You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jetspeed-dev@portals.apache.org by Gonzalo Aguilar Delgado <ga...@aguilardelgado.com> on 2010/05/12 11:08:16 UTC

Insufficient Rights

Hi all, 

After working for a while with jetspeed I started to receive following
logs...


12-may-2010 10:51:36
org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
ADVERTENCIA: WebApplicationException has been caught : Insufficient
access to view page
12-may-2010 10:51:49
org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
ADVERTENCIA: WebApplicationException has been caught : Insufficient
access to view page
12-may-2010 10:51:54
org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
ADVERTENCIA: WebApplicationException has been caught : Insufficient
access to view page
12-may-2010 10:52:11
org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
ADVERTENCIA: WebApplicationException has been caught : Insufficient
access to view page


This causes user to lose permissions. And I don't find a reason why.
Logs only shows that.  


Now I'm deleting old logs and rebooting tomcat to see if I can have a
clearer cause. 

Sometimes it starts to work normally without human intervention.


Does anyone suffer of the same problem?










____________________________________




  Gonzalo Aguilar Delgado
  Consultor CRM - Ingeniero en
Informática
        M. +34 607814276











---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Re: Insufficient Rights

Posted by Gonzalo Aguilar Delgado <ga...@aguilardelgado.com>.
Hi woonsan, 

Will try to do what you say. But seems to be the most difficult thing I
found from time to now... :D

Thanks for you help.

El mié, 12-05-2010 a las 06:11 -0700, Woonsan Ko escribió:
> Hi Gonzalo,
> 
> 
> ----- Original Message ----
> > From: Gonzalo Aguilar Delgado <ga...@aguilardelgado.com>
> > To: Jetspeed Developers List <je...@portals.apache.org>
> > Sent: Wed, May 12, 2010 2:52:34 PM
> > Subject: Re: Insufficient Rights
> > 
> > 
> See inline...
> 
> 
> El mié, 12-05-2010 a las 05:09 -0700, Woonsan Ko 
> > escribió:
> > Hi Gonzalo,
> > 
> > So, your problem seems like 
> > this:
> > - The toolbox displayed ADD button because the user has proper 
> > access rights. 
>     RIGHT
> > - Sometimes, when the user 
> > tried to add a portlet into the page, the user meets security exceptions with 
> > the system logging "guest" user instead of the authenticated user 
> > name.
>     RIGHT
> 
> > A possible cause is that a new 
> > session was created when the user tried to add a portlet for some 
> > reason.
>     Yes. 
> Maybe:
> 12.05.2010 14:46:04 
> > DEBUG
> [org.springframework.jdbc.datasource.DataSourceUtils.doReleaseConnection():312] 
> > Returning JDBC Connection to DataSource
> 12.05.2010 14:46:04 
> > DEBUG
> [org.springframework.transaction.support.AbstractPlatformTransactionManager.getTransaction():371] 
> > Creating new transaction with name 
> > [org.apache.jetspeed.security.spi.UserPasswordCredentialStorageManager.getPasswordCredential]: 
> > PROPAGATION_REQUIRED,ISOLATION_DEFAULT
> ...
> 12.05.2010 14:46:04 
> > DEBUG
> [org.springframework.orm.ojb.OjbFactoryUtils.releasePersistenceBroker():124] 
> > Closing OJB PersistenceBroker
> 12.05.2010 14:46:04 
> > DEBUG
> [org.springframework.jdbc.datasource.DataSourceUtils.doReleaseConnection():312] 
> > Returning JDBC Connection to DataSource
> 12.05.2010 14:46:04 
> > DEBUG
> [org.apache.jetspeed.localization.impl.LocalizationValveImpl.invoke():110] 
> > Got user principal: guest
> 12.05.2010 14:46:04 
> > DEBUG
> [org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean():214] 
> > Returning cached instance of singleton bean 
> > 'org.apache.jetspeed.security.UserManager'
> 12.05.2010 14:46:04 
> > DEBUG
> [org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.invoke():120] 
> > Request path: /Euromaster/euromaster-dashboard-page.psml
> 12.05.2010 14:46:04 
> > DEBUG
> [org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.valueBound():1786] 
> > Session bound event: setup page manager listener
> 12.05.2010 14:46:04 
> > DEBUG
> [org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.updateSessionProfileLocators():1252] 
> > Updated user/locators context: user=guest, 
> > profileLocators=(page=/Euromaster/euromaster-dashboard-page.psml:page:/Euromaster/e
> 
> 
> It's 
> > getting wrong user because cached instance bean... But why?
> 
> The message, "cached instance of singleton bean" from the springframework doesn't seem related to the cause because the spring bean factory is returning the singleton, UserManager component.
> 
> 
> > 
> > However, I cannot figure out the reasons more because the problem seems like 
> > your specific portal application issue to me.
> 
> But I'm using a clean 
> > jetspeed deployment via custom deployment but
> changin only base layout. 
> > 
> 
> Session problems could happen for many reasons.
> For example, if http request headers have too much data such as cookie or query string, then the browser could just drop some header values such as JSESSIONID cookie header. In this case, the server will create a new http session.
> You can check if your custom codes have this kind of stuffs or you can try to monitor http session lifecycles.
> 
> Regards,
> 
> Woonsan
> 
> 
> It must be there a problem in jetspeed but I'm unable to track 
> > down
> because not an expert...
> 
> 
> > 
> > 
> > 
> > Woonsan
> > 
> > 
> > 
> > ----- Original Message ----
> > 
> > > From: Gonzalo Aguilar Delgado <
> > ymailto="mailto:gaguilar@aguilardelgado.com" 
> > href="mailto:gaguilar@aguilardelgado.com">gaguilar@aguilardelgado.com>
> > 
> > > To: Jetspeed Developers List <
> > ymailto="mailto:jetspeed-dev@portals.apache.org" 
> > href="mailto:jetspeed-dev@portals.apache.org">jetspeed-dev@portals.apache.org>
> > 
> > > Sent: Wed, May 12, 2010 1:49:01 PM
> > > Subject: Re: Insufficient 
> > Rights
> > > 
> > > This page has security 
> > > 
> > constraints
> > 
> > 
> > <security-constraints-ref>euromaster-manager</security-constraints-ref>
> > 
> > 
> > gaguilar 
> > > (example) has role euromaster-manager...
> > 
> > 
> > Why it performs as guest when 
> > > even the toolbar it showing 
> > the add
> > button? Some parts of the system believe 
> > > that is 
> > gaguilar
> > and others that's guest... Why?
> > 
> > 
> > 
> > 
> > Contents of 
> > > the page (all those portlets where added by 
> > the user
> > gaguilar without 
> > > touching anything at all in the 
> > portal config. The only
> > thing that changed is 
> > > that it was 
> > some time ago):
> > 
> > 
> > 
> > <page 
> > > 
> > id="/Euromaster/euromaster-dashboard-page.psml" hidden="false">
> >  
> > 
> > >  
> > > <security-constraints>
> > 
> > 
> > <security-constraints-ref>euromaster-manager</security-constraints-ref>
> >  
> > 
> > >   </security-constraints>
> >    
> > <title>Euromaster 
> > > Dashboards</title>
> >  
> >    <short-title>Euromaster 
> > > 
> > Dashboards</short-title>
> >     <fragment 
> > id="data-entry-01" 
> > > type="layout"
> > 
> > name="jetspeed-layouts::VelocityTwoColumns">
> >  
> > 
> > >       <fragment id="lead-search" 
> > > 
> > type="portlet"
> > 
> > name="crm-report-war::crm-report-chartviewer">
> >  
> > 
> > >           <property name="row" 
> > > 
> > value="0"></property>
> >            
> > 
> > > <property name="column" 
> > value="0"></property>
> >    
> > >    
> > </fragment>
> >         <fragment 
> > > 
> > id="P-12888000f54-10003" 
> > > type="portlet"
> > 
> > name="crm-report-war::crm-report-chartviewer">
> >  
> > 
> > >           <property name="column" 
> > > 
> > value="1"></property>
> >            
> > 
> > > <property name="row" 
> > value="0"></property>
> >      
> > >  
> > </fragment>
> >         <fragment 
> > > 
> > id="P-128880f0d49-10004" 
> > > type="portlet"
> > 
> > name="crm-report-war::crm-report-chartviewer">
> >  
> > 
> > >           <property name="column" 
> > > 
> > value="0"></property>
> >            
> > 
> > > <property name="row" 
> > value="1"></property>
> >      
> > >  
> > </fragment>
> >         <fragment 
> > > 
> > id="P-128881849fe-10005" 
> > > type="portlet"
> > 
> > name="crm-report-war::crm-report-chartviewer">
> >  
> > 
> > >           <property name="column" 
> > > 
> > value="1"></property>
> >            
> > 
> > > <property name="row" 
> > value="1"></property>
> >      
> > >  
> > </fragment>
> >         <fragment 
> > > 
> > id="P-128881b2e5a-10006" 
> > > type="portlet"
> > 
> > name="crm-report-war::crm-report-chartviewer">
> >  
> > 
> > >           <property name="column" 
> > > 
> > value="0"></property>
> >            
> > 
> > > <property name="row" 
> > value="2"></property>
> >      
> > >  
> > </fragment>
> >         <fragment 
> > > 
> > id="P-128881ca359-10007" 
> > > type="portlet"
> > 
> > name="crm-report-war::crm-report-chartviewer">
> >  
> > 
> > >           <property name="column" 
> > > 
> > value="1"></property>
> >            
> > 
> > > <property name="row" 
> > value="2"></property>
> >      
> > >  
> > </fragment>
> >         <fragment 
> > > 
> > id="P-128882857fa-10008" 
> > > type="portlet"
> > 
> > name="crm-report-war::crm-report-chartviewer">
> >  
> > 
> > >           <property name="column" 
> > > 
> > value="0"></property>
> >            
> > 
> > > <property name="row" 
> > value="3"></property>
> >      
> > >  
> > </fragment>
> >         <fragment 
> > > 
> > id="P-128882bbdba-10009" 
> > > type="portlet"
> > 
> > name="crm-report-war::crm-report-chartviewer">
> >  
> > 
> > >           <property name="column" 
> > > 
> > value="1"></property>
> >            
> > 
> > > <property name="row" 
> > value="3"></property>
> >      
> > >  
> > </fragment>
> >     </fragment>
> >    
> > 
> > > <metadata name="title" xml:lang="fr">Euromaster pane 
> > 
> > > de
> > control</metadata>
> >    
> > <metadata name="title" 
> > > xml:lang="es">Panel de 
> > control
> > Euromaster</metadata>
> >  
> > >  
> > <defaults 
> > > layout-decorator="level2crm"
> > 
> > portlet-decorator="jetspeed"></defaults>
> > </page>
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > ____________________________________
> > 
> > 
> > 
> > 
> > 
> >  
> > > Gonzalo Aguilar Delgado
> >   Consultor 
> > CRM - Ingeniero 
> > > en
> > Informática
> >      
> >    M. +34 
> > > 607814276
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > El mié, 12-05-2010 a las 
> > 13:17 
> > > +0200, Gonzalo Aguilar Delgado escribió:
> > > 
> > 
> > > /Euromaster/euromaster-dashboard-page.psml
> > 
> > 
> > 
> > 
> > ---------------------------------------------------------------------
> > To 
> > 
> > > unsubscribe, e-mail: 
> > > ymailto="mailto:
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org" 
> > 
> > > href="mailto:
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org">
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> > 
> > For 
> > > additional commands, e-mail: 
> > > ymailto="mailto:
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org" 
> > 
> > > href="mailto:
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org">
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> > 
> > 
> > 
> >      
> > 
> > 
> > ---------------------------------------------------------------------
> > To 
> > unsubscribe, e-mail: 
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> > 
> > For additional commands, e-mail: 
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> > 
> > 
> 
> 
> ---------------------------------------------------------------------
> To 
> > unsubscribe, e-mail: 
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> For 
> > additional commands, e-mail: 
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> 
> 
>       
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
> For additional commands, e-mail: jetspeed-dev-help@portals.apache.org
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Re: Insufficient Rights

Posted by Woonsan Ko <wo...@yahoo.com>.
Hi Gonzalo,


----- Original Message ----
> From: Gonzalo Aguilar Delgado <ga...@aguilardelgado.com>
> To: Jetspeed Developers List <je...@portals.apache.org>
> Sent: Wed, May 12, 2010 2:52:34 PM
> Subject: Re: Insufficient Rights
> 
> 
See inline...


El mié, 12-05-2010 a las 05:09 -0700, Woonsan Ko 
> escribió:
> Hi Gonzalo,
> 
> So, your problem seems like 
> this:
> - The toolbox displayed ADD button because the user has proper 
> access rights. 
    RIGHT
> - Sometimes, when the user 
> tried to add a portlet into the page, the user meets security exceptions with 
> the system logging "guest" user instead of the authenticated user 
> name.
    RIGHT

> A possible cause is that a new 
> session was created when the user tried to add a portlet for some 
> reason.
    Yes. 
Maybe:
12.05.2010 14:46:04 
> DEBUG
[org.springframework.jdbc.datasource.DataSourceUtils.doReleaseConnection():312] 
> Returning JDBC Connection to DataSource
12.05.2010 14:46:04 
> DEBUG
[org.springframework.transaction.support.AbstractPlatformTransactionManager.getTransaction():371] 
> Creating new transaction with name 
> [org.apache.jetspeed.security.spi.UserPasswordCredentialStorageManager.getPasswordCredential]: 
> PROPAGATION_REQUIRED,ISOLATION_DEFAULT
...
12.05.2010 14:46:04 
> DEBUG
[org.springframework.orm.ojb.OjbFactoryUtils.releasePersistenceBroker():124] 
> Closing OJB PersistenceBroker
12.05.2010 14:46:04 
> DEBUG
[org.springframework.jdbc.datasource.DataSourceUtils.doReleaseConnection():312] 
> Returning JDBC Connection to DataSource
12.05.2010 14:46:04 
> DEBUG
[org.apache.jetspeed.localization.impl.LocalizationValveImpl.invoke():110] 
> Got user principal: guest
12.05.2010 14:46:04 
> DEBUG
[org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean():214] 
> Returning cached instance of singleton bean 
> 'org.apache.jetspeed.security.UserManager'
12.05.2010 14:46:04 
> DEBUG
[org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.invoke():120] 
> Request path: /Euromaster/euromaster-dashboard-page.psml
12.05.2010 14:46:04 
> DEBUG
[org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.valueBound():1786] 
> Session bound event: setup page manager listener
12.05.2010 14:46:04 
> DEBUG
[org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.updateSessionProfileLocators():1252] 
> Updated user/locators context: user=guest, 
> profileLocators=(page=/Euromaster/euromaster-dashboard-page.psml:page:/Euromaster/e


It's 
> getting wrong user because cached instance bean... But why?

The message, "cached instance of singleton bean" from the springframework doesn't seem related to the cause because the spring bean factory is returning the singleton, UserManager component.


> 
> However, I cannot figure out the reasons more because the problem seems like 
> your specific portal application issue to me.

But I'm using a clean 
> jetspeed deployment via custom deployment but
changin only base layout. 
> 

Session problems could happen for many reasons.
For example, if http request headers have too much data such as cookie or query string, then the browser could just drop some header values such as JSESSIONID cookie header. In this case, the server will create a new http session.
You can check if your custom codes have this kind of stuffs or you can try to monitor http session lifecycles.

Regards,

Woonsan


It must be there a problem in jetspeed but I'm unable to track 
> down
because not an expert...


> 
> 
> 
> Woonsan
> 
> 
> 
> ----- Original Message ----
> 
> > From: Gonzalo Aguilar Delgado <
> ymailto="mailto:gaguilar@aguilardelgado.com" 
> href="mailto:gaguilar@aguilardelgado.com">gaguilar@aguilardelgado.com>
> 
> > To: Jetspeed Developers List <
> ymailto="mailto:jetspeed-dev@portals.apache.org" 
> href="mailto:jetspeed-dev@portals.apache.org">jetspeed-dev@portals.apache.org>
> 
> > Sent: Wed, May 12, 2010 1:49:01 PM
> > Subject: Re: Insufficient 
> Rights
> > 
> > This page has security 
> > 
> constraints
> 
> 
> <security-constraints-ref>euromaster-manager</security-constraints-ref>
> 
> 
> gaguilar 
> > (example) has role euromaster-manager...
> 
> 
> Why it performs as guest when 
> > even the toolbar it showing 
> the add
> button? Some parts of the system believe 
> > that is 
> gaguilar
> and others that's guest... Why?
> 
> 
> 
> 
> Contents of 
> > the page (all those portlets where added by 
> the user
> gaguilar without 
> > touching anything at all in the 
> portal config. The only
> thing that changed is 
> > that it was 
> some time ago):
> 
> 
> 
> <page 
> > 
> id="/Euromaster/euromaster-dashboard-page.psml" hidden="false">
>  
> 
> >  
> > <security-constraints>
> 
> 
> <security-constraints-ref>euromaster-manager</security-constraints-ref>
>  
> 
> >   </security-constraints>
>    
> <title>Euromaster 
> > Dashboards</title>
>  
>    <short-title>Euromaster 
> > 
> Dashboards</short-title>
>     <fragment 
> id="data-entry-01" 
> > type="layout"
> 
> name="jetspeed-layouts::VelocityTwoColumns">
>  
> 
> >       <fragment id="lead-search" 
> > 
> type="portlet"
> 
> name="crm-report-war::crm-report-chartviewer">
>  
> 
> >           <property name="row" 
> > 
> value="0"></property>
>            
> 
> > <property name="column" 
> value="0"></property>
>    
> >    
> </fragment>
>         <fragment 
> > 
> id="P-12888000f54-10003" 
> > type="portlet"
> 
> name="crm-report-war::crm-report-chartviewer">
>  
> 
> >           <property name="column" 
> > 
> value="1"></property>
>            
> 
> > <property name="row" 
> value="0"></property>
>      
> >  
> </fragment>
>         <fragment 
> > 
> id="P-128880f0d49-10004" 
> > type="portlet"
> 
> name="crm-report-war::crm-report-chartviewer">
>  
> 
> >           <property name="column" 
> > 
> value="0"></property>
>            
> 
> > <property name="row" 
> value="1"></property>
>      
> >  
> </fragment>
>         <fragment 
> > 
> id="P-128881849fe-10005" 
> > type="portlet"
> 
> name="crm-report-war::crm-report-chartviewer">
>  
> 
> >           <property name="column" 
> > 
> value="1"></property>
>            
> 
> > <property name="row" 
> value="1"></property>
>      
> >  
> </fragment>
>         <fragment 
> > 
> id="P-128881b2e5a-10006" 
> > type="portlet"
> 
> name="crm-report-war::crm-report-chartviewer">
>  
> 
> >           <property name="column" 
> > 
> value="0"></property>
>            
> 
> > <property name="row" 
> value="2"></property>
>      
> >  
> </fragment>
>         <fragment 
> > 
> id="P-128881ca359-10007" 
> > type="portlet"
> 
> name="crm-report-war::crm-report-chartviewer">
>  
> 
> >           <property name="column" 
> > 
> value="1"></property>
>            
> 
> > <property name="row" 
> value="2"></property>
>      
> >  
> </fragment>
>         <fragment 
> > 
> id="P-128882857fa-10008" 
> > type="portlet"
> 
> name="crm-report-war::crm-report-chartviewer">
>  
> 
> >           <property name="column" 
> > 
> value="0"></property>
>            
> 
> > <property name="row" 
> value="3"></property>
>      
> >  
> </fragment>
>         <fragment 
> > 
> id="P-128882bbdba-10009" 
> > type="portlet"
> 
> name="crm-report-war::crm-report-chartviewer">
>  
> 
> >           <property name="column" 
> > 
> value="1"></property>
>            
> 
> > <property name="row" 
> value="3"></property>
>      
> >  
> </fragment>
>     </fragment>
>    
> 
> > <metadata name="title" xml:lang="fr">Euromaster pane 
> 
> > de
> control</metadata>
>    
> <metadata name="title" 
> > xml:lang="es">Panel de 
> control
> Euromaster</metadata>
>  
> >  
> <defaults 
> > layout-decorator="level2crm"
> 
> portlet-decorator="jetspeed"></defaults>
> </page>
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> ____________________________________
> 
> 
> 
> 
> 
>  
> > Gonzalo Aguilar Delgado
>   Consultor 
> CRM - Ingeniero 
> > en
> Informática
>      
>    M. +34 
> > 607814276
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> El mié, 12-05-2010 a las 
> 13:17 
> > +0200, Gonzalo Aguilar Delgado escribió:
> > 
> 
> > /Euromaster/euromaster-dashboard-page.psml
> 
> 
> 
> 
> ---------------------------------------------------------------------
> To 
> 
> > unsubscribe, e-mail: 
> > ymailto="mailto:
> ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org" 
> 
> > href="mailto:
> ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org">
> ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> 
> For 
> > additional commands, e-mail: 
> > ymailto="mailto:
> ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org" 
> 
> > href="mailto:
> ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org">
> ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> 
> 
> 
>      
> 
> 
> ---------------------------------------------------------------------
> To 
> unsubscribe, e-mail: 
> ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> 
> For additional commands, e-mail: 
> ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> 
> 


---------------------------------------------------------------------
To 
> unsubscribe, e-mail: 
> ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
For 
> additional commands, e-mail: 
> ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org


      

---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Re: Insufficient Rights

Posted by Gonzalo Aguilar Delgado <ga...@aguilardelgado.com>.
See inline...


El mié, 12-05-2010 a las 05:09 -0700, Woonsan Ko escribió:
> Hi Gonzalo,
> 
> So, your problem seems like this:
> - The toolbox displayed ADD button because the user has proper access rights. 
	RIGHT
> - Sometimes, when the user tried to add a portlet into the page, the user meets security exceptions with the system logging "guest" user instead of the authenticated user name.
	RIGHT

> A possible cause is that a new session was created when the user tried to add a portlet for some reason.
	Yes. 
Maybe:
12.05.2010 14:46:04 DEBUG
[org.springframework.jdbc.datasource.DataSourceUtils.doReleaseConnection():312] Returning JDBC Connection to DataSource
12.05.2010 14:46:04 DEBUG
[org.springframework.transaction.support.AbstractPlatformTransactionManager.getTransaction():371] Creating new transaction with name [org.apache.jetspeed.security.spi.UserPasswordCredentialStorageManager.getPasswordCredential]: PROPAGATION_REQUIRED,ISOLATION_DEFAULT
...
12.05.2010 14:46:04 DEBUG
[org.springframework.orm.ojb.OjbFactoryUtils.releasePersistenceBroker():124] Closing OJB PersistenceBroker
12.05.2010 14:46:04 DEBUG
[org.springframework.jdbc.datasource.DataSourceUtils.doReleaseConnection():312] Returning JDBC Connection to DataSource
12.05.2010 14:46:04 DEBUG
[org.apache.jetspeed.localization.impl.LocalizationValveImpl.invoke():110] Got user principal: guest
12.05.2010 14:46:04 DEBUG
[org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean():214] Returning cached instance of singleton bean 'org.apache.jetspeed.security.UserManager'
12.05.2010 14:46:04 DEBUG
[org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.invoke():120] Request path: /Euromaster/euromaster-dashboard-page.psml
12.05.2010 14:46:04 DEBUG
[org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.valueBound():1786] Session bound event: setup page manager listener
12.05.2010 14:46:04 DEBUG
[org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.updateSessionProfileLocators():1252] Updated user/locators context: user=guest, profileLocators=(page=/Euromaster/euromaster-dashboard-page.psml:page:/Euromaster/e


It's getting wrong user because cached instance bean... But why?


> However, I cannot figure out the reasons more because the problem seems like your specific portal application issue to me.

But I'm using a clean jetspeed deployment via custom deployment but
changin only base layout. 

It must be there a problem in jetspeed but I'm unable to track down
because not an expert...


> 
> 
> Woonsan
> 
> 
> 
> ----- Original Message ----
> > From: Gonzalo Aguilar Delgado <ga...@aguilardelgado.com>
> > To: Jetspeed Developers List <je...@portals.apache.org>
> > Sent: Wed, May 12, 2010 1:49:01 PM
> > Subject: Re: Insufficient Rights
> > 
> > This page has security 
> > constraints
> 
> <security-constraints-ref>euromaster-manager</security-constraints-ref>
> 
> gaguilar 
> > (example) has role euromaster-manager...
> 
> Why it performs as guest when 
> > even the toolbar it showing the add
> button? Some parts of the system believe 
> > that is gaguilar
> and others that's guest... Why?
> 
> 
> 
> Contents of 
> > the page (all those portlets where added by the user
> gaguilar without 
> > touching anything at all in the portal config. The only
> thing that changed is 
> > that it was some time ago):
> 
> 
> 
> <page 
> > id="/Euromaster/euromaster-dashboard-page.psml" hidden="false">
>   
> >   
> > <security-constraints>
> 
> <security-constraints-ref>euromaster-manager</security-constraints-ref>
>   
> >   </security-constraints>
>     <title>Euromaster 
> > Dashboards</title>
>     <short-title>Euromaster 
> > Dashboards</short-title>
>     <fragment id="data-entry-01" 
> > type="layout"
> name="jetspeed-layouts::VelocityTwoColumns">
>   
> >       <fragment id="lead-search" 
> > type="portlet"
> name="crm-report-war::crm-report-chartviewer">
>   
> >           <property name="row" 
> > value="0"></property>
>             
> > <property name="column" value="0"></property>
>     
> >     </fragment>
>         <fragment 
> > id="P-12888000f54-10003" 
> > type="portlet"
> name="crm-report-war::crm-report-chartviewer">
>   
> >           <property name="column" 
> > value="1"></property>
>             
> > <property name="row" value="0"></property>
>       
> >   </fragment>
>         <fragment 
> > id="P-128880f0d49-10004" 
> > type="portlet"
> name="crm-report-war::crm-report-chartviewer">
>   
> >           <property name="column" 
> > value="0"></property>
>             
> > <property name="row" value="1"></property>
>       
> >   </fragment>
>         <fragment 
> > id="P-128881849fe-10005" 
> > type="portlet"
> name="crm-report-war::crm-report-chartviewer">
>   
> >           <property name="column" 
> > value="1"></property>
>             
> > <property name="row" value="1"></property>
>       
> >   </fragment>
>         <fragment 
> > id="P-128881b2e5a-10006" 
> > type="portlet"
> name="crm-report-war::crm-report-chartviewer">
>   
> >           <property name="column" 
> > value="0"></property>
>             
> > <property name="row" value="2"></property>
>       
> >   </fragment>
>         <fragment 
> > id="P-128881ca359-10007" 
> > type="portlet"
> name="crm-report-war::crm-report-chartviewer">
>   
> >           <property name="column" 
> > value="1"></property>
>             
> > <property name="row" value="2"></property>
>       
> >   </fragment>
>         <fragment 
> > id="P-128882857fa-10008" 
> > type="portlet"
> name="crm-report-war::crm-report-chartviewer">
>   
> >           <property name="column" 
> > value="0"></property>
>             
> > <property name="row" value="3"></property>
>       
> >   </fragment>
>         <fragment 
> > id="P-128882bbdba-10009" 
> > type="portlet"
> name="crm-report-war::crm-report-chartviewer">
>   
> >           <property name="column" 
> > value="1"></property>
>             
> > <property name="row" value="3"></property>
>       
> >   </fragment>
>     </fragment>
>     
> > <metadata name="title" xml:lang="fr">Euromaster pane 
> > de
> control</metadata>
>     <metadata name="title" 
> > xml:lang="es">Panel de control
> Euromaster</metadata>
>   
> >   <defaults 
> > layout-decorator="level2crm"
> portlet-decorator="jetspeed"></defaults>
> </page>
> 
> 
> 
> 
> 
> 
> 
> 
> ____________________________________
> 
> 
> 
> 
>   
> > Gonzalo Aguilar Delgado
>   Consultor CRM - Ingeniero 
> > en
> Informática
>         M. +34 
> > 607814276
> 
> 
> 
> 
> 
> 
> 
> 
> 
> El mié, 12-05-2010 a las 13:17 
> > +0200, Gonzalo Aguilar Delgado escribió:
> > 
> > /Euromaster/euromaster-dashboard-page.psml
> 
> 
> ---------------------------------------------------------------------
> To 
> > unsubscribe, e-mail: 
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> For 
> > additional commands, e-mail: 
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> 
> 
>       
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
> For additional commands, e-mail: jetspeed-dev-help@portals.apache.org
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Re: Insufficient Rights

Posted by Gonzalo Aguilar Delgado <ga...@aguilardelgado.com>.
I see this:;

12.05.2010 14:54:01 DEBUG
[org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.updateSessionProfileLocators():1252] Updated user/locators context: user=guest, profileLocators=(page=/Euromaster/euromaster-dashboard-page.psml:page:/Euromaster/euromaster-dashboard-page.psml:user:guest:mediatype:html)

I must check why this function got it as user guest...

What is this function for?



El mié, 12-05-2010 a las 05:09 -0700, Woonsan Ko escribió:
> Hi Gonzalo,
> 
> So, your problem seems like this:
> - The toolbox displayed ADD button because the user has proper access rights.
> - Sometimes, when the user tried to add a portlet into the page, the user meets security exceptions with the system logging "guest" user instead of the authenticated user name.
> 
> A possible cause is that a new session was created when the user tried to add a portlet for some reason.
> However, I cannot figure out the reasons more because the problem seems like your specific portal application issue to me.
> 
> 
> Woonsan
> 
> 
> 
> ----- Original Message ----
> > From: Gonzalo Aguilar Delgado <ga...@aguilardelgado.com>
> > To: Jetspeed Developers List <je...@portals.apache.org>
> > Sent: Wed, May 12, 2010 1:49:01 PM
> > Subject: Re: Insufficient Rights
> > 
> > This page has security 
> > constraints
> 
> <security-constraints-ref>euromaster-manager</security-constraints-ref>
> 
> gaguilar 
> > (example) has role euromaster-manager...
> 
> Why it performs as guest when 
> > even the toolbar it showing the add
> button? Some parts of the system believe 
> > that is gaguilar
> and others that's guest... Why?
> 
> 
> 
> Contents of 
> > the page (all those portlets where added by the user
> gaguilar without 
> > touching anything at all in the portal config. The only
> thing that changed is 
> > that it was some time ago):
> 
> 
> 
> <page 
> > id="/Euromaster/euromaster-dashboard-page.psml" hidden="false">
>   
> >   
> > <security-constraints>
> 
> <security-constraints-ref>euromaster-manager</security-constraints-ref>
>   
> >   </security-constraints>
>     <title>Euromaster 
> > Dashboards</title>
>     <short-title>Euromaster 
> > Dashboards</short-title>
>     <fragment id="data-entry-01" 
> > type="layout"
> name="jetspeed-layouts::VelocityTwoColumns">
>   
> >       <fragment id="lead-search" 
> > type="portlet"
> name="crm-report-war::crm-report-chartviewer">
>   
> >           <property name="row" 
> > value="0"></property>
>             
> > <property name="column" value="0"></property>
>     
> >     </fragment>
>         <fragment 
> > id="P-12888000f54-10003" 
> > type="portlet"
> name="crm-report-war::crm-report-chartviewer">
>   
> >           <property name="column" 
> > value="1"></property>
>             
> > <property name="row" value="0"></property>
>       
> >   </fragment>
>         <fragment 
> > id="P-128880f0d49-10004" 
> > type="portlet"
> name="crm-report-war::crm-report-chartviewer">
>   
> >           <property name="column" 
> > value="0"></property>
>             
> > <property name="row" value="1"></property>
>       
> >   </fragment>
>         <fragment 
> > id="P-128881849fe-10005" 
> > type="portlet"
> name="crm-report-war::crm-report-chartviewer">
>   
> >           <property name="column" 
> > value="1"></property>
>             
> > <property name="row" value="1"></property>
>       
> >   </fragment>
>         <fragment 
> > id="P-128881b2e5a-10006" 
> > type="portlet"
> name="crm-report-war::crm-report-chartviewer">
>   
> >           <property name="column" 
> > value="0"></property>
>             
> > <property name="row" value="2"></property>
>       
> >   </fragment>
>         <fragment 
> > id="P-128881ca359-10007" 
> > type="portlet"
> name="crm-report-war::crm-report-chartviewer">
>   
> >           <property name="column" 
> > value="1"></property>
>             
> > <property name="row" value="2"></property>
>       
> >   </fragment>
>         <fragment 
> > id="P-128882857fa-10008" 
> > type="portlet"
> name="crm-report-war::crm-report-chartviewer">
>   
> >           <property name="column" 
> > value="0"></property>
>             
> > <property name="row" value="3"></property>
>       
> >   </fragment>
>         <fragment 
> > id="P-128882bbdba-10009" 
> > type="portlet"
> name="crm-report-war::crm-report-chartviewer">
>   
> >           <property name="column" 
> > value="1"></property>
>             
> > <property name="row" value="3"></property>
>       
> >   </fragment>
>     </fragment>
>     
> > <metadata name="title" xml:lang="fr">Euromaster pane 
> > de
> control</metadata>
>     <metadata name="title" 
> > xml:lang="es">Panel de control
> Euromaster</metadata>
>   
> >   <defaults 
> > layout-decorator="level2crm"
> portlet-decorator="jetspeed"></defaults>
> </page>
> 
> 
> 
> 
> 
> 
> 
> 
> ____________________________________
> 
> 
> 
> 
>   
> > Gonzalo Aguilar Delgado
>   Consultor CRM - Ingeniero 
> > en
> Informática
>         M. +34 
> > 607814276
> 
> 
> 
> 
> 
> 
> 
> 
> 
> El mié, 12-05-2010 a las 13:17 
> > +0200, Gonzalo Aguilar Delgado escribió:
> > 
> > /Euromaster/euromaster-dashboard-page.psml
> 
> 
> ---------------------------------------------------------------------
> To 
> > unsubscribe, e-mail: 
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> For 
> > additional commands, e-mail: 
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> 
> 
>       
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
> For additional commands, e-mail: jetspeed-dev-help@portals.apache.org
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Re: Insufficient Rights

Posted by Woonsan Ko <wo...@yahoo.com>.
Hi Gonzalo,

So, your problem seems like this:
- The toolbox displayed ADD button because the user has proper access rights.
- Sometimes, when the user tried to add a portlet into the page, the user meets security exceptions with the system logging "guest" user instead of the authenticated user name.

A possible cause is that a new session was created when the user tried to add a portlet for some reason.
However, I cannot figure out the reasons more because the problem seems like your specific portal application issue to me.


Woonsan



----- Original Message ----
> From: Gonzalo Aguilar Delgado <ga...@aguilardelgado.com>
> To: Jetspeed Developers List <je...@portals.apache.org>
> Sent: Wed, May 12, 2010 1:49:01 PM
> Subject: Re: Insufficient Rights
> 
> This page has security 
> constraints

<security-constraints-ref>euromaster-manager</security-constraints-ref>

gaguilar 
> (example) has role euromaster-manager...

Why it performs as guest when 
> even the toolbar it showing the add
button? Some parts of the system believe 
> that is gaguilar
and others that's guest... Why?



Contents of 
> the page (all those portlets where added by the user
gaguilar without 
> touching anything at all in the portal config. The only
thing that changed is 
> that it was some time ago):



<page 
> id="/Euromaster/euromaster-dashboard-page.psml" hidden="false">
  
>   
> <security-constraints>

<security-constraints-ref>euromaster-manager</security-constraints-ref>
  
>   </security-constraints>
    <title>Euromaster 
> Dashboards</title>
    <short-title>Euromaster 
> Dashboards</short-title>
    <fragment id="data-entry-01" 
> type="layout"
name="jetspeed-layouts::VelocityTwoColumns">
  
>       <fragment id="lead-search" 
> type="portlet"
name="crm-report-war::crm-report-chartviewer">
  
>           <property name="row" 
> value="0"></property>
            
> <property name="column" value="0"></property>
    
>     </fragment>
        <fragment 
> id="P-12888000f54-10003" 
> type="portlet"
name="crm-report-war::crm-report-chartviewer">
  
>           <property name="column" 
> value="1"></property>
            
> <property name="row" value="0"></property>
      
>   </fragment>
        <fragment 
> id="P-128880f0d49-10004" 
> type="portlet"
name="crm-report-war::crm-report-chartviewer">
  
>           <property name="column" 
> value="0"></property>
            
> <property name="row" value="1"></property>
      
>   </fragment>
        <fragment 
> id="P-128881849fe-10005" 
> type="portlet"
name="crm-report-war::crm-report-chartviewer">
  
>           <property name="column" 
> value="1"></property>
            
> <property name="row" value="1"></property>
      
>   </fragment>
        <fragment 
> id="P-128881b2e5a-10006" 
> type="portlet"
name="crm-report-war::crm-report-chartviewer">
  
>           <property name="column" 
> value="0"></property>
            
> <property name="row" value="2"></property>
      
>   </fragment>
        <fragment 
> id="P-128881ca359-10007" 
> type="portlet"
name="crm-report-war::crm-report-chartviewer">
  
>           <property name="column" 
> value="1"></property>
            
> <property name="row" value="2"></property>
      
>   </fragment>
        <fragment 
> id="P-128882857fa-10008" 
> type="portlet"
name="crm-report-war::crm-report-chartviewer">
  
>           <property name="column" 
> value="0"></property>
            
> <property name="row" value="3"></property>
      
>   </fragment>
        <fragment 
> id="P-128882bbdba-10009" 
> type="portlet"
name="crm-report-war::crm-report-chartviewer">
  
>           <property name="column" 
> value="1"></property>
            
> <property name="row" value="3"></property>
      
>   </fragment>
    </fragment>
    
> <metadata name="title" xml:lang="fr">Euromaster pane 
> de
control</metadata>
    <metadata name="title" 
> xml:lang="es">Panel de control
Euromaster</metadata>
  
>   <defaults 
> layout-decorator="level2crm"
portlet-decorator="jetspeed"></defaults>
</page>








____________________________________




  
> Gonzalo Aguilar Delgado
  Consultor CRM - Ingeniero 
> en
Informática
        M. +34 
> 607814276









El mié, 12-05-2010 a las 13:17 
> +0200, Gonzalo Aguilar Delgado escribió:
> 
> /Euromaster/euromaster-dashboard-page.psml


---------------------------------------------------------------------
To 
> unsubscribe, e-mail: 
> ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
For 
> additional commands, e-mail: 
> ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org


      

---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Re: Insufficient Rights

Posted by Gonzalo Aguilar Delgado <ga...@aguilardelgado.com>.
This page has security constraints

<security-constraints-ref>euromaster-manager</security-constraints-ref>

gaguilar (example) has role euromaster-manager...

Why it performs as guest when even the toolbar it showing the add
button? Some parts of the system believe that is gaguilar
and others that's guest... Why?



Contents of the page (all those portlets where added by the user
gaguilar without touching anything at all in the portal config. The only
thing that changed is that it was some time ago):



<page id="/Euromaster/euromaster-dashboard-page.psml" hidden="false">
    <security-constraints>

<security-constraints-ref>euromaster-manager</security-constraints-ref>
    </security-constraints>
    <title>Euromaster Dashboards</title>
    <short-title>Euromaster Dashboards</short-title>
    <fragment id="data-entry-01" type="layout"
name="jetspeed-layouts::VelocityTwoColumns">
        <fragment id="lead-search" type="portlet"
name="crm-report-war::crm-report-chartviewer">
            <property name="row" value="0"></property>
            <property name="column" value="0"></property>
        </fragment>
        <fragment id="P-12888000f54-10003" type="portlet"
name="crm-report-war::crm-report-chartviewer">
            <property name="column" value="1"></property>
            <property name="row" value="0"></property>
        </fragment>
        <fragment id="P-128880f0d49-10004" type="portlet"
name="crm-report-war::crm-report-chartviewer">
            <property name="column" value="0"></property>
            <property name="row" value="1"></property>
        </fragment>
        <fragment id="P-128881849fe-10005" type="portlet"
name="crm-report-war::crm-report-chartviewer">
            <property name="column" value="1"></property>
            <property name="row" value="1"></property>
        </fragment>
        <fragment id="P-128881b2e5a-10006" type="portlet"
name="crm-report-war::crm-report-chartviewer">
            <property name="column" value="0"></property>
            <property name="row" value="2"></property>
        </fragment>
        <fragment id="P-128881ca359-10007" type="portlet"
name="crm-report-war::crm-report-chartviewer">
            <property name="column" value="1"></property>
            <property name="row" value="2"></property>
        </fragment>
        <fragment id="P-128882857fa-10008" type="portlet"
name="crm-report-war::crm-report-chartviewer">
            <property name="column" value="0"></property>
            <property name="row" value="3"></property>
        </fragment>
        <fragment id="P-128882bbdba-10009" type="portlet"
name="crm-report-war::crm-report-chartviewer">
            <property name="column" value="1"></property>
            <property name="row" value="3"></property>
        </fragment>
    </fragment>
    <metadata name="title" xml:lang="fr">Euromaster pane de
control</metadata>
    <metadata name="title" xml:lang="es">Panel de control
Euromaster</metadata>
    <defaults layout-decorator="level2crm"
portlet-decorator="jetspeed"></defaults>
</page>








____________________________________




  Gonzalo Aguilar Delgado
  Consultor CRM - Ingeniero en
Informática
        M. +34 607814276









El mié, 12-05-2010 a las 13:17 +0200, Gonzalo Aguilar Delgado escribió:
> /Euromaster/euromaster-dashboard-page.psml


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Re: Insufficient Rights

Posted by Gonzalo Aguilar Delgado <ga...@aguilardelgado.com>.
Hi Woonsan, 

But the problem is other. 

Guest should not have edit access to the default-page.psml. That's
right. 

But the problem is that the user gaguilar (for example) is logged in. It
has access to go to the Euromaster space.
It also can go to the page /Euromaster/euromaster-dashboard-page.psml

And it's there where it has access to edit that page. And also it's what
we are trying. 

We are trying to add a new portlet under this page
(/Euromaster/euromaster-dashboard-page.psml) with the user gaguilar
(exmpl)
that is logged in and has the rights to do it. 


And it works most of time. What's is strange is that the system is
trying to do other thing... Don't know why...

Do I explain myself?







____________________________________




  Gonzalo Aguilar Delgado
  Consultor CRM - Ingeniero en
Informática
        M. +34 607814276









El mié, 12-05-2010 a las 04:22 -0700, Woonsan Ko escribió:
> Hi Gonzalo,
> 
> Do you think the user guest does have EDIT access on the default-page.psml?
> If not, I think the ADD button shouldn't be displayed in toolbox because the JetspeedToolbox portlet uses the same logic by using ContentPage#checkAccess().
> 
> Woonsan
> 
> 
> ----- Original Message ----
> > From: Gonzalo Aguilar Delgado <ga...@aguilardelgado.com>
> > To: Jetspeed Developers List <je...@portals.apache.org>
> > Sent: Wed, May 12, 2010 1:17:23 PM
> > Subject: Re: Insufficient Rights
> > 
> > Hi Woosan, 
> 
> This is the line. It says user guest but it was logged in... 
> > So what's
> the reason?
> 
> 12.05.2010 13:14:48 
> > WARN
> [org.apache.jetspeed.layout.impl.PortletActionSecurityConstraintsBehavior.checkAccess():72] 
> > Insufficient access to page /default-page.psml by user guest
> 
> I attach 
> > complete log:
> 
> 
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage():534] 
> > Missing/forbidden page selection fallback: request 
> > path=/Euromaster/euromaster-dashboard-page.psml, attempting fallback request 
> > path=/Euromaster
> java.lang.SecurityException: 
> > SecurityConstraintsImpl.checkConstraints():
> Access for view not 
> > permitted.
>     at
> 
> > href="http://org.apache.jetspeed.om.page.psml.SecurityConstraintsImpl.ch">org.apache.jetspeed.om.page.psml.SecurityConstraintsImpl.checkConstraints(SecurityConstraintsImpl.java:227)
>     
> > at
> org.apache.jetspeed.page.document.psml.AbstractNode.checkConstraints(AbstractNode.java:424)
>     
> > at
> 
> > href="http://org.apache.jetspeed.om.page.psml.AbstractBaseElement.ch">org.apache.jetspeed.om.page.psml.AbstractBaseElement.checkConstraints(AbstractBaseElement.java:313)
>     
> > at
> org.apache.jetspeed.om.page.psml.AbstractBaseElement.checkAccess(AbstractBaseElement.java:506)
>     
> > at
> 
> > href="http://org.apache.jetspeed.om.folder.psml.FolderImpl.ge">org.apache.jetspeed.om.folder.psml.FolderImpl.getFolder(FolderImpl.java:260)
>     
> > at
> org.apache.jetspeed.om.folder.psml.FolderImpl.getFolder(FolderImpl.java:273)
>     
> > at
> 
> > href="http://org.apache.jetspeed.om.folder.proxy.FolderProxy.ch">org.apache.jetspeed.om.folder.proxy.FolderProxy.checkAccessToNodeNotFound(FolderProxy.java:838)
>     
> > at
> org.apache.jetspeed.portalsite.view.SearchPathsSiteView.checkAccessToNodeNotFound(SearchPathsSiteView.java:608)
>     
> > at
> org.apache.jetspeed.portalsite.view.AbstractSiteView.getNodeView(AbstractSiteView.java:250)
>     
> > at
> org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:697)
>     
> > at
> org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:488)
>     
> > at
> org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:295)
>     
> > at
> org.apache.jetspeed.portalsite.impl.PortalSiteRequestContextImpl.getPage(PortalSiteRequestContextImpl.java:382)
>     
> > at
> org.apache.jetspeed.portalsite.impl.PortalSiteRequestContextImpl.getManagedPage(PortalSiteRequestContextImpl.java:301)
>     
> > at
> org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.setRequestPage(AbstractPageValveImpl.java:238)
>     
> > at
> org.apache.jetspeed.profiler.impl.ProfilerValveImpl.setRequestPage(ProfilerValveImpl.java:180)
>     
> > at
> org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.invoke(AbstractPageValveImpl.java:124)
>     
> > at 
> > org.apache.jetspeed.pipeline.JetspeedPipeline
> $Invocation.invokeNext(JetspeedPipeline.java:242)
>     
> > at
> org.apache.jetspeed.localization.impl.LocalizationValveImpl.invoke(LocalizationValveImpl.java:170)
>     
> > at 
> > org.apache.jetspeed.pipeline.JetspeedPipeline
> $Invocation.invokeNext(JetspeedPipeline.java:242)
>     
> > at 
> > org.apache.jetspeed.security.impl.AbstractSecurityValve
> $1.run(AbstractSecurityValve.java:138)
>     
> > at java.security.AccessController.doPrivileged(Native 
> > Method)
>     at 
> > javax.security.auth.Subject.doAsPrivileged(Subject.java:474)
>     
> > at
> org.apache.jetspeed.security.JSSubject.doAsPrivileged(JSSubject.java:179)
>     
> > at
> org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:132)
>     
> > at 
> > org.apache.jetspeed.pipeline.JetspeedPipeline
> $Invocation.invokeNext(JetspeedPipeline.java:242)
>     
> > at
> org.apache.jetspeed.container.url.impl.PortalURLValveImpl.invoke(PortalURLValveImpl.java:88)
>     
> > at 
> > org.apache.jetspeed.pipeline.JetspeedPipeline
> $Invocation.invokeNext(JetspeedPipeline.java:242)
>     
> > at
> org.apache.jetspeed.capabilities.impl.CapabilityValveImpl.invoke(CapabilityValveImpl.java:127)
>     
> > at 
> > org.apache.jetspeed.pipeline.JetspeedPipeline
> $Invocation.invokeNext(JetspeedPipeline.java:242)
>     
> > at
> org.apache.jetspeed.pipeline.JetspeedPipeline.invoke(JetspeedPipeline.java:163)
>     
> > at
> org.apache.jetspeed.engine.JetspeedEngine.service(JetspeedEngine.java:225)
>     
> > at
> org.apache.jetspeed.engine.JetspeedServlet.invoke(JetspeedServlet.java:300)
>     
> > at
> org.apache.jetspeed.engine.JetspeedServlet.service(JetspeedServlet.java:318)
>     
> > at 
> > javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
>     
> > at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
>     
> > at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>     
> > at
> org.apache.jetspeed.engine.servlet.XXSUrlAttackFilter.doFilter(XXSUrlAttackFilter.java:52)
>     
> > at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
>     
> > at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>     
> > at
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
>     
> > at
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
>     
> > at
> org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:433)
>     
> > at
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
>     
> > at
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
>     
> > at
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
>     
> > at
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
>     
> > at
> org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190)
>     
> > at 
> > org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291)
>     
> > at 
> > org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:769)
>     
> > at
> org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:698)
>     
> > at 
> > org.apache.jk.common.ChannelSocket
> $SocketConnection.runIt(ChannelSocket.java:891)
>     
> > at 
> > org.apache.tomcat.util.threads.ThreadPool
> $ControlRunnable.run(ThreadPool.java:690)
>     
> > at java.lang.Thread.run(Thread.java:636)
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage():687] 
> > Request page: request path=/Euromaster
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage():534] 
> > Missing/forbidden page selection fallback: request path=/Euromaster, attempting 
> > fallback request path=/
> java.lang.SecurityException: 
> > SecurityConstraintsImpl.checkConstraints():
> Access for view not 
> > permitted.
>     
> > at
> org.apache.jetspeed.om.page.psml.SecurityConstraintsImpl.checkConstraints(SecurityConstraintsImpl.java:227)
>     
> > at
> org.apache.jetspeed.page.document.psml.AbstractNode.checkConstraints(AbstractNode.java:424)
>     
> > at
> org.apache.jetspeed.om.page.psml.AbstractBaseElement.checkConstraints(AbstractBaseElement.java:313)
>     
> > at
> org.apache.jetspeed.om.page.psml.AbstractBaseElement.checkAccess(AbstractBaseElement.java:506)
>     
> > at
> org.apache.jetspeed.om.folder.psml.FolderImpl.getFolder(FolderImpl.java:260)
>     
> > at
> org.apache.jetspeed.om.folder.psml.FolderImpl.getFolder(FolderImpl.java:273)
>     
> > at
> org.apache.jetspeed.om.folder.proxy.FolderProxy.checkAccessToNodeNotFound(FolderProxy.java:838)
>     
> > at
> org.apache.jetspeed.portalsite.view.SearchPathsSiteView.checkAccessToNodeNotFound(SearchPathsSiteView.java:608)
>     
> > at
> org.apache.jetspeed.portalsite.view.AbstractSiteView.getNodeView(AbstractSiteView.java:284)
>     
> > at
> org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:697)
>     
> > at
> org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:488)
>     
> > at
> org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:295)
>     
> > at
> org.apache.jetspeed.portalsite.impl.PortalSiteRequestContextImpl.getPage(PortalSiteRequestContextImpl.java:382)
>     
> > at
> org.apache.jetspeed.portalsite.impl.PortalSiteRequestContextImpl.getManagedPage(PortalSiteRequestContextImpl.java:301)
>     
> > at
> org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.setRequestPage(AbstractPageValveImpl.java:238)
>     
> > at
> org.apache.jetspeed.profiler.impl.ProfilerValveImpl.setRequestPage(ProfilerValveImpl.java:180)
>     
> > at
> org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.invoke(AbstractPageValveImpl.java:124)
>     
> > at 
> > org.apache.jetspeed.pipeline.JetspeedPipeline
> $Invocation.invokeNext(JetspeedPipeline.java:242)
>     
> > at
> org.apache.jetspeed.localization.impl.LocalizationValveImpl.invoke(LocalizationValveImpl.java:170)
>     
> > at 
> > org.apache.jetspeed.pipeline.JetspeedPipeline
> $Invocation.invokeNext(JetspeedPipeline.java:242)
>     
> > at 
> > org.apache.jetspeed.security.impl.AbstractSecurityValve
> $1.run(AbstractSecurityValve.java:138)
>     
> > at java.security.AccessController.doPrivileged(Native 
> > Method)
>     at 
> > javax.security.auth.Subject.doAsPrivileged(Subject.java:474)
>     
> > at
> org.apache.jetspeed.security.JSSubject.doAsPrivileged(JSSubject.java:179)
>     
> > at
> org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:132)
>     
> > at 
> > org.apache.jetspeed.pipeline.JetspeedPipeline
> $Invocation.invokeNext(JetspeedPipeline.java:242)
>     
> > at
> org.apache.jetspeed.container.url.impl.PortalURLValveImpl.invoke(PortalURLValveImpl.java:88)
>     
> > at 
> > org.apache.jetspeed.pipeline.JetspeedPipeline
> $Invocation.invokeNext(JetspeedPipeline.java:242)
>     
> > at
> org.apache.jetspeed.capabilities.impl.CapabilityValveImpl.invoke(CapabilityValveImpl.java:127)
>     
> > at 
> > org.apache.jetspeed.pipeline.JetspeedPipeline
> $Invocation.invokeNext(JetspeedPipeline.java:242)
>     
> > at
> org.apache.jetspeed.pipeline.JetspeedPipeline.invoke(JetspeedPipeline.java:163)
>     
> > at
> org.apache.jetspeed.engine.JetspeedEngine.service(JetspeedEngine.java:225)
>     
> > at
> org.apache.jetspeed.engine.JetspeedServlet.invoke(JetspeedServlet.java:300)
>     
> > at
> org.apache.jetspeed.engine.JetspeedServlet.service(JetspeedServlet.java:318)
>     
> > at 
> > javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
>     
> > at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
>     
> > at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>     
> > at
> org.apache.jetspeed.engine.servlet.XXSUrlAttackFilter.doFilter(XXSUrlAttackFilter.java:52)
>     
> > at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
>     
> > at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>     
> > at
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
>     
> > at
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
>     
> > at
> org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:433)
>     
> > at
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
>     
> > at
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
>     
> > at
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
>     
> > at
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
>     
> > at
> org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190)
>     
> > at 
> > org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291)
>     
> > at 
> > org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:769)
>     
> > at
> org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:698)
>     
> > at 
> > org.apache.jk.common.ChannelSocket
> $SocketConnection.runIt(ChannelSocket.java:891)
>     
> > at 
> > org.apache.tomcat.util.threads.ThreadPool
> $ControlRunnable.run(ThreadPool.java:690)
>     
> > at java.lang.Thread.run(Thread.java:636)
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage():687] 
> > Request page: request path=/
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage():856] 
> > Selected folder default page: path=/default-page.psml
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentPage():548] 
> > PageLayoutComponentImpl.newContentPage(): construct ContentPage: 
> > id=/default-page.psml, path=/default-page.psml
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> > PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> > id=template-top2__jsSpaceNavigator, name=j2-admin::SpaceNavigator, 
> > locked=true
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> > PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> > id=template-top2__jstbLeft__jsPageNavigator, name=j2-admin::PageNavigator, 
> > locked=true
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> > PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> > id=template-top2__jstbLeft, name=jetspeed-layouts::VelocityOneColumn, 
> > locked=true
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> > PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> > id=template-top2__page-template__dp-1__dp-12, name=j2-admin::LoginPortlet, 
> > locked=false
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> > PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> > id=template-top2__page-template__dp-1__dp-22, 
> > name=j2-admin::ForgottenPasswordPortlet, locked=false
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> > PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> > id=template-top2__page-template__dp-1__dp-3, name=j2-admin::LocaleSelector, 
> > locked=false
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> > PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> > id=template-top2__page-template__dp-1, 
> > name=jetspeed-layouts::VelocityTwoColumns, locked=false
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> > PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> > id=template-top2__jstbRight__jsToolbox, name=j2-admin::JetspeedToolbox, 
> > locked=true
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> > PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> > id=template-top2__jstbRight, name=jetspeed-layouts::VelocityOneColumn, 
> > locked=true
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> > PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> > id=template-top2, name=jetspeed-layouts::VelocityThreeColumns, 
> > locked=true
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentPage():574] 
> > PageLayoutComponentImpl.newContentPage(): constructed ContentPage: 
> > id=/default-page.psml
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.invoke():132] 
> > Page path: /default-page.psml
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for layout.level2crm
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/layout/level2crm
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/layout/level2crm/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for portlet.clear
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/portlet/clear
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/portlet/clear/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for layout.clear
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/layout/clear
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/layout/clear/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for portlet.jetspeed
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/portlet/jetspeed
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/portlet/jetspeed/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for layout.clear
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/layout/clear
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/layout/clear/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for portlet.jetspeed
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/portlet/jetspeed
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/portlet/jetspeed/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for portlet.jetspeed
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/portlet/jetspeed
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/portlet/jetspeed/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for portlet.jetspeed
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/portlet/jetspeed
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/portlet/jetspeed/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for layout.clear
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/layout/clear
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/layout/clear/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for portlet.jetspeed
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/portlet/jetspeed
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/portlet/jetspeed/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for portlet.level2crm
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/portlet/level2crm
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/portlet/level2crm/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionNameCacheCache: 
> > portletDefinitionNameCacheMemoryStore
> hit for 
> > j2-admin::SpaceNavigator
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionOidCacheCache: 
> > portletDefinitionOidCacheMemoryStore hit
> for 
> > href="http://org.apache.jetspeed.om">org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{724}
> 12.05.2010 
> > 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionNameCacheCache: 
> > portletDefinitionNameCacheMemoryStore
> hit for 
> > j2-admin::PageNavigator
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionOidCacheCache: 
> > portletDefinitionOidCacheMemoryStore hit
> for 
> > org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{725}
> 12.05.2010 
> > 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionNameCacheCache: 
> > portletDefinitionNameCacheMemoryStore
> hit for 
> > jetspeed-layouts::VelocityOneColumn
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionOidCacheCache: 
> > portletDefinitionOidCacheMemoryStore hit
> for 
> > org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{731}
> 12.05.2010 
> > 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionNameCacheCache: 
> > portletDefinitionNameCacheMemoryStore
> hit for 
> > j2-admin::LoginPortlet
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionOidCacheCache: 
> > portletDefinitionOidCacheMemoryStore hit
> for 
> > org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{650}
> 12.05.2010 
> > 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionNameCacheCache: 
> > portletDefinitionNameCacheMemoryStore
> hit for 
> > j2-admin::ForgottenPasswordPortlet
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionOidCacheCache: 
> > portletDefinitionOidCacheMemoryStore hit
> for 
> > org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{659}
> 12.05.2010 
> > 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionNameCacheCache: 
> > portletDefinitionNameCacheMemoryStore
> hit for 
> > j2-admin::LocaleSelector
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionOidCacheCache: 
> > portletDefinitionOidCacheMemoryStore hit
> for 
> > org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{657}
> 12.05.2010 
> > 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionNameCacheCache: 
> > portletDefinitionNameCacheMemoryStore
> hit for 
> > jetspeed-layouts::VelocityTwoColumns
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionOidCacheCache: 
> > portletDefinitionOidCacheMemoryStore hit
> for 
> > org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{733}
> 12.05.2010 
> > 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionNameCacheCache: 
> > portletDefinitionNameCacheMemoryStore
> hit for 
> > j2-admin::JetspeedToolbox
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionOidCacheCache: 
> > portletDefinitionOidCacheMemoryStore hit
> for 
> > org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{722}
> 12.05.2010 
> > 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionNameCacheCache: 
> > portletDefinitionNameCacheMemoryStore
> hit for 
> > jetspeed-layouts::VelocityOneColumn
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionOidCacheCache: 
> > portletDefinitionOidCacheMemoryStore hit
> for 
> > org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{731}
> 12.05.2010 
> > 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionNameCacheCache: 
> > portletDefinitionNameCacheMemoryStore
> hit for 
> > jetspeed-layouts::VelocityThreeColumns
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionOidCacheCache: 
> > portletDefinitionOidCacheMemoryStore hit
> for 
> > org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{735}
> 12.05.2010 
> > 13:14:48 
> > WARN
> [org.apache.jetspeed.layout.impl.PortletActionSecurityConstraintsBehavior.checkAccess():72] 
> > Insufficient access to page /default-page.psml by user 
> > guest
> 
> 
> 
> 
> 
> 
> 
> 
> ____________________________________
> 
> 
> 
> 
>   
> > Gonzalo Aguilar Delgado
>   Consultor CRM - Ingeniero 
> > en
> Informática
>         M. +34 
> > 607814276
> 
> 
> 
> 
> 
> 
> 
> 
> 
> El mié, 12-05-2010 a las 03:10 
> > -0700, Woonsan Ko escribió:
> > If you set the log level to WARN for 
> > org.apache.jetspeed.layout.impl.PortletActionSecurityConstraintsBehavior, then I 
> > think you should get the following warning logs for the case:
> > 
> > 
> > log.warn("Insufficient access to page " + page.getPath() + " by user " + 
> > userName);
> > 
> > This log could be helpful to detect the 
> > problem.
> > 
> > Woonsan
> > 
> > 
> > ----- Original 
> > Message ----
> > > From: Gonzalo Aguilar Delgado <
> > ymailto="mailto:gaguilar@aguilardelgado.com" 
> > href="mailto:gaguilar@aguilardelgado.com">gaguilar@aguilardelgado.com>
> > 
> > > To: Jetspeed Developers List <
> > ymailto="mailto:jetspeed-dev@portals.apache.org" 
> > href="mailto:jetspeed-dev@portals.apache.org">jetspeed-dev@portals.apache.org>
> > 
> > > Sent: Wed, May 12, 2010 11:15:47 AM
> > > Subject: Re: Insufficient 
> > Rights
> > > 
> > > Curious thing about this is that Toolbox 
> > portlet shows the "Add" button
> > on 
> > > portlets because the 
> > user has rights but when you add a new portlet
> > to the 
> > > page 
> > the message is:
> > 
> > 12-may-2010 
> > > 11:13:24
> > 
> > org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper 
> > > 
> > toResponse
> > ADVERTENCIA: WebApplicationException has been caught : 
> > 
> > > Insufficient
> > access to view page
> > 
> > 
> > 
> > I can say that rights are there 
> > > right...
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > ____________________________________
> > 
> > 
> > 
> > 
> > 
> >  
> > > Gonzalo Aguilar Delgado
> >   Consultor 
> > CRM - Ingeniero 
> > > en
> > Informática
> >      
> >    M. +34 
> > > 607814276
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > El mié, 12-05-2010 a las 
> > 11:08 
> > > +0200, Gonzalo Aguilar Delgado escribió:
> > > Hi 
> > all, 
> > > 
> > > After 
> > > working for a while with 
> > jetspeed I started to receive following
> > > 
> > > 
> > logs...
> > > 
> > > 
> > > 12-may-2010 10:51:36
> > 
> > > 
> > > org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper 
> > toResponse
> > > 
> > > ADVERTENCIA: WebApplicationException has 
> > been caught : Insufficient
> > > 
> > > access to view 
> > page
> > > 12-may-2010 10:51:49
> > > 
> > > 
> > org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> > > 
> > 
> > > ADVERTENCIA: WebApplicationException has been caught : 
> > Insufficient
> > > 
> > > access to view page
> > > 
> > 12-may-2010 10:51:54
> > > 
> > > 
> > org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> > > 
> > 
> > > ADVERTENCIA: WebApplicationException has been caught : 
> > Insufficient
> > > 
> > > access to view page
> > > 
> > 12-may-2010 10:52:11
> > > 
> > > 
> > org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> > > 
> > 
> > > ADVERTENCIA: WebApplicationException has been caught : 
> > Insufficient
> > > 
> > > access to view page
> > > 
> > 
> > > 
> > > This causes user to lose 
> > > permissions. 
> > And I don't find a reason why.
> > > Logs only shows that.  
> > 
> > > 
> > > 
> > > 
> > > Now I'm deleting old logs and 
> > rebooting tomcat to see 
> > > if I can have a
> > > clearer 
> > cause. 
> > > 
> > > Sometimes it starts to 
> > > work 
> > normally without human intervention.
> > > 
> > > 
> > > 
> > Does anyone 
> > > suffer of the same problem?
> > > 
> > > 
> > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > ____________________________________
> > > 
> > > 
> > > 
> > 
> > > 
> > > 
> > >   Gonzalo Aguilar Delgado
> > 
> > >   Consultor CRM - Ingeniero 
> > > en
> > > 
> > Informática
> > >         M. +34 
> > > 
> > 607814276
> > > 
> > > 
> > > 
> > > 
> > > 
> > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > 
> > > 
> > > 
> > > 
> > > 
> > ---------------------------------------------------------------------
> > 
> > > To 
> > > unsubscribe, e-mail: 
> > > ymailto="mailto:
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org" 
> > 
> > > href="mailto:
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org">
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> > 
> > > 
> > > For additional commands, e-mail: 
> > > 
> > ymailto="mailto:
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org" 
> > 
> > > href="mailto:
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org">
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> > 
> > > 
> > > 
> > 
> > 
> > 
> > ---------------------------------------------------------------------
> > To 
> > 
> > > unsubscribe, e-mail: 
> > > ymailto="mailto:
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org" 
> > 
> > > href="mailto:
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org">
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> > 
> > For 
> > > additional commands, e-mail: 
> > > ymailto="mailto:
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org" 
> > 
> > > href="mailto:
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org">
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> > 
> > 
> > 
> >      
> > 
> > 
> > ---------------------------------------------------------------------
> > To 
> > unsubscribe, e-mail: 
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> > 
> > For additional commands, e-mail: 
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> > 
> > 
> 
> 
> ---------------------------------------------------------------------
> To 
> > unsubscribe, e-mail: 
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> For 
> > additional commands, e-mail: 
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> 
> 
>       
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
> For additional commands, e-mail: jetspeed-dev-help@portals.apache.org
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Re: Insufficient Rights

Posted by Woonsan Ko <wo...@yahoo.com>.
Hi Gonzalo,

Do you think the user guest does have EDIT access on the default-page.psml?
If not, I think the ADD button shouldn't be displayed in toolbox because the JetspeedToolbox portlet uses the same logic by using ContentPage#checkAccess().

Woonsan


----- Original Message ----
> From: Gonzalo Aguilar Delgado <ga...@aguilardelgado.com>
> To: Jetspeed Developers List <je...@portals.apache.org>
> Sent: Wed, May 12, 2010 1:17:23 PM
> Subject: Re: Insufficient Rights
> 
> Hi Woosan, 

This is the line. It says user guest but it was logged in... 
> So what's
the reason?

12.05.2010 13:14:48 
> WARN
[org.apache.jetspeed.layout.impl.PortletActionSecurityConstraintsBehavior.checkAccess():72] 
> Insufficient access to page /default-page.psml by user guest

I attach 
> complete log:


12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage():534] 
> Missing/forbidden page selection fallback: request 
> path=/Euromaster/euromaster-dashboard-page.psml, attempting fallback request 
> path=/Euromaster
java.lang.SecurityException: 
> SecurityConstraintsImpl.checkConstraints():
Access for view not 
> permitted.
    at

> href="http://org.apache.jetspeed.om.page.psml.SecurityConstraintsImpl.ch">org.apache.jetspeed.om.page.psml.SecurityConstraintsImpl.checkConstraints(SecurityConstraintsImpl.java:227)
    
> at
org.apache.jetspeed.page.document.psml.AbstractNode.checkConstraints(AbstractNode.java:424)
    
> at

> href="http://org.apache.jetspeed.om.page.psml.AbstractBaseElement.ch">org.apache.jetspeed.om.page.psml.AbstractBaseElement.checkConstraints(AbstractBaseElement.java:313)
    
> at
org.apache.jetspeed.om.page.psml.AbstractBaseElement.checkAccess(AbstractBaseElement.java:506)
    
> at

> href="http://org.apache.jetspeed.om.folder.psml.FolderImpl.ge">org.apache.jetspeed.om.folder.psml.FolderImpl.getFolder(FolderImpl.java:260)
    
> at
org.apache.jetspeed.om.folder.psml.FolderImpl.getFolder(FolderImpl.java:273)
    
> at

> href="http://org.apache.jetspeed.om.folder.proxy.FolderProxy.ch">org.apache.jetspeed.om.folder.proxy.FolderProxy.checkAccessToNodeNotFound(FolderProxy.java:838)
    
> at
org.apache.jetspeed.portalsite.view.SearchPathsSiteView.checkAccessToNodeNotFound(SearchPathsSiteView.java:608)
    
> at
org.apache.jetspeed.portalsite.view.AbstractSiteView.getNodeView(AbstractSiteView.java:250)
    
> at
org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:697)
    
> at
org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:488)
    
> at
org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:295)
    
> at
org.apache.jetspeed.portalsite.impl.PortalSiteRequestContextImpl.getPage(PortalSiteRequestContextImpl.java:382)
    
> at
org.apache.jetspeed.portalsite.impl.PortalSiteRequestContextImpl.getManagedPage(PortalSiteRequestContextImpl.java:301)
    
> at
org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.setRequestPage(AbstractPageValveImpl.java:238)
    
> at
org.apache.jetspeed.profiler.impl.ProfilerValveImpl.setRequestPage(ProfilerValveImpl.java:180)
    
> at
org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.invoke(AbstractPageValveImpl.java:124)
    
> at 
> org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
    
> at
org.apache.jetspeed.localization.impl.LocalizationValveImpl.invoke(LocalizationValveImpl.java:170)
    
> at 
> org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
    
> at 
> org.apache.jetspeed.security.impl.AbstractSecurityValve
$1.run(AbstractSecurityValve.java:138)
    
> at java.security.AccessController.doPrivileged(Native 
> Method)
    at 
> javax.security.auth.Subject.doAsPrivileged(Subject.java:474)
    
> at
org.apache.jetspeed.security.JSSubject.doAsPrivileged(JSSubject.java:179)
    
> at
org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:132)
    
> at 
> org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
    
> at
org.apache.jetspeed.container.url.impl.PortalURLValveImpl.invoke(PortalURLValveImpl.java:88)
    
> at 
> org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
    
> at
org.apache.jetspeed.capabilities.impl.CapabilityValveImpl.invoke(CapabilityValveImpl.java:127)
    
> at 
> org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
    
> at
org.apache.jetspeed.pipeline.JetspeedPipeline.invoke(JetspeedPipeline.java:163)
    
> at
org.apache.jetspeed.engine.JetspeedEngine.service(JetspeedEngine.java:225)
    
> at
org.apache.jetspeed.engine.JetspeedServlet.invoke(JetspeedServlet.java:300)
    
> at
org.apache.jetspeed.engine.JetspeedServlet.service(JetspeedServlet.java:318)
    
> at 
> javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
    
> at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
    
> at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
    
> at
org.apache.jetspeed.engine.servlet.XXSUrlAttackFilter.doFilter(XXSUrlAttackFilter.java:52)
    
> at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
    
> at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
    
> at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
    
> at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
    
> at
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:433)
    
> at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
    
> at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
    
> at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
    
> at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
    
> at
org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190)
    
> at 
> org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291)
    
> at 
> org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:769)
    
> at
org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:698)
    
> at 
> org.apache.jk.common.ChannelSocket
$SocketConnection.runIt(ChannelSocket.java:891)
    
> at 
> org.apache.tomcat.util.threads.ThreadPool
$ControlRunnable.run(ThreadPool.java:690)
    
> at java.lang.Thread.run(Thread.java:636)
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage():687] 
> Request page: request path=/Euromaster
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage():534] 
> Missing/forbidden page selection fallback: request path=/Euromaster, attempting 
> fallback request path=/
java.lang.SecurityException: 
> SecurityConstraintsImpl.checkConstraints():
Access for view not 
> permitted.
    
> at
org.apache.jetspeed.om.page.psml.SecurityConstraintsImpl.checkConstraints(SecurityConstraintsImpl.java:227)
    
> at
org.apache.jetspeed.page.document.psml.AbstractNode.checkConstraints(AbstractNode.java:424)
    
> at
org.apache.jetspeed.om.page.psml.AbstractBaseElement.checkConstraints(AbstractBaseElement.java:313)
    
> at
org.apache.jetspeed.om.page.psml.AbstractBaseElement.checkAccess(AbstractBaseElement.java:506)
    
> at
org.apache.jetspeed.om.folder.psml.FolderImpl.getFolder(FolderImpl.java:260)
    
> at
org.apache.jetspeed.om.folder.psml.FolderImpl.getFolder(FolderImpl.java:273)
    
> at
org.apache.jetspeed.om.folder.proxy.FolderProxy.checkAccessToNodeNotFound(FolderProxy.java:838)
    
> at
org.apache.jetspeed.portalsite.view.SearchPathsSiteView.checkAccessToNodeNotFound(SearchPathsSiteView.java:608)
    
> at
org.apache.jetspeed.portalsite.view.AbstractSiteView.getNodeView(AbstractSiteView.java:284)
    
> at
org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:697)
    
> at
org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:488)
    
> at
org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:295)
    
> at
org.apache.jetspeed.portalsite.impl.PortalSiteRequestContextImpl.getPage(PortalSiteRequestContextImpl.java:382)
    
> at
org.apache.jetspeed.portalsite.impl.PortalSiteRequestContextImpl.getManagedPage(PortalSiteRequestContextImpl.java:301)
    
> at
org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.setRequestPage(AbstractPageValveImpl.java:238)
    
> at
org.apache.jetspeed.profiler.impl.ProfilerValveImpl.setRequestPage(ProfilerValveImpl.java:180)
    
> at
org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.invoke(AbstractPageValveImpl.java:124)
    
> at 
> org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
    
> at
org.apache.jetspeed.localization.impl.LocalizationValveImpl.invoke(LocalizationValveImpl.java:170)
    
> at 
> org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
    
> at 
> org.apache.jetspeed.security.impl.AbstractSecurityValve
$1.run(AbstractSecurityValve.java:138)
    
> at java.security.AccessController.doPrivileged(Native 
> Method)
    at 
> javax.security.auth.Subject.doAsPrivileged(Subject.java:474)
    
> at
org.apache.jetspeed.security.JSSubject.doAsPrivileged(JSSubject.java:179)
    
> at
org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:132)
    
> at 
> org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
    
> at
org.apache.jetspeed.container.url.impl.PortalURLValveImpl.invoke(PortalURLValveImpl.java:88)
    
> at 
> org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
    
> at
org.apache.jetspeed.capabilities.impl.CapabilityValveImpl.invoke(CapabilityValveImpl.java:127)
    
> at 
> org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
    
> at
org.apache.jetspeed.pipeline.JetspeedPipeline.invoke(JetspeedPipeline.java:163)
    
> at
org.apache.jetspeed.engine.JetspeedEngine.service(JetspeedEngine.java:225)
    
> at
org.apache.jetspeed.engine.JetspeedServlet.invoke(JetspeedServlet.java:300)
    
> at
org.apache.jetspeed.engine.JetspeedServlet.service(JetspeedServlet.java:318)
    
> at 
> javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
    
> at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
    
> at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
    
> at
org.apache.jetspeed.engine.servlet.XXSUrlAttackFilter.doFilter(XXSUrlAttackFilter.java:52)
    
> at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
    
> at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
    
> at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
    
> at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
    
> at
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:433)
    
> at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
    
> at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
    
> at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
    
> at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
    
> at
org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190)
    
> at 
> org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291)
    
> at 
> org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:769)
    
> at
org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:698)
    
> at 
> org.apache.jk.common.ChannelSocket
$SocketConnection.runIt(ChannelSocket.java:891)
    
> at 
> org.apache.tomcat.util.threads.ThreadPool
$ControlRunnable.run(ThreadPool.java:690)
    
> at java.lang.Thread.run(Thread.java:636)
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage():687] 
> Request page: request path=/
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage():856] 
> Selected folder default page: path=/default-page.psml
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentPage():548] 
> PageLayoutComponentImpl.newContentPage(): construct ContentPage: 
> id=/default-page.psml, path=/default-page.psml
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> id=template-top2__jsSpaceNavigator, name=j2-admin::SpaceNavigator, 
> locked=true
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> id=template-top2__jstbLeft__jsPageNavigator, name=j2-admin::PageNavigator, 
> locked=true
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> id=template-top2__jstbLeft, name=jetspeed-layouts::VelocityOneColumn, 
> locked=true
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> id=template-top2__page-template__dp-1__dp-12, name=j2-admin::LoginPortlet, 
> locked=false
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> id=template-top2__page-template__dp-1__dp-22, 
> name=j2-admin::ForgottenPasswordPortlet, locked=false
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> id=template-top2__page-template__dp-1__dp-3, name=j2-admin::LocaleSelector, 
> locked=false
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> id=template-top2__page-template__dp-1, 
> name=jetspeed-layouts::VelocityTwoColumns, locked=false
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> id=template-top2__jstbRight__jsToolbox, name=j2-admin::JetspeedToolbox, 
> locked=true
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> id=template-top2__jstbRight, name=jetspeed-layouts::VelocityOneColumn, 
> locked=true
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> id=template-top2, name=jetspeed-layouts::VelocityThreeColumns, 
> locked=true
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentPage():574] 
> PageLayoutComponentImpl.newContentPage(): constructed ContentPage: 
> id=/default-page.psml
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.invoke():132] 
> Page path: /default-page.psml
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore 
> hit for layout.level2crm
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration 
> basePath: /decorations/layout/level2crm
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration 
> baseClientPath: /decorations/layout/level2crm/html/es/ES
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore 
> hit for portlet.clear
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration 
> basePath: /decorations/portlet/clear
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration 
> baseClientPath: /decorations/portlet/clear/html/es/ES
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore 
> hit for layout.clear
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration 
> basePath: /decorations/layout/clear
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration 
> baseClientPath: /decorations/layout/clear/html/es/ES
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore 
> hit for portlet.jetspeed
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration 
> basePath: /decorations/portlet/jetspeed
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration 
> baseClientPath: /decorations/portlet/jetspeed/html/es/ES
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore 
> hit for layout.clear
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration 
> basePath: /decorations/layout/clear
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration 
> baseClientPath: /decorations/layout/clear/html/es/ES
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore 
> hit for portlet.jetspeed
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration 
> basePath: /decorations/portlet/jetspeed
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration 
> baseClientPath: /decorations/portlet/jetspeed/html/es/ES
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore 
> hit for portlet.jetspeed
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration 
> basePath: /decorations/portlet/jetspeed
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration 
> baseClientPath: /decorations/portlet/jetspeed/html/es/ES
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore 
> hit for portlet.jetspeed
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration 
> basePath: /decorations/portlet/jetspeed
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration 
> baseClientPath: /decorations/portlet/jetspeed/html/es/ES
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore 
> hit for layout.clear
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration 
> basePath: /decorations/layout/clear
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration 
> baseClientPath: /decorations/layout/clear/html/es/ES
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore 
> hit for portlet.jetspeed
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration 
> basePath: /decorations/portlet/jetspeed
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration 
> baseClientPath: /decorations/portlet/jetspeed/html/es/ES
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore 
> hit for portlet.level2crm
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration 
> basePath: /decorations/portlet/level2crm
12.05.2010 13:14:48 
> DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration 
> baseClientPath: /decorations/portlet/level2crm/html/es/ES
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionNameCacheCache: 
> portletDefinitionNameCacheMemoryStore
hit for 
> j2-admin::SpaceNavigator
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionOidCacheCache: 
> portletDefinitionOidCacheMemoryStore hit
for 
> href="http://org.apache.jetspeed.om">org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{724}
12.05.2010 
> 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionNameCacheCache: 
> portletDefinitionNameCacheMemoryStore
hit for 
> j2-admin::PageNavigator
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionOidCacheCache: 
> portletDefinitionOidCacheMemoryStore hit
for 
> org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{725}
12.05.2010 
> 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionNameCacheCache: 
> portletDefinitionNameCacheMemoryStore
hit for 
> jetspeed-layouts::VelocityOneColumn
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionOidCacheCache: 
> portletDefinitionOidCacheMemoryStore hit
for 
> org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{731}
12.05.2010 
> 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionNameCacheCache: 
> portletDefinitionNameCacheMemoryStore
hit for 
> j2-admin::LoginPortlet
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionOidCacheCache: 
> portletDefinitionOidCacheMemoryStore hit
for 
> org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{650}
12.05.2010 
> 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionNameCacheCache: 
> portletDefinitionNameCacheMemoryStore
hit for 
> j2-admin::ForgottenPasswordPortlet
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionOidCacheCache: 
> portletDefinitionOidCacheMemoryStore hit
for 
> org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{659}
12.05.2010 
> 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionNameCacheCache: 
> portletDefinitionNameCacheMemoryStore
hit for 
> j2-admin::LocaleSelector
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionOidCacheCache: 
> portletDefinitionOidCacheMemoryStore hit
for 
> org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{657}
12.05.2010 
> 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionNameCacheCache: 
> portletDefinitionNameCacheMemoryStore
hit for 
> jetspeed-layouts::VelocityTwoColumns
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionOidCacheCache: 
> portletDefinitionOidCacheMemoryStore hit
for 
> org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{733}
12.05.2010 
> 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionNameCacheCache: 
> portletDefinitionNameCacheMemoryStore
hit for 
> j2-admin::JetspeedToolbox
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionOidCacheCache: 
> portletDefinitionOidCacheMemoryStore hit
for 
> org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{722}
12.05.2010 
> 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionNameCacheCache: 
> portletDefinitionNameCacheMemoryStore
hit for 
> jetspeed-layouts::VelocityOneColumn
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionOidCacheCache: 
> portletDefinitionOidCacheMemoryStore hit
for 
> org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{731}
12.05.2010 
> 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionNameCacheCache: 
> portletDefinitionNameCacheMemoryStore
hit for 
> jetspeed-layouts::VelocityThreeColumns
12.05.2010 13:14:48 
> DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionOidCacheCache: 
> portletDefinitionOidCacheMemoryStore hit
for 
> org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{735}
12.05.2010 
> 13:14:48 
> WARN
[org.apache.jetspeed.layout.impl.PortletActionSecurityConstraintsBehavior.checkAccess():72] 
> Insufficient access to page /default-page.psml by user 
> guest








____________________________________




  
> Gonzalo Aguilar Delgado
  Consultor CRM - Ingeniero 
> en
Informática
        M. +34 
> 607814276









El mié, 12-05-2010 a las 03:10 
> -0700, Woonsan Ko escribió:
> If you set the log level to WARN for 
> org.apache.jetspeed.layout.impl.PortletActionSecurityConstraintsBehavior, then I 
> think you should get the following warning logs for the case:
> 
> 
> log.warn("Insufficient access to page " + page.getPath() + " by user " + 
> userName);
> 
> This log could be helpful to detect the 
> problem.
> 
> Woonsan
> 
> 
> ----- Original 
> Message ----
> > From: Gonzalo Aguilar Delgado <
> ymailto="mailto:gaguilar@aguilardelgado.com" 
> href="mailto:gaguilar@aguilardelgado.com">gaguilar@aguilardelgado.com>
> 
> > To: Jetspeed Developers List <
> ymailto="mailto:jetspeed-dev@portals.apache.org" 
> href="mailto:jetspeed-dev@portals.apache.org">jetspeed-dev@portals.apache.org>
> 
> > Sent: Wed, May 12, 2010 11:15:47 AM
> > Subject: Re: Insufficient 
> Rights
> > 
> > Curious thing about this is that Toolbox 
> portlet shows the "Add" button
> on 
> > portlets because the 
> user has rights but when you add a new portlet
> to the 
> > page 
> the message is:
> 
> 12-may-2010 
> > 11:13:24
> 
> org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper 
> > 
> toResponse
> ADVERTENCIA: WebApplicationException has been caught : 
> 
> > Insufficient
> access to view page
> 
> 
> 
> I can say that rights are there 
> > right...
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> ____________________________________
> 
> 
> 
> 
> 
>  
> > Gonzalo Aguilar Delgado
>   Consultor 
> CRM - Ingeniero 
> > en
> Informática
>      
>    M. +34 
> > 607814276
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> El mié, 12-05-2010 a las 
> 11:08 
> > +0200, Gonzalo Aguilar Delgado escribió:
> > Hi 
> all, 
> > 
> > After 
> > working for a while with 
> jetspeed I started to receive following
> > 
> > 
> logs...
> > 
> > 
> > 12-may-2010 10:51:36
> 
> > 
> > org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper 
> toResponse
> > 
> > ADVERTENCIA: WebApplicationException has 
> been caught : Insufficient
> > 
> > access to view 
> page
> > 12-may-2010 10:51:49
> > 
> > 
> org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> > 
> 
> > ADVERTENCIA: WebApplicationException has been caught : 
> Insufficient
> > 
> > access to view page
> > 
> 12-may-2010 10:51:54
> > 
> > 
> org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> > 
> 
> > ADVERTENCIA: WebApplicationException has been caught : 
> Insufficient
> > 
> > access to view page
> > 
> 12-may-2010 10:52:11
> > 
> > 
> org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> > 
> 
> > ADVERTENCIA: WebApplicationException has been caught : 
> Insufficient
> > 
> > access to view page
> > 
> 
> > 
> > This causes user to lose 
> > permissions. 
> And I don't find a reason why.
> > Logs only shows that.  
> 
> > 
> > 
> > 
> > Now I'm deleting old logs and 
> rebooting tomcat to see 
> > if I can have a
> > clearer 
> cause. 
> > 
> > Sometimes it starts to 
> > work 
> normally without human intervention.
> > 
> > 
> > 
> Does anyone 
> > suffer of the same problem?
> > 
> > 
> 
> > 
> > 
> > 
> > 
> > 
> 
> > 
> > 
> > 
> > 
> > 
> > 
> ____________________________________
> > 
> > 
> > 
> 
> > 
> > 
> >   Gonzalo Aguilar Delgado
> 
> >   Consultor CRM - Ingeniero 
> > en
> > 
> Informática
> >         M. +34 
> > 
> 607814276
> > 
> > 
> > 
> > 
> > 
> 
> > 
> > 
> > 
> > 
> > 
> 
> > 
> > 
> > 
> > 
> ---------------------------------------------------------------------
> 
> > To 
> > unsubscribe, e-mail: 
> > ymailto="mailto:
> ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org" 
> 
> > href="mailto:
> ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org">
> ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> 
> > 
> > For additional commands, e-mail: 
> > 
> ymailto="mailto:
> href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org" 
> 
> > href="mailto:
> ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org">
> ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> 
> > 
> > 
> 
> 
> 
> ---------------------------------------------------------------------
> To 
> 
> > unsubscribe, e-mail: 
> > ymailto="mailto:
> ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org" 
> 
> > href="mailto:
> ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org">
> ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> 
> For 
> > additional commands, e-mail: 
> > ymailto="mailto:
> ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org" 
> 
> > href="mailto:
> ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org">
> ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> 
> 
> 
>      
> 
> 
> ---------------------------------------------------------------------
> To 
> unsubscribe, e-mail: 
> ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> 
> For additional commands, e-mail: 
> ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> 
> 


---------------------------------------------------------------------
To 
> unsubscribe, e-mail: 
> ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
For 
> additional commands, e-mail: 
> ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org


      

---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Re: Insufficient Rights

Posted by Gonzalo Aguilar Delgado <ga...@aguilardelgado.com>.
Hi Woosan, 

This is the line. It says user guest but it was logged in... So what's
the reason?

12.05.2010 13:14:48 WARN
[org.apache.jetspeed.layout.impl.PortletActionSecurityConstraintsBehavior.checkAccess():72] Insufficient access to page /default-page.psml by user guest

I attach complete log:


12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage():534] Missing/forbidden page selection fallback: request path=/Euromaster/euromaster-dashboard-page.psml, attempting fallback request path=/Euromaster
java.lang.SecurityException: SecurityConstraintsImpl.checkConstraints():
Access for view not permitted.
	at
org.apache.jetspeed.om.page.psml.SecurityConstraintsImpl.checkConstraints(SecurityConstraintsImpl.java:227)
	at
org.apache.jetspeed.page.document.psml.AbstractNode.checkConstraints(AbstractNode.java:424)
	at
org.apache.jetspeed.om.page.psml.AbstractBaseElement.checkConstraints(AbstractBaseElement.java:313)
	at
org.apache.jetspeed.om.page.psml.AbstractBaseElement.checkAccess(AbstractBaseElement.java:506)
	at
org.apache.jetspeed.om.folder.psml.FolderImpl.getFolder(FolderImpl.java:260)
	at
org.apache.jetspeed.om.folder.psml.FolderImpl.getFolder(FolderImpl.java:273)
	at
org.apache.jetspeed.om.folder.proxy.FolderProxy.checkAccessToNodeNotFound(FolderProxy.java:838)
	at
org.apache.jetspeed.portalsite.view.SearchPathsSiteView.checkAccessToNodeNotFound(SearchPathsSiteView.java:608)
	at
org.apache.jetspeed.portalsite.view.AbstractSiteView.getNodeView(AbstractSiteView.java:250)
	at
org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:697)
	at
org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:488)
	at
org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:295)
	at
org.apache.jetspeed.portalsite.impl.PortalSiteRequestContextImpl.getPage(PortalSiteRequestContextImpl.java:382)
	at
org.apache.jetspeed.portalsite.impl.PortalSiteRequestContextImpl.getManagedPage(PortalSiteRequestContextImpl.java:301)
	at
org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.setRequestPage(AbstractPageValveImpl.java:238)
	at
org.apache.jetspeed.profiler.impl.ProfilerValveImpl.setRequestPage(ProfilerValveImpl.java:180)
	at
org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.invoke(AbstractPageValveImpl.java:124)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.localization.impl.LocalizationValveImpl.invoke(LocalizationValveImpl.java:170)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at org.apache.jetspeed.security.impl.AbstractSecurityValve
$1.run(AbstractSecurityValve.java:138)
	at java.security.AccessController.doPrivileged(Native Method)
	at javax.security.auth.Subject.doAsPrivileged(Subject.java:474)
	at
org.apache.jetspeed.security.JSSubject.doAsPrivileged(JSSubject.java:179)
	at
org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:132)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.container.url.impl.PortalURLValveImpl.invoke(PortalURLValveImpl.java:88)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.capabilities.impl.CapabilityValveImpl.invoke(CapabilityValveImpl.java:127)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.pipeline.JetspeedPipeline.invoke(JetspeedPipeline.java:163)
	at
org.apache.jetspeed.engine.JetspeedEngine.service(JetspeedEngine.java:225)
	at
org.apache.jetspeed.engine.JetspeedServlet.invoke(JetspeedServlet.java:300)
	at
org.apache.jetspeed.engine.JetspeedServlet.service(JetspeedServlet.java:318)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
	at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
	at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
	at
org.apache.jetspeed.engine.servlet.XXSUrlAttackFilter.doFilter(XXSUrlAttackFilter.java:52)
	at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
	at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
	at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
	at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
	at
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:433)
	at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
	at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
	at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
	at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
	at
org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190)
	at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291)
	at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:769)
	at
org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:698)
	at org.apache.jk.common.ChannelSocket
$SocketConnection.runIt(ChannelSocket.java:891)
	at org.apache.tomcat.util.threads.ThreadPool
$ControlRunnable.run(ThreadPool.java:690)
	at java.lang.Thread.run(Thread.java:636)
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage():687] Request page: request path=/Euromaster
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage():534] Missing/forbidden page selection fallback: request path=/Euromaster, attempting fallback request path=/
java.lang.SecurityException: SecurityConstraintsImpl.checkConstraints():
Access for view not permitted.
	at
org.apache.jetspeed.om.page.psml.SecurityConstraintsImpl.checkConstraints(SecurityConstraintsImpl.java:227)
	at
org.apache.jetspeed.page.document.psml.AbstractNode.checkConstraints(AbstractNode.java:424)
	at
org.apache.jetspeed.om.page.psml.AbstractBaseElement.checkConstraints(AbstractBaseElement.java:313)
	at
org.apache.jetspeed.om.page.psml.AbstractBaseElement.checkAccess(AbstractBaseElement.java:506)
	at
org.apache.jetspeed.om.folder.psml.FolderImpl.getFolder(FolderImpl.java:260)
	at
org.apache.jetspeed.om.folder.psml.FolderImpl.getFolder(FolderImpl.java:273)
	at
org.apache.jetspeed.om.folder.proxy.FolderProxy.checkAccessToNodeNotFound(FolderProxy.java:838)
	at
org.apache.jetspeed.portalsite.view.SearchPathsSiteView.checkAccessToNodeNotFound(SearchPathsSiteView.java:608)
	at
org.apache.jetspeed.portalsite.view.AbstractSiteView.getNodeView(AbstractSiteView.java:284)
	at
org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:697)
	at
org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:488)
	at
org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:295)
	at
org.apache.jetspeed.portalsite.impl.PortalSiteRequestContextImpl.getPage(PortalSiteRequestContextImpl.java:382)
	at
org.apache.jetspeed.portalsite.impl.PortalSiteRequestContextImpl.getManagedPage(PortalSiteRequestContextImpl.java:301)
	at
org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.setRequestPage(AbstractPageValveImpl.java:238)
	at
org.apache.jetspeed.profiler.impl.ProfilerValveImpl.setRequestPage(ProfilerValveImpl.java:180)
	at
org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.invoke(AbstractPageValveImpl.java:124)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.localization.impl.LocalizationValveImpl.invoke(LocalizationValveImpl.java:170)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at org.apache.jetspeed.security.impl.AbstractSecurityValve
$1.run(AbstractSecurityValve.java:138)
	at java.security.AccessController.doPrivileged(Native Method)
	at javax.security.auth.Subject.doAsPrivileged(Subject.java:474)
	at
org.apache.jetspeed.security.JSSubject.doAsPrivileged(JSSubject.java:179)
	at
org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:132)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.container.url.impl.PortalURLValveImpl.invoke(PortalURLValveImpl.java:88)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.capabilities.impl.CapabilityValveImpl.invoke(CapabilityValveImpl.java:127)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.pipeline.JetspeedPipeline.invoke(JetspeedPipeline.java:163)
	at
org.apache.jetspeed.engine.JetspeedEngine.service(JetspeedEngine.java:225)
	at
org.apache.jetspeed.engine.JetspeedServlet.invoke(JetspeedServlet.java:300)
	at
org.apache.jetspeed.engine.JetspeedServlet.service(JetspeedServlet.java:318)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
	at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
	at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
	at
org.apache.jetspeed.engine.servlet.XXSUrlAttackFilter.doFilter(XXSUrlAttackFilter.java:52)
	at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
	at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
	at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
	at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
	at
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:433)
	at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
	at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
	at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
	at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
	at
org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190)
	at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291)
	at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:769)
	at
org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:698)
	at org.apache.jk.common.ChannelSocket
$SocketConnection.runIt(ChannelSocket.java:891)
	at org.apache.tomcat.util.threads.ThreadPool
$ControlRunnable.run(ThreadPool.java:690)
	at java.lang.Thread.run(Thread.java:636)
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage():687] Request page: request path=/
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage():856] Selected folder default page: path=/default-page.psml
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentPage():548] PageLayoutComponentImpl.newContentPage(): construct ContentPage: id=/default-page.psml, path=/default-page.psml
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: id=template-top2__jsSpaceNavigator, name=j2-admin::SpaceNavigator, locked=true
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: id=template-top2__jstbLeft__jsPageNavigator, name=j2-admin::PageNavigator, locked=true
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: id=template-top2__jstbLeft, name=jetspeed-layouts::VelocityOneColumn, locked=true
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: id=template-top2__page-template__dp-1__dp-12, name=j2-admin::LoginPortlet, locked=false
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: id=template-top2__page-template__dp-1__dp-22, name=j2-admin::ForgottenPasswordPortlet, locked=false
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: id=template-top2__page-template__dp-1__dp-3, name=j2-admin::LocaleSelector, locked=false
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: id=template-top2__page-template__dp-1, name=jetspeed-layouts::VelocityTwoColumns, locked=false
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: id=template-top2__jstbRight__jsToolbox, name=j2-admin::JetspeedToolbox, locked=true
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: id=template-top2__jstbRight, name=jetspeed-layouts::VelocityOneColumn, locked=true
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: id=template-top2, name=jetspeed-layouts::VelocityThreeColumns, locked=true
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentPage():574] PageLayoutComponentImpl.newContentPage(): constructed ContentPage: id=/default-page.psml
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.invoke():132] Page path: /default-page.psml
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore hit for layout.level2crm
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration basePath: /decorations/layout/level2crm
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration baseClientPath: /decorations/layout/level2crm/html/es/ES
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore hit for portlet.clear
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration basePath: /decorations/portlet/clear
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration baseClientPath: /decorations/portlet/clear/html/es/ES
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore hit for layout.clear
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration basePath: /decorations/layout/clear
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration baseClientPath: /decorations/layout/clear/html/es/ES
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore hit for portlet.jetspeed
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration basePath: /decorations/portlet/jetspeed
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration baseClientPath: /decorations/portlet/jetspeed/html/es/ES
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore hit for layout.clear
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration basePath: /decorations/layout/clear
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration baseClientPath: /decorations/layout/clear/html/es/ES
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore hit for portlet.jetspeed
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration basePath: /decorations/portlet/jetspeed
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration baseClientPath: /decorations/portlet/jetspeed/html/es/ES
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore hit for portlet.jetspeed
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration basePath: /decorations/portlet/jetspeed
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration baseClientPath: /decorations/portlet/jetspeed/html/es/ES
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore hit for portlet.jetspeed
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration basePath: /decorations/portlet/jetspeed
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration baseClientPath: /decorations/portlet/jetspeed/html/es/ES
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore hit for layout.clear
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration basePath: /decorations/layout/clear
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration baseClientPath: /decorations/layout/clear/html/es/ES
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore hit for portlet.jetspeed
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration basePath: /decorations/portlet/jetspeed
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration baseClientPath: /decorations/portlet/jetspeed/html/es/ES
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
decorationConfigurationCacheCache:
decorationConfigurationCacheMemoryStore hit for portlet.level2crm
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
BaseDecoration basePath: /decorations/portlet/level2crm
12.05.2010 13:14:48 DEBUG
[org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
BaseDecoration baseClientPath: /decorations/portlet/level2crm/html/es/ES
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionNameCacheCache: portletDefinitionNameCacheMemoryStore
hit for j2-admin::SpaceNavigator
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionOidCacheCache: portletDefinitionOidCacheMemoryStore hit
for org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{724}
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionNameCacheCache: portletDefinitionNameCacheMemoryStore
hit for j2-admin::PageNavigator
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionOidCacheCache: portletDefinitionOidCacheMemoryStore hit
for org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{725}
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionNameCacheCache: portletDefinitionNameCacheMemoryStore
hit for jetspeed-layouts::VelocityOneColumn
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionOidCacheCache: portletDefinitionOidCacheMemoryStore hit
for org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{731}
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionNameCacheCache: portletDefinitionNameCacheMemoryStore
hit for j2-admin::LoginPortlet
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionOidCacheCache: portletDefinitionOidCacheMemoryStore hit
for org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{650}
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionNameCacheCache: portletDefinitionNameCacheMemoryStore
hit for j2-admin::ForgottenPasswordPortlet
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionOidCacheCache: portletDefinitionOidCacheMemoryStore hit
for org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{659}
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionNameCacheCache: portletDefinitionNameCacheMemoryStore
hit for j2-admin::LocaleSelector
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionOidCacheCache: portletDefinitionOidCacheMemoryStore hit
for org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{657}
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionNameCacheCache: portletDefinitionNameCacheMemoryStore
hit for jetspeed-layouts::VelocityTwoColumns
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionOidCacheCache: portletDefinitionOidCacheMemoryStore hit
for org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{733}
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionNameCacheCache: portletDefinitionNameCacheMemoryStore
hit for j2-admin::JetspeedToolbox
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionOidCacheCache: portletDefinitionOidCacheMemoryStore hit
for org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{722}
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionNameCacheCache: portletDefinitionNameCacheMemoryStore
hit for jetspeed-layouts::VelocityOneColumn
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionOidCacheCache: portletDefinitionOidCacheMemoryStore hit
for org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{731}
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionNameCacheCache: portletDefinitionNameCacheMemoryStore
hit for jetspeed-layouts::VelocityThreeColumns
12.05.2010 13:14:48 DEBUG
[net.sf.ehcache.Cache.searchInMemoryStore():1338]
portletDefinitionOidCacheCache: portletDefinitionOidCacheMemoryStore hit
for org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{735}
12.05.2010 13:14:48 WARN
[org.apache.jetspeed.layout.impl.PortletActionSecurityConstraintsBehavior.checkAccess():72] Insufficient access to page /default-page.psml by user guest








____________________________________




  Gonzalo Aguilar Delgado
  Consultor CRM - Ingeniero en
Informática
        M. +34 607814276









El mié, 12-05-2010 a las 03:10 -0700, Woonsan Ko escribió:
> If you set the log level to WARN for org.apache.jetspeed.layout.impl.PortletActionSecurityConstraintsBehavior, then I think you should get the following warning logs for the case:
> 
> log.warn("Insufficient access to page " + page.getPath() + " by user " + userName);
> 
> This log could be helpful to detect the problem.
> 
> Woonsan
> 
> 
> ----- Original Message ----
> > From: Gonzalo Aguilar Delgado <ga...@aguilardelgado.com>
> > To: Jetspeed Developers List <je...@portals.apache.org>
> > Sent: Wed, May 12, 2010 11:15:47 AM
> > Subject: Re: Insufficient Rights
> > 
> > Curious thing about this is that Toolbox portlet shows the "Add" button
> on 
> > portlets because the user has rights but when you add a new portlet
> to the 
> > page the message is:
> 
> 12-may-2010 
> > 11:13:24
> org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper 
> > toResponse
> ADVERTENCIA: WebApplicationException has been caught : 
> > Insufficient
> access to view page
> 
> 
> I can say that rights are there 
> > right...
> 
> 
> 
> 
> 
> 
> 
> 
> 
> ____________________________________
> 
> 
> 
> 
>   
> > Gonzalo Aguilar Delgado
>   Consultor CRM - Ingeniero 
> > en
> Informática
>         M. +34 
> > 607814276
> 
> 
> 
> 
> 
> 
> 
> 
> 
> El mié, 12-05-2010 a las 11:08 
> > +0200, Gonzalo Aguilar Delgado escribió:
> > Hi all, 
> > 
> > After 
> > working for a while with jetspeed I started to receive following
> > 
> > logs...
> > 
> > 
> > 12-may-2010 10:51:36
> > 
> > org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> > 
> > ADVERTENCIA: WebApplicationException has been caught : Insufficient
> > 
> > access to view page
> > 12-may-2010 10:51:49
> > 
> > org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> > 
> > ADVERTENCIA: WebApplicationException has been caught : Insufficient
> > 
> > access to view page
> > 12-may-2010 10:51:54
> > 
> > org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> > 
> > ADVERTENCIA: WebApplicationException has been caught : Insufficient
> > 
> > access to view page
> > 12-may-2010 10:52:11
> > 
> > org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> > 
> > ADVERTENCIA: WebApplicationException has been caught : Insufficient
> > 
> > access to view page
> > 
> > 
> > This causes user to lose 
> > permissions. And I don't find a reason why.
> > Logs only shows that.  
> > 
> > 
> > 
> > Now I'm deleting old logs and rebooting tomcat to see 
> > if I can have a
> > clearer cause. 
> > 
> > Sometimes it starts to 
> > work normally without human intervention.
> > 
> > 
> > Does anyone 
> > suffer of the same problem?
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > ____________________________________
> > 
> > 
> > 
> > 
> > 
> >   Gonzalo Aguilar Delgado
> >   Consultor CRM - Ingeniero 
> > en
> > Informática
> >         M. +34 
> > 607814276
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > ---------------------------------------------------------------------
> > To 
> > unsubscribe, e-mail: 
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> > 
> > For additional commands, e-mail: 
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> > 
> > 
> 
> 
> ---------------------------------------------------------------------
> To 
> > unsubscribe, e-mail: 
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> For 
> > additional commands, e-mail: 
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> 
> 
>       
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
> For additional commands, e-mail: jetspeed-dev-help@portals.apache.org
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Re: Insufficient Rights

Posted by Woonsan Ko <wo...@yahoo.com>.
If you set the log level to WARN for org.apache.jetspeed.layout.impl.PortletActionSecurityConstraintsBehavior, then I think you should get the following warning logs for the case:

log.warn("Insufficient access to page " + page.getPath() + " by user " + userName);

This log could be helpful to detect the problem.

Woonsan


----- Original Message ----
> From: Gonzalo Aguilar Delgado <ga...@aguilardelgado.com>
> To: Jetspeed Developers List <je...@portals.apache.org>
> Sent: Wed, May 12, 2010 11:15:47 AM
> Subject: Re: Insufficient Rights
> 
> Curious thing about this is that Toolbox portlet shows the "Add" button
on 
> portlets because the user has rights but when you add a new portlet
to the 
> page the message is:

12-may-2010 
> 11:13:24
org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper 
> toResponse
ADVERTENCIA: WebApplicationException has been caught : 
> Insufficient
access to view page


I can say that rights are there 
> right...









____________________________________




  
> Gonzalo Aguilar Delgado
  Consultor CRM - Ingeniero 
> en
Informática
        M. +34 
> 607814276









El mié, 12-05-2010 a las 11:08 
> +0200, Gonzalo Aguilar Delgado escribió:
> Hi all, 
> 
> After 
> working for a while with jetspeed I started to receive following
> 
> logs...
> 
> 
> 12-may-2010 10:51:36
> 
> org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> 
> ADVERTENCIA: WebApplicationException has been caught : Insufficient
> 
> access to view page
> 12-may-2010 10:51:49
> 
> org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> 
> ADVERTENCIA: WebApplicationException has been caught : Insufficient
> 
> access to view page
> 12-may-2010 10:51:54
> 
> org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> 
> ADVERTENCIA: WebApplicationException has been caught : Insufficient
> 
> access to view page
> 12-may-2010 10:52:11
> 
> org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> 
> ADVERTENCIA: WebApplicationException has been caught : Insufficient
> 
> access to view page
> 
> 
> This causes user to lose 
> permissions. And I don't find a reason why.
> Logs only shows that.  
> 
> 
> 
> Now I'm deleting old logs and rebooting tomcat to see 
> if I can have a
> clearer cause. 
> 
> Sometimes it starts to 
> work normally without human intervention.
> 
> 
> Does anyone 
> suffer of the same problem?
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> ____________________________________
> 
> 
> 
> 
> 
>   Gonzalo Aguilar Delgado
>   Consultor CRM - Ingeniero 
> en
> Informática
>         M. +34 
> 607814276
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> ---------------------------------------------------------------------
> To 
> unsubscribe, e-mail: 
> ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> 
> For additional commands, e-mail: 
> ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> 
> 


---------------------------------------------------------------------
To 
> unsubscribe, e-mail: 
> ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
For 
> additional commands, e-mail: 
> ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org


      

---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Re: Insufficient Rights

Posted by Gonzalo Aguilar Delgado <ga...@aguilardelgado.com>.
Curious thing about this is that Toolbox portlet shows the "Add" button
on portlets because the user has rights but when you add a new portlet
to the page the message is:

12-may-2010 11:13:24
org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
ADVERTENCIA: WebApplicationException has been caught : Insufficient
access to view page


I can say that rights are there right...









____________________________________




  Gonzalo Aguilar Delgado
  Consultor CRM - Ingeniero en
Informática
        M. +34 607814276









El mié, 12-05-2010 a las 11:08 +0200, Gonzalo Aguilar Delgado escribió:
> Hi all, 
> 
> After working for a while with jetspeed I started to receive following
> logs...
> 
> 
> 12-may-2010 10:51:36
> org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> ADVERTENCIA: WebApplicationException has been caught : Insufficient
> access to view page
> 12-may-2010 10:51:49
> org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> ADVERTENCIA: WebApplicationException has been caught : Insufficient
> access to view page
> 12-may-2010 10:51:54
> org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> ADVERTENCIA: WebApplicationException has been caught : Insufficient
> access to view page
> 12-may-2010 10:52:11
> org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> ADVERTENCIA: WebApplicationException has been caught : Insufficient
> access to view page
> 
> 
> This causes user to lose permissions. And I don't find a reason why.
> Logs only shows that.  
> 
> 
> Now I'm deleting old logs and rebooting tomcat to see if I can have a
> clearer cause. 
> 
> Sometimes it starts to work normally without human intervention.
> 
> 
> Does anyone suffer of the same problem?
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> ____________________________________
> 
> 
> 
> 
>   Gonzalo Aguilar Delgado
>   Consultor CRM - Ingeniero en
> Informática
>         M. +34 607814276
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
> For additional commands, e-mail: jetspeed-dev-help@portals.apache.org
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Re: Insufficient Rights

Posted by Gonzalo Aguilar Delgado <ga...@aguilardelgado.com>.
I found more on this...

It seems that template parsing is too weak.

More logs

----


11.05.2010 17:06:48 ERROR
[org.apache.jetspeed.request.JetspeedRequestContext.createPortletWindow():679] Failed to retrieve Portlet Definition for crm-survey-war::crm-report-chartviewer
11.05.2010 17:06:48 ERROR
[org.apache.jetspeed.request.JetspeedRequestContext.createPortletWindow():679] Failed to retrieve Portlet Definition for crm-survey-war::crm-report-chartviewer
11.05.2010 17:06:50 ERROR
[org.apache.jetspeed.request.JetspeedRequestContext.createPortletWindow():679] Failed to retrieve Portlet Definition for crm-survey-war::crm-report-chartviewer
11.05.2010 17:06:50 ERROR
[org.apache.jetspeed.request.JetspeedRequestContext.createPortletWindow():679] Failed to retrieve Portlet Definition for crm-survey-war::crm-report-chartviewer
11.05.2010 17:07:32 ERROR
[org.apache.jetspeed.request.JetspeedRequestContext.createPortletWindow():679] Failed to retrieve Portlet Definition for crm-survey-war::crm-report-chartviewer
11.05.2010 17:07:32 ERROR
[org.apache.jetspeed.request.JetspeedRequestContext.createPortletWindow():679] Failed to retrieve Portlet Definition for crm-survey-war::crm-report-chartviewer
11.05.2010 17:07:32 ERROR
[org.apache.jetspeed.velocity.JetspeedVelocityViewServlet.error():715]
Error processing vm template 
org.apache.velocity.exception.MethodInvocationException: Invocation of
method 'getTitle' in  class
org.apache.jetspeed.velocity.JetspeedPowerToolImpl threw exception
java.lang.NullPointerException at decorations/portlet/decorator.vm[line
38, column 20]
	at
org.apache.velocity.runtime.parser.node.ASTMethod.handleInvocationException(ASTMethod.java:337)
	at
org.apache.velocity.runtime.parser.node.ASTMethod.execute(ASTMethod.java:284)
	at
org.apache.velocity.runtime.parser.node.ASTReference.execute(ASTReference.java:262)
	at
org.apache.velocity.runtime.parser.node.ASTReference.render(ASTReference.java:342)
	at
org.apache.velocity.runtime.parser.node.ASTBlock.render(ASTBlock.java:72)
	at
org.apache.velocity.runtime.parser.node.ASTIfStatement.render(ASTIfStatement.java:87)
	at
org.apache.velocity.runtime.parser.node.SimpleNode.render(SimpleNode.java:336)
	at org.apache.velocity.runtime.directive.Parse.render(Parse.java:260)
	at
org.apache.velocity.runtime.parser.node.ASTDirective.render(ASTDirective.java:175)
	at
org.apache.velocity.runtime.parser.node.ASTBlock.render(ASTBlock.java:72)
	at
org.apache.velocity.runtime.parser.node.ASTIfStatement.render(ASTIfStatement.java:87)
	at
org.apache.velocity.runtime.parser.node.ASTBlock.render(ASTBlock.java:72)
	at
org.apache.velocity.runtime.directive.Foreach.render(Foreach.java:366)
	at
org.apache.velocity.runtime.parser.node.ASTDirective.render(ASTDirective.java:175)
	at
org.apache.velocity.runtime.parser.node.ASTBlock.render(ASTBlock.java:72)
	at
org.apache.velocity.runtime.directive.Foreach.render(Foreach.java:366)
	at
org.apache.velocity.runtime.parser.node.ASTDirective.render(ASTDirective.java:175)
	at
org.apache.velocity.runtime.parser.node.SimpleNode.render(SimpleNode.java:336)
	at org.apache.velocity.Template.merge(Template.java:328)
	at org.apache.velocity.Template.merge(Template.java:235)
	at
org.apache.portals.bridges.velocity.BridgesVelocityViewServlet.mergeTemplate(BridgesVelocityViewServlet.java:119)
	at
org.apache.velocity.tools.view.servlet.VelocityViewServlet.doRequest(VelocityViewServlet.java:551)
	at
org.apache.velocity.tools.view.servlet.VelocityViewServlet.doGet(VelocityViewServlet.java:507)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:617)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
	at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
	at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
	at
org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
	at
org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:535)
	at
org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:472)
	at
org.apache.pluto.container.impl.PortletRequestDispatcherImpl.doDispatch(PortletRequestDispatcherImpl.java:174)
	at
org.apache.pluto.container.impl.PortletRequestDispatcherImpl.include(PortletRequestDispatcherImpl.java:227)
	at
org.apache.portals.bridges.common.GenericServletPortlet.doView(GenericServletPortlet.java:364)
	at
org.apache.jetspeed.portlets.layout.LayoutPortlet.doView(LayoutPortlet.java:297)
	at
org.apache.jetspeed.portlets.layout.MultiColumnPortlet.doView(MultiColumnPortlet.java:190)
	at javax.portlet.GenericPortlet.doDispatch(GenericPortlet.java:348)
	at javax.portlet.GenericPortlet.render(GenericPortlet.java:253)
	at
org.apache.jetspeed.portlet.PortletObjectProxy.proxyRender(PortletObjectProxy.java:280)
	at
org.apache.jetspeed.portlet.PortletObjectProxy.invoke(PortletObjectProxy.java:172)
	at $Proxy52.render(Unknown Source)
	at
org.apache.jetspeed.factory.JetspeedPortletInstance.render(JetspeedPortletInstance.java:117)
	at
org.apache.jetspeed.container.invoker.LocalPortletInvoker.invoke(LocalPortletInvoker.java:163)
	at
org.apache.jetspeed.container.invoker.JetspeedPortletInvokerService.render(JetspeedPortletInvokerService.java:127)
	at
org.apache.pluto.container.impl.PortletContainerImpl.doRender(PortletContainerImpl.java:157)
	at
org.apache.jetspeed.container.JetspeedPortletContainerWrapper.doRender(JetspeedPortletContainerWrapper.java:69)
	at
org.apache.jetspeed.aggregator.impl.RenderingJobImpl.execute(RenderingJobImpl.java:183)
	at
org.apache.jetspeed.aggregator.impl.PortletRendererImpl.renderNow(PortletRendererImpl.java:172)
	at
org.apache.jetspeed.aggregator.impl.PortletRendererImpl.renderNow(PortletRendererImpl.java:150)
	at
org.apache.jetspeed.aggregator.impl.PageAggregatorImpl.aggregateAndRender(PageAggregatorImpl.java:107)
	at
org.apache.jetspeed.aggregator.impl.PageAggregatorImpl.aggregateAndRender(PageAggregatorImpl.java:103)
	at
org.apache.jetspeed.aggregator.impl.PageAggregatorImpl.build(PageAggregatorImpl.java:77)
	at
org.apache.jetspeed.aggregator.AggregatorValve.invoke(AggregatorValve.java:46)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.aggregator.HeaderAggregatorValve.invoke(HeaderAggregatorValve.java:53)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.decoration.DecorationValve.invoke(DecorationValve.java:152)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.resource.ResourceValveImpl.invoke(ResourceValveImpl.java:84)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.pipeline.valve.impl.ActionValveImpl.invoke(ActionValveImpl.java:139)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.container.ContainerValve.invoke(ContainerValve.java:88)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.container.PageHistoryValve.invoke(PageHistoryValve.java:108)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.profiler.impl.RefreshUserHomepageValveImpl.invoke(RefreshUserHomepageValveImpl.java:114)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.invoke(AbstractPageValveImpl.java:146)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.security.impl.LoginValidationValveImpl.invoke(LoginValidationValveImpl.java:158)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.security.impl.PasswordCredentialValveImpl.invoke(PasswordCredentialValveImpl.java:151)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.localization.impl.LocalizationValveImpl.invoke(LocalizationValveImpl.java:170)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at org.apache.jetspeed.security.impl.AbstractSecurityValve
$1.run(AbstractSecurityValve.java:138)
	at java.security.AccessController.doPrivileged(Native Method)
	at javax.security.auth.Subject.doAsPrivileged(Subject.java:474)
	at
org.apache.jetspeed.security.JSSubject.doAsPrivileged(JSSubject.java:179)
	at
org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:132)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.container.url.impl.PortalURLValveImpl.invoke(PortalURLValveImpl.java:88)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.capabilities.impl.CapabilityValveImpl.invoke(CapabilityValveImpl.java:127)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.pipeline.JetspeedPipeline.invoke(JetspeedPipeline.java:163)
	at
org.apache.jetspeed.engine.JetspeedEngine.service(JetspeedEngine.java:225)
	at
org.apache.jetspeed.engine.JetspeedServlet.invoke(JetspeedServlet.java:300)
	at
org.apache.jetspeed.engine.JetspeedServlet.service(JetspeedServlet.java:318)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
	at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
	at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
	at
org.apache.jetspeed.engine.servlet.XXSUrlAttackFilter.doFilter(XXSUrlAttackFilter.java:52)
	at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
	at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
	at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
	at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
	at
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:433)
	at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
	at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
	at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
	at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
	at
org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190)
	at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291)
	at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:769)
	at
org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:698)
	at org.apache.jk.common.ChannelSocket
$SocketConnection.runIt(ChannelSocket.java:891)
	at org.apache.tomcat.util.threads.ThreadPool
$ControlRunnable.run(ThreadPool.java:690)
	at java.lang.Thread.run(Thread.java:636)
Caused by: java.lang.NullPointerException
	at
org.apache.jetspeed.request.JetspeedRequestContext.getPreferedLanguage(JetspeedRequestContext.java:475)
	at
org.apache.jetspeed.velocity.JetspeedPowerToolImpl.getTitle(JetspeedPowerToolImpl.java:721)
	at sun.reflect.GeneratedMethodAccessor191.invoke(Unknown Source)
	at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:616)
	at org.apache.velocity.util.introspection.UberspectImpl
$VelMethodImpl.doInvoke(UberspectImpl.java:389)
	at org.apache.velocity.util.introspection.UberspectImpl
$VelMethodImpl.invoke(UberspectImpl.java:378)
	at
org.apache.velocity.runtime.parser.node.ASTMethod.execute(ASTMethod.java:270)
	... 107 more
11.05.2010 17:07:36 ERROR
[org.apache.jetspeed.request.JetspeedRequestContext.createPortletWindow():679] Failed to retrieve Portlet Definition for crm-survey-war::crm-report-chartviewer
11.05.2010 17:07:36 ERROR
[org.apache.jetspeed.request.JetspeedRequestContext.createPortletWindow():679] Failed to retrieve Portlet Definition for crm-survey-war::crm-report-chartviewer
11.05.2010 17:07:36 ERROR
[org.apache.jetspeed.velocity.JetspeedVelocityViewServlet.error():715]
Error processing vm template 
org.apache.velocity.exception.MethodInvocationException: Invocation of
method 'getTitle' in  class
org.apache.jetspeed.velocity.JetspeedPowerToolImpl threw exception
java.lang.NullPointerException at decorations/portlet/decorator.vm[line
38, column 20]
	at
org.apache.velocity.runtime.parser.node.ASTMethod.handleInvocationException(ASTMethod.java:337)
	at
org.apache.velocity.runtime.parser.node.ASTMethod.execute(ASTMethod.java:284)
	at
org.apache.velocity.runtime.parser.node.ASTReference.execute(ASTReference.java:262)
	at
org.apache.velocity.runtime.parser.node.ASTReference.render(ASTReference.java:342)
	at
org.apache.velocity.runtime.parser.node.ASTBlock.render(ASTBlock.java:72)
	at
org.apache.velocity.runtime.parser.node.ASTIfStatement.render(ASTIfStatement.java:87)
	at
org.apache.velocity.runtime.parser.node.SimpleNode.render(SimpleNode.java:336)
	at org.apache.velocity.runtime.directive.Parse.render(Parse.java:260)
	at
org.apache.velocity.runtime.parser.node.ASTDirective.render(ASTDirective.java:175)
	at
org.apache.velocity.runtime.parser.node.ASTBlock.render(ASTBlock.java:72)
	at
org.apache.velocity.runtime.parser.node.ASTIfStatement.render(ASTIfStatement.java:87)
	at
org.apache.velocity.runtime.parser.node.ASTBlock.render(ASTBlock.java:72)
	at
org.apache.velocity.runtime.directive.Foreach.render(Foreach.java:366)
	at
org.apache.velocity.runtime.parser.node.ASTDirective.render(ASTDirective.java:175)
	at
org.apache.velocity.runtime.parser.node.ASTBlock.render(ASTBlock.java:72)
	at
org.apache.velocity.runtime.directive.Foreach.render(Foreach.java:366)
	at
org.apache.velocity.runtime.parser.node.ASTDirective.render(ASTDirective.java:175)
	at
org.apache.velocity.runtime.parser.node.SimpleNode.render(SimpleNode.java:336)
	at org.apache.velocity.Template.merge(Template.java:328)
	at org.apache.velocity.Template.merge(Template.java:235)
	at
org.apache.portals.bridges.velocity.BridgesVelocityViewServlet.mergeTemplate(BridgesVelocityViewServlet.java:119)
	at
org.apache.velocity.tools.view.servlet.VelocityViewServlet.doRequest(VelocityViewServlet.java:551)
	at
org.apache.velocity.tools.view.servlet.VelocityViewServlet.doGet(VelocityViewServlet.java:507)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:617)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
	at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
	at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
	at
org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
	at
org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:535)
	at
org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:472)
	at
org.apache.pluto.container.impl.PortletRequestDispatcherImpl.doDispatch(PortletRequestDispatcherImpl.java:174)
	at
org.apache.pluto.container.impl.PortletRequestDispatcherImpl.include(PortletRequestDispatcherImpl.java:227)
	at
org.apache.portals.bridges.common.GenericServletPortlet.doView(GenericServletPortlet.java:364)
	at
org.apache.jetspeed.portlets.layout.LayoutPortlet.doView(LayoutPortlet.java:297)
	at
org.apache.jetspeed.portlets.layout.MultiColumnPortlet.doView(MultiColumnPortlet.java:190)
	at javax.portlet.GenericPortlet.doDispatch(GenericPortlet.java:348)
	at javax.portlet.GenericPortlet.render(GenericPortlet.java:253)
	at
org.apache.jetspeed.portlet.PortletObjectProxy.proxyRender(PortletObjectProxy.java:280)
	at
org.apache.jetspeed.portlet.PortletObjectProxy.invoke(PortletObjectProxy.java:172)
	at $Proxy52.render(Unknown Source)
	at
org.apache.jetspeed.factory.JetspeedPortletInstance.render(JetspeedPortletInstance.java:117)
	at
org.apache.jetspeed.container.invoker.LocalPortletInvoker.invoke(LocalPortletInvoker.java:163)
	at
org.apache.jetspeed.container.invoker.JetspeedPortletInvokerService.render(JetspeedPortletInvokerService.java:127)
	at
org.apache.pluto.container.impl.PortletContainerImpl.doRender(PortletContainerImpl.java:157)
	at
org.apache.jetspeed.container.JetspeedPortletContainerWrapper.doRender(JetspeedPortletContainerWrapper.java:69)
	at
org.apache.jetspeed.aggregator.impl.RenderingJobImpl.execute(RenderingJobImpl.java:183)
	at
org.apache.jetspeed.aggregator.impl.PortletRendererImpl.renderNow(PortletRendererImpl.java:172)
	at
org.apache.jetspeed.aggregator.impl.PortletRendererImpl.renderNow(PortletRendererImpl.java:150)
	at
org.apache.jetspeed.aggregator.impl.PageAggregatorImpl.aggregateAndRender(PageAggregatorImpl.java:107)
	at
org.apache.jetspeed.aggregator.impl.PageAggregatorImpl.aggregateAndRender(PageAggregatorImpl.java:103)
	at
org.apache.jetspeed.aggregator.impl.PageAggregatorImpl.build(PageAggregatorImpl.java:77)
	at
org.apache.jetspeed.aggregator.AggregatorValve.invoke(AggregatorValve.java:46)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.aggregator.HeaderAggregatorValve.invoke(HeaderAggregatorValve.java:53)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.decoration.DecorationValve.invoke(DecorationValve.java:152)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.resource.ResourceValveImpl.invoke(ResourceValveImpl.java:84)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.pipeline.valve.impl.ActionValveImpl.invoke(ActionValveImpl.java:139)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.container.ContainerValve.invoke(ContainerValve.java:88)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.container.PageHistoryValve.invoke(PageHistoryValve.java:108)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.profiler.impl.RefreshUserHomepageValveImpl.invoke(RefreshUserHomepageValveImpl.java:114)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.invoke(AbstractPageValveImpl.java:146)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.security.impl.LoginValidationValveImpl.invoke(LoginValidationValveImpl.java:158)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.security.impl.PasswordCredentialValveImpl.invoke(PasswordCredentialValveImpl.java:151)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.localization.impl.LocalizationValveImpl.invoke(LocalizationValveImpl.java:170)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at org.apache.jetspeed.security.impl.AbstractSecurityValve
$1.run(AbstractSecurityValve.java:138)
	at java.security.AccessController.doPrivileged(Native Method)
	at javax.security.auth.Subject.doAsPrivileged(Subject.java:474)
	at
org.apache.jetspeed.security.JSSubject.doAsPrivileged(JSSubject.java:179)
	at
org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:132)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.container.url.impl.PortalURLValveImpl.invoke(PortalURLValveImpl.java:88)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.capabilities.impl.CapabilityValveImpl.invoke(CapabilityValveImpl.java:127)
	at org.apache.jetspeed.pipeline.JetspeedPipeline
$Invocation.invokeNext(JetspeedPipeline.java:242)
	at
org.apache.jetspeed.pipeline.JetspeedPipeline.invoke(JetspeedPipeline.java:163)
	at
org.apache.jetspeed.engine.JetspeedEngine.service(JetspeedEngine.java:225)
	at
org.apache.jetspeed.engine.JetspeedServlet.invoke(JetspeedServlet.java:300)
	at
org.apache.jetspeed.engine.JetspeedServlet.service(JetspeedServlet.java:318)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
	at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
	at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
	at
org.apache.jetspeed.engine.servlet.XXSUrlAttackFilter.doFilter(XXSUrlAttackFilter.java:52)
	at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
	at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
	at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
	at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
	at
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:433)
	at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
	at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
	at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
	at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
	at
org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190)
	at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291)
	at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:769)
	at
org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:698)
	at org.apache.jk.common.ChannelSocket
$SocketConnection.runIt(ChannelSocket.java:891)
	at org.apache.tomcat.util.threads.ThreadPool
$ControlRunnable.run(ThreadPool.java:690)
	at java.lang.Thread.run(Thread.java:636)
Caused by: java.lang.NullPointerException
	at
org.apache.jetspeed.request.JetspeedRequestContext.getPreferedLanguage(JetspeedRequestContext.java:475)
	at
org.apache.jetspeed.velocity.JetspeedPowerToolImpl.getTitle(JetspeedPowerToolImpl.java:721)
	at sun.reflect.GeneratedMethodAccessor191.invoke(Unknown Source)
	at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:616)
	at org.apache.velocity.util.introspection.UberspectImpl
$VelMethodImpl.doInvoke(UberspectImpl.java:389)
	at org.apache.velocity.util.introspection.UberspectImpl
$VelMethodImpl.invoke(UberspectImpl.java:378)
	at
org.apache.velocity.runtime.parser.node.ASTMethod.execute(ASTMethod.java:270)
	... 107 more









El mié, 12-05-2010 a las 11:08 +0200, Gonzalo Aguilar Delgado escribió:
> Hi all, 
> 
> After working for a while with jetspeed I started to receive following
> logs...
> 
> 
> 12-may-2010 10:51:36
> org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> ADVERTENCIA: WebApplicationException has been caught : Insufficient
> access to view page
> 12-may-2010 10:51:49
> org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> ADVERTENCIA: WebApplicationException has been caught : Insufficient
> access to view page
> 12-may-2010 10:51:54
> org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> ADVERTENCIA: WebApplicationException has been caught : Insufficient
> access to view page
> 12-may-2010 10:52:11
> org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> ADVERTENCIA: WebApplicationException has been caught : Insufficient
> access to view page
> 
> 
> This causes user to lose permissions. And I don't find a reason why.
> Logs only shows that.  
> 
> 
> Now I'm deleting old logs and rebooting tomcat to see if I can have a
> clearer cause. 
> 
> Sometimes it starts to work normally without human intervention.
> 
> 
> Does anyone suffer of the same problem?
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> ____________________________________
> 
> 
> 
> 
>   Gonzalo Aguilar Delgado
>   Consultor CRM - Ingeniero en
> Informática
>         M. +34 607814276
> 
> 
> 
> 
> 
> 
> 
> 
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org