission","JSPWiki:REST-Spezifikation","edit"))
>
> Am I missing something?
> Is there any chance to get debug information on the permissions granted to
> the current user?
>
> Any help is appreciated.
>
> Best regards
>
> Martin
>
> --
> View this message in context:
> http://www.nabble.com/Group-based-PagePermission-in-jspwiki.policy-tp17255965p17255965.html
> Sent from the JspWiki - User mailing list archive at Nabble.com.
>
>


-- 
met vriendelijke groet,
Harry Metske
Telnr. +31-548-512395
Mobile +31-6-51898081

------=_Part_15063_14351279.1210963298125--