Uploaded image for project: 'Hippo CMS'
  1. Hippo CMS
  2. CMS-1655

Uncatched AccessControlException's in CMS

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Top
    • Resolution: Fixed
    • None
    • 2.01.00m07-rc1
    • front-end-core
    • None

    Description

      The privilege 'editor' is checked for the user author which results in a AccessControlException which should be catched.

      Reproduce:

      • login as author
      • browse tab
      • Docments -> articles -> myarticle1

      Stack:
      02.10.2008 11:57:22 INFO [org.hippoecm.repository.security.SecurityManager.createSecurityProviders():236] Security provider 'internal' init
      ialized.
      02.10.2008 11:58:09 ERROR [org.apache.wicket.RequestCycle.logRuntimeException():1432] Privileges 'editor' denied for /content/articles/myart
      icle2/myarticle2
      java.security.AccessControlException: Privileges 'editor' denied for /content/articles/myarticle2/myarticle2
      at org.hippoecm.repository.jackrabbit.SessionImplHelper.checkPermission(SessionImplHelper.java:160)
      at org.hippoecm.repository.jackrabbit.XASessionImpl.checkPermission(XASessionImpl.java:115)
      at org.hippoecm.repository.decorating.SessionDecorator.checkPermission(SessionDecorator.java:220)
      at org.hippoecm.repository.impl.WorkflowManagerImpl.getWorkflowNode(WorkflowManagerImpl.java:136)
      at org.hippoecm.repository.impl.WorkflowManagerImpl.getWorkflowDescriptor(WorkflowManagerImpl.java:232)
      at org.hippoecm.repository.decorating.server.ServerWorkflowManager.getWorkflowDescriptor(ServerWorkflowManager.java:51)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
      at java.lang.reflect.Method.invoke(Method.java:585)
      at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:294)
      at sun.rmi.transport.Transport$1.run(Transport.java:153)
      at java.security.AccessController.doPrivileged(Native Method)
      at sun.rmi.transport.Transport.serviceCall(Transport.java:149)
      at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:466)
      at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:707)
      at java.lang.Thread.run(Thread.java:595)

      Attachments

        Activity

          People

            fvlankvelt Frank van Lankvelt (Inactive)
            bvdschans Bart van der Schans (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: