You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@jspwiki.apache.org by "Florian Holeczek (JIRA)" <ji...@apache.org> on 2011/09/01 09:26:11 UTC

[jira] [Updated] (JSPWIKI-281) Unexpected permission required for editing page references

     [ https://issues.apache.org/jira/browse/JSPWIKI-281?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Florian Holeczek updated JSPWIKI-281:
-------------------------------------

    Summary: Unexpected permission required for editing page references  (was: Unexspected permission required for editing page references)

only fixed typo in the summary

> Unexpected permission required for editing page references
> ----------------------------------------------------------
>
>                 Key: JSPWIKI-281
>                 URL: https://issues.apache.org/jira/browse/JSPWIKI-281
>             Project: JSPWiki
>          Issue Type: Bug
>          Components: Authentication&Authorization
>    Affects Versions: 2.6.3
>         Environment: Linux, tomcat 5.5
>            Reporter: Ulrich Gemkow
>            Assignee: Andrew Jaquith
>            Priority: Minor
>
> I tried to restrict authenticated users ability to create and modifiy pages to pages with names starting with selected letters (i.e. PO*).
> I used the following settings in the policy file
>    permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:PO*", "modify,rename";
>    permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:IF*", "modify,rename";
>    permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:IO*", "modify,rename";
>    permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", "createPages";
> However this did not work . Whenever a used wanted to add a reference to another page in a page he edited (typing "[a" for
> example), he got the error poopup "No permission to access this AJAX method!". The message results from the
> JSONRPCManager which tried to display related page names.
> I had to add
>    permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:*", "rename";
>    permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:*", "rename";
>    permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:*", "rename";
> to the policy (trial and error, I did not really understood where the problem comes from) to make this message
> disappear.
> This behaviour is at least unexpected. I cannot judge whether it is a bug.
> Thanks for listening and the great work!

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira