You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@jackrabbit.apache.org by qcfireball <qc...@yahoo.com> on 2007/12/13 20:22:03 UTC

Authorization

It looks to me so far that Jackrabbit has no "native" Authorization provided
with it.  I have looked at the source quite a bit the last couple days, and
there does not seem to be anything of this sort.  Is this true?

What I mean by "Authorization" (just to be sure you understand), an logged
in user has permissions to read/write/remove a: Node and/or property or even
rights to login to a workspace.

Are people implementing this themselves using the AccessManager interface? 
Are they using JeCARS to implement repository Authorization, or some other
pre-built product?

This is VERY important to me and the project I am proposing to our upper
management.  If I do not have to build this from scratch, I would prefer
this.

Just wondering what others are experiencing with Repository Authorization.
-- 
View this message in context: http://www.nabble.com/Authorization-tp14322959p14322959.html
Sent from the Jackrabbit - Users mailing list archive at Nabble.com.

Re: Authorization

Posted by Angela Schreiber <an...@day.com>.
qcfireball wrote:
> It looks as though I could take the patches and apply them to the 1.3.3
> source I downloaded and re-build Jackrabbit.  Would this be a true
> statement?

maybe... but i wouldn't count on that.

and as stated in the issue:
since we are currently working on the jsr283 reference implementation,
things are pretty likely to change.

the details with be discussed in the mentioned issue.
angela

Re: Authorization

Posted by Jukka Zitting <ju...@gmail.com>.
Hi,

On Dec 14, 2007 3:08 PM, qcfireball <qc...@yahoo.com> wrote:
> It looks as though I could take the patches and apply them to the 1.3.3
> source I downloaded and re-build Jackrabbit.  Would this be a true
> statement?

The patches currently in the issue tracker are a work in progress, as
we're adapting the authorization code from an earlier CRX version to
match current Jackrabbit and future JSR 283 (Jackrabbit 2.0) needs.
You can try using the patches, but I'm afraid you may well encounter
problems...

> Also, I have implemented my own AccessManager, and have as of yet been able
> to find a way to retrieve an instance of a Node from a NodeId.  There is
> nothing in the Path class or the HierarchyManager, and no hints elsewhere.
> Do you have any ideas how I would accomplish this?

This has been discussed a few times before on the dev@ mailing list.
Unfortunately I don't have direct pointers to relevant threads, but
http://jackrabbit.markmail.org/search/?q=AccessManager should be a
good starting point.

BR,

Jukka Zitting

Re: Authorization

Posted by qcfireball <qc...@yahoo.com>.
It looks as though I could take the patches and apply them to the 1.3.3
source I downloaded and re-build Jackrabbit.  Would this be a true
statement?

Also, I have implemented my own AccessManager, and have as of yet been able
to find a way to retrieve an instance of a Node from a NodeId.  There is
nothing in the Path class or the HierarchyManager, and no hints elsewhere. 
Do you have any ideas how I would accomplish this?

Thank you for the info.  This was extremely helpful to me.

---MKelleher


Jukka Zitting wrote:
> 
> Hi,
> 
> On Dec 13, 2007 9:22 PM, qcfireball <qc...@yahoo.com> wrote:
>> It looks to me so far that Jackrabbit has no "native" Authorization
>> provided
>> with it.  I have looked at the source quite a bit the last couple days,
>> and
>> there does not seem to be anything of this sort.  Is this true?
> 
> Yes, currently we only ship a very rudimentary authorization mechanism
> that basically just distinguishes between read-only access for a
> specific "anonymous" account, and read-write access to everyone else.
> 
>> Are people implementing this themselves using the AccessManager
>> interface?
>> Are they using JeCARS to implement repository Authorization, or some
>> other
>> pre-built product?
> 
> Yes, there are a few threads (mostly on dev@) about implementing
> custom AccessManagers. This is currently the recommended way of
> implementing authorization policies in Jackrabbit.
> 
> Note that Day Software is currently contributing a rather
> comprehensive ACL-based authorization component (see
> https://issues.apache.org/jira/browse/JCR-1171), but this feature will
> unfortunately not make it in the Jackrabbit 1.4 release. And if there
> are other generic AccessManagers out there, I'd certainly be
> interested in including also them in the Jackrabbit core.
> 
> BR,
> 
> Jukka Zitting
> 
> 

-- 
View this message in context: http://www.nabble.com/Authorization-tp14322959p14335524.html
Sent from the Jackrabbit - Users mailing list archive at Nabble.com.

Re: java.io.NotSerializableException: org.apache.jackrabbit.core.NodeImpl

Posted by Marcel Reutegger <ma...@gmx.net>.
as the exception indicates, the JCR Node you put into the servlet session is not 
serializable. you either must not put nodes into the servlet session or disable 
session persistence in tomcat. see [1]

regards
  marcel

[1] http://www.google.com/search?q=disable+tomcat+session+persistence

Pamarthi, Ramakrishna wrote:
>  
> Hi All,
> 
> We are getting the below exception while starting the server. But server
> is started successfully and application working as expected.
> 
> What does this mean and how to fix this?
> 
> Can anyone help?
> 
> Dec 11, 2007 1:30:09 AM org.apache.catalina.session.StandardManager
> doLoad
> SEVERE: IOException while loading persisted sessions:
> java.io.WriteAbortedException: writing aborted;
> java.io.NotSerializableException: org.apache.jackrabbit.core.NodeImpl
> java.io.WriteAbortedException: writing aborted;
> java.io.NotSerializableException: org.apache.jackrabbit.core.NodeImpl
> 	at
> java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1309)
> 	at
> java.io.ObjectInputStream.defaultReadFields(ObjectInputStream.java:1908)
> 	at
> java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:1832)
> 	at
> java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1719
> )
> 	at
> java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1305)
> 	at
> java.io.ObjectInputStream.readArray(ObjectInputStream.java:1634)
> 	at
> java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1299)
> 	at
> java.io.ObjectInputStream.defaultReadFields(ObjectInputStream.java:1908)
> 	at
> java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:1832)
> 	at
> java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1719
> )
> 	at
> java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1305)
> 	at
> java.io.ObjectInputStream.readObject(ObjectInputStream.java:348)
> 	at
> org.apache.catalina.session.StandardSession.readObject(Unknown Source)
> 	at
> org.apache.catalina.session.StandardSession.readObjectData(Unknown
> Source)
> 	at org.apache.catalina.session.StandardManager.doLoad(Unknown
> Source)
> 	at org.apache.catalina.session.StandardManager.load(Unknown
> Source)
> 	at org.apache.catalina.session.StandardManager.start(Unknown
> Source)
> 	at org.apache.catalina.core.ContainerBase.setManager(Unknown
> Source)
> 	at
> org.apache.catalina.startup.ContextConfig.managerConfig(Unknown Source)
> 	at org.apache.catalina.startup.ContextConfig.start(Unknown
> Source)
> 	at
> org.apache.catalina.startup.ContextConfig.lifecycleEvent(Unknown Source)
> 	at
> org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Unknown
> Source)
> 	at org.apache.catalina.core.StandardContext.start(Unknown
> Source)
> 	at
> org.apache.catalina.core.ContainerBase.addChildInternal(Unknown Source)
> 	at org.apache.catalina.core.ContainerBase.addChild(Unknown
> Source)
> 	at org.apache.catalina.core.StandardHost.addChild(Unknown
> Source)
> 	at
> org.apache.catalina.startup.HostConfig.deployDescriptor(Unknown Source)
> 	at
> org.apache.catalina.startup.HostConfig.deployDescriptors(Unknown Source)
> 	at org.apache.catalina.startup.HostConfig.deployApps(Unknown
> Source)
> 	at org.apache.catalina.startup.HostConfig.start(Unknown Source)
> 	at org.apache.catalina.startup.HostConfig.lifecycleEvent(Unknown
> Source)
> 	at
> org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Unknown
> Source)
> 	at org.apache.catalina.core.ContainerBase.start(Unknown Source)
> 	at org.apache.catalina.core.StandardHost.start(Unknown Source)
> 	at org.apache.catalina.core.ContainerBase.start(Unknown Source)
> 	at org.apache.catalina.core.StandardEngine.start(Unknown Source)
> 	at org.apache.catalina.core.StandardService.start(Unknown
> Source)
> 	at org.apache.catalina.core.StandardServer.start(Unknown Source)
> 	at org.apache.catalina.startup.Catalina.start(Unknown Source)
> 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> 	at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.jav
> a:39)
> 	at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessor
> Impl.java:25)
> 	at java.lang.reflect.Method.invoke(Method.java:585)
> 	at org.apache.catalina.startup.Bootstrap.start(Unknown Source)
> 	at org.apache.catalina.startup.Bootstrap.main(Unknown Source)
> Caused by: java.io.NotSerializableException:
> org.apache.jackrabbit.core.NodeImpl
> 	at
> java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1081)
> 	at
> java.io.ObjectOutputStream.defaultWriteFields(ObjectOutputStream.java:13
> 75)
> 	at
> java.io.ObjectOutputStream.writeSerialData(ObjectOutputStream.java:1347)
> 	at
> java.io.ObjectOutputStream.writeOrdinaryObject(ObjectOutputStream.java:1
> 290)
> 	at
> java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1079)
> 	at
> java.io.ObjectOutputStream.writeArray(ObjectOutputStream.java:1251)
> 	at
> java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1075)
> 	at
> java.io.ObjectOutputStream.defaultWriteFields(ObjectOutputStream.java:13
> 75)
> 	at
> java.io.ObjectOutputStream.writeSerialData(ObjectOutputStream.java:1347)
> 	at
> java.io.ObjectOutputStream.writeOrdinaryObject(ObjectOutputStream.java:1
> 290)
> 	at
> java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1079)
> 	at
> java.io.ObjectOutputStream.writeObject(ObjectOutputStream.java:302)
> 	at
> org.apache.catalina.session.StandardSession.writeObject(Unknown Source)
> 	at
> org.apache.catalina.session.StandardSession.writeObjectData(Unknown
> Source)
> 	at org.apache.catalina.session.StandardManager.doUnload(Unknown
> Source)
> 	at org.apache.catalina.session.StandardManager.unload(Unknown
> Source)
> 	at org.apache.catalina.session.StandardManager.stop(Unknown
> Source)
> 	at org.apache.catalina.core.StandardContext.stop(Unknown Source)
> 	at org.apache.catalina.core.ContainerBase.removeChild(Unknown
> Source)
> 	at org.apache.catalina.startup.HostConfig.undeployApps(Unknown
> Source)
> 	at org.apache.catalina.startup.HostConfig.stop(Unknown Source)
> 	at org.apache.catalina.startup.HostConfig.lifecycleEvent(Unknown
> Source)
> 	at
> org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Unknown
> Source)
> 	at org.apache.catalina.core.ContainerBase.stop(Unknown Source)
> 	at org.apache.catalina.core.ContainerBase.stop(Unknown Source)
> 	at org.apache.catalina.core.StandardEngine.stop(Unknown Source)
> 	at org.apache.catalina.core.StandardService.stop(Unknown Source)
> 	at org.apache.catalina.core.StandardServer.stop(Unknown Source)
> 	at org.apache.catalina.startup.Catalina.stop(Unknown Source)
> 	... 7 more
> Dec 11, 2007 1:30:09 AM org.apache.catalina.session.StandardManager
> start
> SEVERE: Exception loading sessions from persistent storage
> java.io.WriteAbortedException: writing aborted;
> java.io.NotSerializableException: org.apache.jackrabbit.core.NodeImpl
> 	at
> java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1309)
> 	at
> java.io.ObjectInputStream.defaultReadFields(ObjectInputStream.java:1908)
> 	at
> java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:1832)
> 	at
> java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1719
> )
> 	at
> java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1305)
> 	at
> java.io.ObjectInputStream.readArray(ObjectInputStream.java:1634)
> 	at
> java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1299)
> 	at
> java.io.ObjectInputStream.defaultReadFields(ObjectInputStream.java:1908)
> 	at
> java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:1832)
> 	at
> java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1719
> )
> 	at
> java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1305)
> 	at
> java.io.ObjectInputStream.readObject(ObjectInputStream.java:348)
> 	at
> org.apache.catalina.session.StandardSession.readObject(Unknown Source)
> 	at
> org.apache.catalina.session.StandardSession.readObjectData(Unknown
> Source)
> 	at org.apache.catalina.session.StandardManager.doLoad(Unknown
> Source)
> 	at org.apache.catalina.session.StandardManager.load(Unknown
> Source)
> 	at org.apache.catalina.session.StandardManager.start(Unknown
> Source)
> 	at org.apache.catalina.core.ContainerBase.setManager(Unknown
> Source)
> 	at
> org.apache.catalina.startup.ContextConfig.managerConfig(Unknown Source)
> 	at org.apache.catalina.startup.ContextConfig.start(Unknown
> Source)
> 	at
> org.apache.catalina.startup.ContextConfig.lifecycleEvent(Unknown Source)
> 	at
> org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Unknown
> Source)
> 	at org.apache.catalina.core.StandardContext.start(Unknown
> Source)
> 	at
> org.apache.catalina.core.ContainerBase.addChildInternal(Unknown Source)
> 	at org.apache.catalina.core.ContainerBase.addChild(Unknown
> Source)
> 	at org.apache.catalina.core.StandardHost.addChild(Unknown
> Source)
> 	at
> org.apache.catalina.startup.HostConfig.deployDescriptor(Unknown Source)
> 	at
> org.apache.catalina.startup.HostConfig.deployDescriptors(Unknown Source)
> 	at org.apache.catalina.startup.HostConfig.deployApps(Unknown
> Source)
> 	at org.apache.catalina.startup.HostConfig.start(Unknown Source)
> 	at org.apache.catalina.startup.HostConfig.lifecycleEvent(Unknown
> Source)
> 	at
> org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Unknown
> Source)
> 	at org.apache.catalina.core.ContainerBase.start(Unknown Source)
> 	at org.apache.catalina.core.StandardHost.start(Unknown Source)
> 	at org.apache.catalina.core.ContainerBase.start(Unknown Source)
> 	at org.apache.catalina.core.StandardEngine.start(Unknown Source)
> 	at org.apache.catalina.core.StandardService.start(Unknown
> Source)
> 	at org.apache.catalina.core.StandardServer.start(Unknown Source)
> 	at org.apache.catalina.startup.Catalina.start(Unknown Source)
> 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> 	at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.jav
> a:39)
> 	at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessor
> Impl.java:25)
> 	at java.lang.reflect.Method.invoke(Method.java:585)
> 	at org.apache.catalina.startup.Bootstrap.start(Unknown Source)
> 	at org.apache.catalina.startup.Bootstrap.main(Unknown Source)
> Caused by: java.io.NotSerializableException:
> org.apache.jackrabbit.core.NodeImpl
> 	at
> java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1081)
> 	at
> java.io.ObjectOutputStream.defaultWriteFields(ObjectOutputStream.java:13
> 75)
> 	at
> java.io.ObjectOutputStream.writeSerialData(ObjectOutputStream.java:1347)
> 	at
> java.io.ObjectOutputStream.writeOrdinaryObject(ObjectOutputStream.java:1
> 290)
> 	at
> java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1079)
> 	at
> java.io.ObjectOutputStream.writeArray(ObjectOutputStream.java:1251)
> 	at
> java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1075)
> 	at
> java.io.ObjectOutputStream.defaultWriteFields(ObjectOutputStream.java:13
> 75)
> 	at
> java.io.ObjectOutputStream.writeSerialData(ObjectOutputStream.java:1347)
> 	at
> java.io.ObjectOutputStream.writeOrdinaryObject(ObjectOutputStream.java:1
> 290)
> 	at
> java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1079)
> 	at
> java.io.ObjectOutputStream.writeObject(ObjectOutputStream.java:302)
> 	at
> org.apache.catalina.session.StandardSession.writeObject(Unknown Source)
> 	at
> org.apache.catalina.session.StandardSession.writeObjectData(Unknown
> Source)
> 	at org.apache.catalina.session.StandardManager.doUnload(Unknown
> Source)
> 	at org.apache.catalina.session.StandardManager.unload(Unknown
> Source)
> 	at org.apache.catalina.session.StandardManager.stop(Unknown
> Source)
> 	at org.apache.catalina.core.StandardContext.stop(Unknown Source)
> 	at org.apache.catalina.core.ContainerBase.removeChild(Unknown
> Source)
> 	at org.apache.catalina.startup.HostConfig.undeployApps(Unknown
> Source)
> 	at org.apache.catalina.startup.HostConfig.stop(Unknown Source)
> 	at org.apache.catalina.startup.HostConfig.lifecycleEvent(Unknown
> Source)
> 	at
> org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Unknown
> Source)
> 	at org.apache.catalina.core.ContainerBase.stop(Unknown Source)
> 	at org.apache.catalina.core.ContainerBase.stop(Unknown Source)
> 	at org.apache.catalina.core.StandardEngine.stop(Unknown Source)
> 	at org.apache.catalina.core.StandardService.stop(Unknown Source)
> 	at org.apache.catalina.core.StandardServer.stop(Unknown Source)
> 	at org.apache.catalina.startup.Catalina.stop(Unknown Source)
> 	... 7 more
> Dec 11, 2007 1:30:09 AM org.displaytag.filter.ResponseOverrideFilter
> init
> 
> Best Regards,
> RK
> 
>

java.io.NotSerializableException: org.apache.jackrabbit.core.NodeImpl

Posted by "Pamarthi, Ramakrishna" <rk...@hp.com>.
 
Hi All,

We are getting the below exception while starting the server. But server
is started successfully and application working as expected.

What does this mean and how to fix this?

Can anyone help?

Dec 11, 2007 1:30:09 AM org.apache.catalina.session.StandardManager
doLoad
SEVERE: IOException while loading persisted sessions:
java.io.WriteAbortedException: writing aborted;
java.io.NotSerializableException: org.apache.jackrabbit.core.NodeImpl
java.io.WriteAbortedException: writing aborted;
java.io.NotSerializableException: org.apache.jackrabbit.core.NodeImpl
	at
java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1309)
	at
java.io.ObjectInputStream.defaultReadFields(ObjectInputStream.java:1908)
	at
java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:1832)
	at
java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1719
)
	at
java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1305)
	at
java.io.ObjectInputStream.readArray(ObjectInputStream.java:1634)
	at
java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1299)
	at
java.io.ObjectInputStream.defaultReadFields(ObjectInputStream.java:1908)
	at
java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:1832)
	at
java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1719
)
	at
java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1305)
	at
java.io.ObjectInputStream.readObject(ObjectInputStream.java:348)
	at
org.apache.catalina.session.StandardSession.readObject(Unknown Source)
	at
org.apache.catalina.session.StandardSession.readObjectData(Unknown
Source)
	at org.apache.catalina.session.StandardManager.doLoad(Unknown
Source)
	at org.apache.catalina.session.StandardManager.load(Unknown
Source)
	at org.apache.catalina.session.StandardManager.start(Unknown
Source)
	at org.apache.catalina.core.ContainerBase.setManager(Unknown
Source)
	at
org.apache.catalina.startup.ContextConfig.managerConfig(Unknown Source)
	at org.apache.catalina.startup.ContextConfig.start(Unknown
Source)
	at
org.apache.catalina.startup.ContextConfig.lifecycleEvent(Unknown Source)
	at
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Unknown
Source)
	at org.apache.catalina.core.StandardContext.start(Unknown
Source)
	at
org.apache.catalina.core.ContainerBase.addChildInternal(Unknown Source)
	at org.apache.catalina.core.ContainerBase.addChild(Unknown
Source)
	at org.apache.catalina.core.StandardHost.addChild(Unknown
Source)
	at
org.apache.catalina.startup.HostConfig.deployDescriptor(Unknown Source)
	at
org.apache.catalina.startup.HostConfig.deployDescriptors(Unknown Source)
	at org.apache.catalina.startup.HostConfig.deployApps(Unknown
Source)
	at org.apache.catalina.startup.HostConfig.start(Unknown Source)
	at org.apache.catalina.startup.HostConfig.lifecycleEvent(Unknown
Source)
	at
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Unknown
Source)
	at org.apache.catalina.core.ContainerBase.start(Unknown Source)
	at org.apache.catalina.core.StandardHost.start(Unknown Source)
	at org.apache.catalina.core.ContainerBase.start(Unknown Source)
	at org.apache.catalina.core.StandardEngine.start(Unknown Source)
	at org.apache.catalina.core.StandardService.start(Unknown
Source)
	at org.apache.catalina.core.StandardServer.start(Unknown Source)
	at org.apache.catalina.startup.Catalina.start(Unknown Source)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.jav
a:39)
	at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessor
Impl.java:25)
	at java.lang.reflect.Method.invoke(Method.java:585)
	at org.apache.catalina.startup.Bootstrap.start(Unknown Source)
	at org.apache.catalina.startup.Bootstrap.main(Unknown Source)
Caused by: java.io.NotSerializableException:
org.apache.jackrabbit.core.NodeImpl
	at
java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1081)
	at
java.io.ObjectOutputStream.defaultWriteFields(ObjectOutputStream.java:13
75)
	at
java.io.ObjectOutputStream.writeSerialData(ObjectOutputStream.java:1347)
	at
java.io.ObjectOutputStream.writeOrdinaryObject(ObjectOutputStream.java:1
290)
	at
java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1079)
	at
java.io.ObjectOutputStream.writeArray(ObjectOutputStream.java:1251)
	at
java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1075)
	at
java.io.ObjectOutputStream.defaultWriteFields(ObjectOutputStream.java:13
75)
	at
java.io.ObjectOutputStream.writeSerialData(ObjectOutputStream.java:1347)
	at
java.io.ObjectOutputStream.writeOrdinaryObject(ObjectOutputStream.java:1
290)
	at
java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1079)
	at
java.io.ObjectOutputStream.writeObject(ObjectOutputStream.java:302)
	at
org.apache.catalina.session.StandardSession.writeObject(Unknown Source)
	at
org.apache.catalina.session.StandardSession.writeObjectData(Unknown
Source)
	at org.apache.catalina.session.StandardManager.doUnload(Unknown
Source)
	at org.apache.catalina.session.StandardManager.unload(Unknown
Source)
	at org.apache.catalina.session.StandardManager.stop(Unknown
Source)
	at org.apache.catalina.core.StandardContext.stop(Unknown Source)
	at org.apache.catalina.core.ContainerBase.removeChild(Unknown
Source)
	at org.apache.catalina.startup.HostConfig.undeployApps(Unknown
Source)
	at org.apache.catalina.startup.HostConfig.stop(Unknown Source)
	at org.apache.catalina.startup.HostConfig.lifecycleEvent(Unknown
Source)
	at
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Unknown
Source)
	at org.apache.catalina.core.ContainerBase.stop(Unknown Source)
	at org.apache.catalina.core.ContainerBase.stop(Unknown Source)
	at org.apache.catalina.core.StandardEngine.stop(Unknown Source)
	at org.apache.catalina.core.StandardService.stop(Unknown Source)
	at org.apache.catalina.core.StandardServer.stop(Unknown Source)
	at org.apache.catalina.startup.Catalina.stop(Unknown Source)
	... 7 more
Dec 11, 2007 1:30:09 AM org.apache.catalina.session.StandardManager
start
SEVERE: Exception loading sessions from persistent storage
java.io.WriteAbortedException: writing aborted;
java.io.NotSerializableException: org.apache.jackrabbit.core.NodeImpl
	at
java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1309)
	at
java.io.ObjectInputStream.defaultReadFields(ObjectInputStream.java:1908)
	at
java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:1832)
	at
java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1719
)
	at
java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1305)
	at
java.io.ObjectInputStream.readArray(ObjectInputStream.java:1634)
	at
java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1299)
	at
java.io.ObjectInputStream.defaultReadFields(ObjectInputStream.java:1908)
	at
java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:1832)
	at
java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1719
)
	at
java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1305)
	at
java.io.ObjectInputStream.readObject(ObjectInputStream.java:348)
	at
org.apache.catalina.session.StandardSession.readObject(Unknown Source)
	at
org.apache.catalina.session.StandardSession.readObjectData(Unknown
Source)
	at org.apache.catalina.session.StandardManager.doLoad(Unknown
Source)
	at org.apache.catalina.session.StandardManager.load(Unknown
Source)
	at org.apache.catalina.session.StandardManager.start(Unknown
Source)
	at org.apache.catalina.core.ContainerBase.setManager(Unknown
Source)
	at
org.apache.catalina.startup.ContextConfig.managerConfig(Unknown Source)
	at org.apache.catalina.startup.ContextConfig.start(Unknown
Source)
	at
org.apache.catalina.startup.ContextConfig.lifecycleEvent(Unknown Source)
	at
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Unknown
Source)
	at org.apache.catalina.core.StandardContext.start(Unknown
Source)
	at
org.apache.catalina.core.ContainerBase.addChildInternal(Unknown Source)
	at org.apache.catalina.core.ContainerBase.addChild(Unknown
Source)
	at org.apache.catalina.core.StandardHost.addChild(Unknown
Source)
	at
org.apache.catalina.startup.HostConfig.deployDescriptor(Unknown Source)
	at
org.apache.catalina.startup.HostConfig.deployDescriptors(Unknown Source)
	at org.apache.catalina.startup.HostConfig.deployApps(Unknown
Source)
	at org.apache.catalina.startup.HostConfig.start(Unknown Source)
	at org.apache.catalina.startup.HostConfig.lifecycleEvent(Unknown
Source)
	at
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Unknown
Source)
	at org.apache.catalina.core.ContainerBase.start(Unknown Source)
	at org.apache.catalina.core.StandardHost.start(Unknown Source)
	at org.apache.catalina.core.ContainerBase.start(Unknown Source)
	at org.apache.catalina.core.StandardEngine.start(Unknown Source)
	at org.apache.catalina.core.StandardService.start(Unknown
Source)
	at org.apache.catalina.core.StandardServer.start(Unknown Source)
	at org.apache.catalina.startup.Catalina.start(Unknown Source)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.jav
a:39)
	at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessor
Impl.java:25)
	at java.lang.reflect.Method.invoke(Method.java:585)
	at org.apache.catalina.startup.Bootstrap.start(Unknown Source)
	at org.apache.catalina.startup.Bootstrap.main(Unknown Source)
Caused by: java.io.NotSerializableException:
org.apache.jackrabbit.core.NodeImpl
	at
java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1081)
	at
java.io.ObjectOutputStream.defaultWriteFields(ObjectOutputStream.java:13
75)
	at
java.io.ObjectOutputStream.writeSerialData(ObjectOutputStream.java:1347)
	at
java.io.ObjectOutputStream.writeOrdinaryObject(ObjectOutputStream.java:1
290)
	at
java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1079)
	at
java.io.ObjectOutputStream.writeArray(ObjectOutputStream.java:1251)
	at
java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1075)
	at
java.io.ObjectOutputStream.defaultWriteFields(ObjectOutputStream.java:13
75)
	at
java.io.ObjectOutputStream.writeSerialData(ObjectOutputStream.java:1347)
	at
java.io.ObjectOutputStream.writeOrdinaryObject(ObjectOutputStream.java:1
290)
	at
java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1079)
	at
java.io.ObjectOutputStream.writeObject(ObjectOutputStream.java:302)
	at
org.apache.catalina.session.StandardSession.writeObject(Unknown Source)
	at
org.apache.catalina.session.StandardSession.writeObjectData(Unknown
Source)
	at org.apache.catalina.session.StandardManager.doUnload(Unknown
Source)
	at org.apache.catalina.session.StandardManager.unload(Unknown
Source)
	at org.apache.catalina.session.StandardManager.stop(Unknown
Source)
	at org.apache.catalina.core.StandardContext.stop(Unknown Source)
	at org.apache.catalina.core.ContainerBase.removeChild(Unknown
Source)
	at org.apache.catalina.startup.HostConfig.undeployApps(Unknown
Source)
	at org.apache.catalina.startup.HostConfig.stop(Unknown Source)
	at org.apache.catalina.startup.HostConfig.lifecycleEvent(Unknown
Source)
	at
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Unknown
Source)
	at org.apache.catalina.core.ContainerBase.stop(Unknown Source)
	at org.apache.catalina.core.ContainerBase.stop(Unknown Source)
	at org.apache.catalina.core.StandardEngine.stop(Unknown Source)
	at org.apache.catalina.core.StandardService.stop(Unknown Source)
	at org.apache.catalina.core.StandardServer.stop(Unknown Source)
	at org.apache.catalina.startup.Catalina.stop(Unknown Source)
	... 7 more
Dec 11, 2007 1:30:09 AM org.displaytag.filter.ResponseOverrideFilter
init

Best Regards,
RK

Re: Authorization

Posted by Jukka Zitting <ju...@gmail.com>.
Hi,

On Dec 13, 2007 9:22 PM, qcfireball <qc...@yahoo.com> wrote:
> It looks to me so far that Jackrabbit has no "native" Authorization provided
> with it.  I have looked at the source quite a bit the last couple days, and
> there does not seem to be anything of this sort.  Is this true?

Yes, currently we only ship a very rudimentary authorization mechanism
that basically just distinguishes between read-only access for a
specific "anonymous" account, and read-write access to everyone else.

> Are people implementing this themselves using the AccessManager interface?
> Are they using JeCARS to implement repository Authorization, or some other
> pre-built product?

Yes, there are a few threads (mostly on dev@) about implementing
custom AccessManagers. This is currently the recommended way of
implementing authorization policies in Jackrabbit.

Note that Day Software is currently contributing a rather
comprehensive ACL-based authorization component (see
https://issues.apache.org/jira/browse/JCR-1171), but this feature will
unfortunately not make it in the Jackrabbit 1.4 release. And if there
are other generic AccessManagers out there, I'd certainly be
interested in including also them in the Jackrabbit core.

BR,

Jukka Zitting