portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Gonzalo Aguilar Delgado <gagui...@aguilardelgado.com>
Subject Re: Insufficient Rights
Date Wed, 12 May 2010 11:44:23 GMT
Hi Woonsan, 

But the problem is other. 

Guest should not have edit access to the default-page.psml. That's
right. 

But the problem is that the user gaguilar (for example) is logged in. It
has access to go to the Euromaster space.
It also can go to the page /Euromaster/euromaster-dashboard-page.psml

And it's there where it has access to edit that page. And also it's what
we are trying. 

We are trying to add a new portlet under this page
(/Euromaster/euromaster-dashboard-page.psml) with the user gaguilar
(exmpl)
that is logged in and has the rights to do it. 


And it works most of time. What's is strange is that the system is
trying to do other thing... Don't know why...

Do I explain myself?







____________________________________




  Gonzalo Aguilar Delgado
  Consultor CRM - Ingeniero en
Informática
        M. +34 607814276









El mié, 12-05-2010 a las 04:22 -0700, Woonsan Ko escribió:
> Hi Gonzalo,
> 
> Do you think the user guest does have EDIT access on the default-page.psml?
> If not, I think the ADD button shouldn't be displayed in toolbox because the JetspeedToolbox
portlet uses the same logic by using ContentPage#checkAccess().
> 
> Woonsan
> 
> 
> ----- Original Message ----
> > From: Gonzalo Aguilar Delgado <gaguilar@aguilardelgado.com>
> > To: Jetspeed Developers List <jetspeed-dev@portals.apache.org>
> > Sent: Wed, May 12, 2010 1:17:23 PM
> > Subject: Re: Insufficient Rights
> > 
> > Hi Woosan, 
> 
> This is the line. It says user guest but it was logged in... 
> > So what's
> the reason?
> 
> 12.05.2010 13:14:48 
> > WARN
> [org.apache.jetspeed.layout.impl.PortletActionSecurityConstraintsBehavior.checkAccess():72]

> > Insufficient access to page /default-page.psml by user guest
> 
> I attach 
> > complete log:
> 
> 
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage():534]

> > Missing/forbidden page selection fallback: request 
> > path=/Euromaster/euromaster-dashboard-page.psml, attempting fallback request 
> > path=/Euromaster
> java.lang.SecurityException: 
> > SecurityConstraintsImpl.checkConstraints():
> Access for view not 
> > permitted.
>     at
> 
> > href="http://org.apache.jetspeed.om.page.psml.SecurityConstraintsImpl.ch">org.apache.jetspeed.om.page.psml.SecurityConstraintsImpl.checkConstraints(SecurityConstraintsImpl.java:227)
>     
> > at
> org.apache.jetspeed.page.document.psml.AbstractNode.checkConstraints(AbstractNode.java:424)
>     
> > at
> 
> > href="http://org.apache.jetspeed.om.page.psml.AbstractBaseElement.ch">org.apache.jetspeed.om.page.psml.AbstractBaseElement.checkConstraints(AbstractBaseElement.java:313)
>     
> > at
> org.apache.jetspeed.om.page.psml.AbstractBaseElement.checkAccess(AbstractBaseElement.java:506)
>     
> > at
> 
> > href="http://org.apache.jetspeed.om.folder.psml.FolderImpl.ge">org.apache.jetspeed.om.folder.psml.FolderImpl.getFolder(FolderImpl.java:260)
>     
> > at
> org.apache.jetspeed.om.folder.psml.FolderImpl.getFolder(FolderImpl.java:273)
>     
> > at
> 
> > href="http://org.apache.jetspeed.om.folder.proxy.FolderProxy.ch">org.apache.jetspeed.om.folder.proxy.FolderProxy.checkAccessToNodeNotFound(FolderProxy.java:838)
>     
> > at
> org.apache.jetspeed.portalsite.view.SearchPathsSiteView.checkAccessToNodeNotFound(SearchPathsSiteView.java:608)
>     
> > at
> org.apache.jetspeed.portalsite.view.AbstractSiteView.getNodeView(AbstractSiteView.java:250)
>     
> > at
> org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:697)
>     
> > at
> org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:488)
>     
> > at
> org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:295)
>     
> > at
> org.apache.jetspeed.portalsite.impl.PortalSiteRequestContextImpl.getPage(PortalSiteRequestContextImpl.java:382)
>     
> > at
> org.apache.jetspeed.portalsite.impl.PortalSiteRequestContextImpl.getManagedPage(PortalSiteRequestContextImpl.java:301)
>     
> > at
> org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.setRequestPage(AbstractPageValveImpl.java:238)
>     
> > at
> org.apache.jetspeed.profiler.impl.ProfilerValveImpl.setRequestPage(ProfilerValveImpl.java:180)
>     
> > at
> org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.invoke(AbstractPageValveImpl.java:124)
>     
> > at 
> > org.apache.jetspeed.pipeline.JetspeedPipeline
> $Invocation.invokeNext(JetspeedPipeline.java:242)
>     
> > at
> org.apache.jetspeed.localization.impl.LocalizationValveImpl.invoke(LocalizationValveImpl.java:170)
>     
> > at 
> > org.apache.jetspeed.pipeline.JetspeedPipeline
> $Invocation.invokeNext(JetspeedPipeline.java:242)
>     
> > at 
> > org.apache.jetspeed.security.impl.AbstractSecurityValve
> $1.run(AbstractSecurityValve.java:138)
>     
> > at java.security.AccessController.doPrivileged(Native 
> > Method)
>     at 
> > javax.security.auth.Subject.doAsPrivileged(Subject.java:474)
>     
> > at
> org.apache.jetspeed.security.JSSubject.doAsPrivileged(JSSubject.java:179)
>     
> > at
> org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:132)
>     
> > at 
> > org.apache.jetspeed.pipeline.JetspeedPipeline
> $Invocation.invokeNext(JetspeedPipeline.java:242)
>     
> > at
> org.apache.jetspeed.container.url.impl.PortalURLValveImpl.invoke(PortalURLValveImpl.java:88)
>     
> > at 
> > org.apache.jetspeed.pipeline.JetspeedPipeline
> $Invocation.invokeNext(JetspeedPipeline.java:242)
>     
> > at
> org.apache.jetspeed.capabilities.impl.CapabilityValveImpl.invoke(CapabilityValveImpl.java:127)
>     
> > at 
> > org.apache.jetspeed.pipeline.JetspeedPipeline
> $Invocation.invokeNext(JetspeedPipeline.java:242)
>     
> > at
> org.apache.jetspeed.pipeline.JetspeedPipeline.invoke(JetspeedPipeline.java:163)
>     
> > at
> org.apache.jetspeed.engine.JetspeedEngine.service(JetspeedEngine.java:225)
>     
> > at
> org.apache.jetspeed.engine.JetspeedServlet.invoke(JetspeedServlet.java:300)
>     
> > at
> org.apache.jetspeed.engine.JetspeedServlet.service(JetspeedServlet.java:318)
>     
> > at 
> > javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
>     
> > at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
>     
> > at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>     
> > at
> org.apache.jetspeed.engine.servlet.XXSUrlAttackFilter.doFilter(XXSUrlAttackFilter.java:52)
>     
> > at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
>     
> > at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>     
> > at
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
>     
> > at
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
>     
> > at
> org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:433)
>     
> > at
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
>     
> > at
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
>     
> > at
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
>     
> > at
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
>     
> > at
> org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190)
>     
> > at 
> > org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291)
>     
> > at 
> > org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:769)
>     
> > at
> org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:698)
>     
> > at 
> > org.apache.jk.common.ChannelSocket
> $SocketConnection.runIt(ChannelSocket.java:891)
>     
> > at 
> > org.apache.tomcat.util.threads.ThreadPool
> $ControlRunnable.run(ThreadPool.java:690)
>     
> > at java.lang.Thread.run(Thread.java:636)
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage():687]

> > Request page: request path=/Euromaster
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage():534]

> > Missing/forbidden page selection fallback: request path=/Euromaster, attempting

> > fallback request path=/
> java.lang.SecurityException: 
> > SecurityConstraintsImpl.checkConstraints():
> Access for view not 
> > permitted.
>     
> > at
> org.apache.jetspeed.om.page.psml.SecurityConstraintsImpl.checkConstraints(SecurityConstraintsImpl.java:227)
>     
> > at
> org.apache.jetspeed.page.document.psml.AbstractNode.checkConstraints(AbstractNode.java:424)
>     
> > at
> org.apache.jetspeed.om.page.psml.AbstractBaseElement.checkConstraints(AbstractBaseElement.java:313)
>     
> > at
> org.apache.jetspeed.om.page.psml.AbstractBaseElement.checkAccess(AbstractBaseElement.java:506)
>     
> > at
> org.apache.jetspeed.om.folder.psml.FolderImpl.getFolder(FolderImpl.java:260)
>     
> > at
> org.apache.jetspeed.om.folder.psml.FolderImpl.getFolder(FolderImpl.java:273)
>     
> > at
> org.apache.jetspeed.om.folder.proxy.FolderProxy.checkAccessToNodeNotFound(FolderProxy.java:838)
>     
> > at
> org.apache.jetspeed.portalsite.view.SearchPathsSiteView.checkAccessToNodeNotFound(SearchPathsSiteView.java:608)
>     
> > at
> org.apache.jetspeed.portalsite.view.AbstractSiteView.getNodeView(AbstractSiteView.java:284)
>     
> > at
> org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:697)
>     
> > at
> org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:488)
>     
> > at
> org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage(PortalSiteSessionContextImpl.java:295)
>     
> > at
> org.apache.jetspeed.portalsite.impl.PortalSiteRequestContextImpl.getPage(PortalSiteRequestContextImpl.java:382)
>     
> > at
> org.apache.jetspeed.portalsite.impl.PortalSiteRequestContextImpl.getManagedPage(PortalSiteRequestContextImpl.java:301)
>     
> > at
> org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.setRequestPage(AbstractPageValveImpl.java:238)
>     
> > at
> org.apache.jetspeed.profiler.impl.ProfilerValveImpl.setRequestPage(ProfilerValveImpl.java:180)
>     
> > at
> org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.invoke(AbstractPageValveImpl.java:124)
>     
> > at 
> > org.apache.jetspeed.pipeline.JetspeedPipeline
> $Invocation.invokeNext(JetspeedPipeline.java:242)
>     
> > at
> org.apache.jetspeed.localization.impl.LocalizationValveImpl.invoke(LocalizationValveImpl.java:170)
>     
> > at 
> > org.apache.jetspeed.pipeline.JetspeedPipeline
> $Invocation.invokeNext(JetspeedPipeline.java:242)
>     
> > at 
> > org.apache.jetspeed.security.impl.AbstractSecurityValve
> $1.run(AbstractSecurityValve.java:138)
>     
> > at java.security.AccessController.doPrivileged(Native 
> > Method)
>     at 
> > javax.security.auth.Subject.doAsPrivileged(Subject.java:474)
>     
> > at
> org.apache.jetspeed.security.JSSubject.doAsPrivileged(JSSubject.java:179)
>     
> > at
> org.apache.jetspeed.security.impl.AbstractSecurityValve.invoke(AbstractSecurityValve.java:132)
>     
> > at 
> > org.apache.jetspeed.pipeline.JetspeedPipeline
> $Invocation.invokeNext(JetspeedPipeline.java:242)
>     
> > at
> org.apache.jetspeed.container.url.impl.PortalURLValveImpl.invoke(PortalURLValveImpl.java:88)
>     
> > at 
> > org.apache.jetspeed.pipeline.JetspeedPipeline
> $Invocation.invokeNext(JetspeedPipeline.java:242)
>     
> > at
> org.apache.jetspeed.capabilities.impl.CapabilityValveImpl.invoke(CapabilityValveImpl.java:127)
>     
> > at 
> > org.apache.jetspeed.pipeline.JetspeedPipeline
> $Invocation.invokeNext(JetspeedPipeline.java:242)
>     
> > at
> org.apache.jetspeed.pipeline.JetspeedPipeline.invoke(JetspeedPipeline.java:163)
>     
> > at
> org.apache.jetspeed.engine.JetspeedEngine.service(JetspeedEngine.java:225)
>     
> > at
> org.apache.jetspeed.engine.JetspeedServlet.invoke(JetspeedServlet.java:300)
>     
> > at
> org.apache.jetspeed.engine.JetspeedServlet.service(JetspeedServlet.java:318)
>     
> > at 
> > javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
>     
> > at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
>     
> > at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>     
> > at
> org.apache.jetspeed.engine.servlet.XXSUrlAttackFilter.doFilter(XXSUrlAttackFilter.java:52)
>     
> > at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
>     
> > at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>     
> > at
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
>     
> > at
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
>     
> > at
> org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:433)
>     
> > at
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
>     
> > at
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
>     
> > at
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
>     
> > at
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
>     
> > at
> org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190)
>     
> > at 
> > org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291)
>     
> > at 
> > org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:769)
>     
> > at
> org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:698)
>     
> > at 
> > org.apache.jk.common.ChannelSocket
> $SocketConnection.runIt(ChannelSocket.java:891)
>     
> > at 
> > org.apache.tomcat.util.threads.ThreadPool
> $ControlRunnable.run(ThreadPool.java:690)
>     
> > at java.lang.Thread.run(Thread.java:636)
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage():687]

> > Request page: request path=/
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.portalsite.impl.PortalSiteSessionContextImpl.selectRequestPage():856]

> > Selected folder default page: path=/default-page.psml
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentPage():548] 
> > PageLayoutComponentImpl.newContentPage(): construct ContentPage: 
> > id=/default-page.psml, path=/default-page.psml
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> > PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> > id=template-top2__jsSpaceNavigator, name=j2-admin::SpaceNavigator, 
> > locked=true
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> > PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> > id=template-top2__jstbLeft__jsPageNavigator, name=j2-admin::PageNavigator, 
> > locked=true
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> > PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> > id=template-top2__jstbLeft, name=jetspeed-layouts::VelocityOneColumn, 
> > locked=true
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> > PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> > id=template-top2__page-template__dp-1__dp-12, name=j2-admin::LoginPortlet, 
> > locked=false
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> > PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> > id=template-top2__page-template__dp-1__dp-22, 
> > name=j2-admin::ForgottenPasswordPortlet, locked=false
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> > PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> > id=template-top2__page-template__dp-1__dp-3, name=j2-admin::LocaleSelector, 
> > locked=false
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> > PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> > id=template-top2__page-template__dp-1, 
> > name=jetspeed-layouts::VelocityTwoColumns, locked=false
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> > PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> > id=template-top2__jstbRight__jsToolbox, name=j2-admin::JetspeedToolbox, 
> > locked=true
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> > PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> > id=template-top2__jstbRight, name=jetspeed-layouts::VelocityOneColumn, 
> > locked=true
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentFragment():1819] 
> > PageLayoutComponentImpl.newContentFragment(): constructed ContentFragment: 
> > id=template-top2, name=jetspeed-layouts::VelocityThreeColumns, 
> > locked=true
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.layout.impl.PageLayoutComponentImpl.newContentPage():574] 
> > PageLayoutComponentImpl.newContentPage(): constructed ContentPage: 
> > id=/default-page.psml
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.pipeline.valve.impl.AbstractPageValveImpl.invoke():132] 
> > Page path: /default-page.psml
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for layout.level2crm
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/layout/level2crm
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/layout/level2crm/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for portlet.clear
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/portlet/clear
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/portlet/clear/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for layout.clear
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/layout/clear
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/layout/clear/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for portlet.jetspeed
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/portlet/jetspeed
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/portlet/jetspeed/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for layout.clear
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/layout/clear
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/layout/clear/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for portlet.jetspeed
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/portlet/jetspeed
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/portlet/jetspeed/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for portlet.jetspeed
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/portlet/jetspeed
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/portlet/jetspeed/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for portlet.jetspeed
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/portlet/jetspeed
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/portlet/jetspeed/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for layout.clear
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/layout/clear
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/layout/clear/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for portlet.jetspeed
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/portlet/jetspeed
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/portlet/jetspeed/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> decorationConfigurationCacheCache:
> decorationConfigurationCacheMemoryStore 
> > hit for portlet.level2crm
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():150]
> BaseDecoration 
> > basePath: /decorations/portlet/level2crm
> 12.05.2010 13:14:48 
> > DEBUG
> [org.apache.jetspeed.decoration.BaseDecoration.<init>():151]
> BaseDecoration 
> > baseClientPath: /decorations/portlet/level2crm/html/es/ES
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionNameCacheCache: 
> > portletDefinitionNameCacheMemoryStore
> hit for 
> > j2-admin::SpaceNavigator
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionOidCacheCache: 
> > portletDefinitionOidCacheMemoryStore hit
> for 
> > href="http://org.apache.jetspeed.om">org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{724}
> 12.05.2010 
> > 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionNameCacheCache: 
> > portletDefinitionNameCacheMemoryStore
> hit for 
> > j2-admin::PageNavigator
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionOidCacheCache: 
> > portletDefinitionOidCacheMemoryStore hit
> for 
> > org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{725}
> 12.05.2010 
> > 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionNameCacheCache: 
> > portletDefinitionNameCacheMemoryStore
> hit for 
> > jetspeed-layouts::VelocityOneColumn
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionOidCacheCache: 
> > portletDefinitionOidCacheMemoryStore hit
> for 
> > org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{731}
> 12.05.2010 
> > 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionNameCacheCache: 
> > portletDefinitionNameCacheMemoryStore
> hit for 
> > j2-admin::LoginPortlet
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionOidCacheCache: 
> > portletDefinitionOidCacheMemoryStore hit
> for 
> > org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{650}
> 12.05.2010 
> > 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionNameCacheCache: 
> > portletDefinitionNameCacheMemoryStore
> hit for 
> > j2-admin::ForgottenPasswordPortlet
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionOidCacheCache: 
> > portletDefinitionOidCacheMemoryStore hit
> for 
> > org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{659}
> 12.05.2010 
> > 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionNameCacheCache: 
> > portletDefinitionNameCacheMemoryStore
> hit for 
> > j2-admin::LocaleSelector
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionOidCacheCache: 
> > portletDefinitionOidCacheMemoryStore hit
> for 
> > org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{657}
> 12.05.2010 
> > 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionNameCacheCache: 
> > portletDefinitionNameCacheMemoryStore
> hit for 
> > jetspeed-layouts::VelocityTwoColumns
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionOidCacheCache: 
> > portletDefinitionOidCacheMemoryStore hit
> for 
> > org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{733}
> 12.05.2010 
> > 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionNameCacheCache: 
> > portletDefinitionNameCacheMemoryStore
> hit for 
> > j2-admin::JetspeedToolbox
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionOidCacheCache: 
> > portletDefinitionOidCacheMemoryStore hit
> for 
> > org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{722}
> 12.05.2010 
> > 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionNameCacheCache: 
> > portletDefinitionNameCacheMemoryStore
> hit for 
> > jetspeed-layouts::VelocityOneColumn
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionOidCacheCache: 
> > portletDefinitionOidCacheMemoryStore hit
> for 
> > org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{731}
> 12.05.2010 
> > 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionNameCacheCache: 
> > portletDefinitionNameCacheMemoryStore
> hit for 
> > jetspeed-layouts::VelocityThreeColumns
> 12.05.2010 13:14:48 
> > DEBUG
> [net.sf.ehcache.Cache.searchInMemoryStore():1338]
> portletDefinitionOidCacheCache: 
> > portletDefinitionOidCacheMemoryStore hit
> for 
> > org.apache.jetspeed.om.portlet.impl.PortletDefinitionImpl{735}
> 12.05.2010 
> > 13:14:48 
> > WARN
> [org.apache.jetspeed.layout.impl.PortletActionSecurityConstraintsBehavior.checkAccess():72]

> > Insufficient access to page /default-page.psml by user 
> > guest
> 
> 
> 
> 
> 
> 
> 
> 
> ____________________________________
> 
> 
> 
> 
>   
> > Gonzalo Aguilar Delgado
>   Consultor CRM - Ingeniero 
> > en
> Informática
>         M. +34 
> > 607814276
> 
> 
> 
> 
> 
> 
> 
> 
> 
> El mié, 12-05-2010 a las 03:10 
> > -0700, Woonsan Ko escribió:
> > If you set the log level to WARN for 
> > org.apache.jetspeed.layout.impl.PortletActionSecurityConstraintsBehavior, then I

> > think you should get the following warning logs for the case:
> > 
> > 
> > log.warn("Insufficient access to page " + page.getPath() + " by user " + 
> > userName);
> > 
> > This log could be helpful to detect the 
> > problem.
> > 
> > Woonsan
> > 
> > 
> > ----- Original 
> > Message ----
> > > From: Gonzalo Aguilar Delgado <
> > ymailto="mailto:gaguilar@aguilardelgado.com" 
> > href="mailto:gaguilar@aguilardelgado.com">gaguilar@aguilardelgado.com>
> > 
> > > To: Jetspeed Developers List <
> > ymailto="mailto:jetspeed-dev@portals.apache.org" 
> > href="mailto:jetspeed-dev@portals.apache.org">jetspeed-dev@portals.apache.org>
> > 
> > > Sent: Wed, May 12, 2010 11:15:47 AM
> > > Subject: Re: Insufficient 
> > Rights
> > > 
> > > Curious thing about this is that Toolbox 
> > portlet shows the "Add" button
> > on 
> > > portlets because the 
> > user has rights but when you add a new portlet
> > to the 
> > > page 
> > the message is:
> > 
> > 12-may-2010 
> > > 11:13:24
> > 
> > org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper 
> > > 
> > toResponse
> > ADVERTENCIA: WebApplicationException has been caught : 
> > 
> > > Insufficient
> > access to view page
> > 
> > 
> > 
> > I can say that rights are there 
> > > right...
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > ____________________________________
> > 
> > 
> > 
> > 
> > 
> >  
> > > Gonzalo Aguilar Delgado
> >   Consultor 
> > CRM - Ingeniero 
> > > en
> > Informática
> >      
> >    M. +34 
> > > 607814276
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > El mié, 12-05-2010 a las 
> > 11:08 
> > > +0200, Gonzalo Aguilar Delgado escribió:
> > > Hi 
> > all, 
> > > 
> > > After 
> > > working for a while with 
> > jetspeed I started to receive following
> > > 
> > > 
> > logs...
> > > 
> > > 
> > > 12-may-2010 10:51:36
> > 
> > > 
> > > org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper 
> > toResponse
> > > 
> > > ADVERTENCIA: WebApplicationException has 
> > been caught : Insufficient
> > > 
> > > access to view 
> > page
> > > 12-may-2010 10:51:49
> > > 
> > > 
> > org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> > > 
> > 
> > > ADVERTENCIA: WebApplicationException has been caught : 
> > Insufficient
> > > 
> > > access to view page
> > > 
> > 12-may-2010 10:51:54
> > > 
> > > 
> > org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> > > 
> > 
> > > ADVERTENCIA: WebApplicationException has been caught : 
> > Insufficient
> > > 
> > > access to view page
> > > 
> > 12-may-2010 10:52:11
> > > 
> > > 
> > org.apache.cxf.jaxrs.impl.WebApplicationExceptionMapper toResponse
> > > 
> > 
> > > ADVERTENCIA: WebApplicationException has been caught : 
> > Insufficient
> > > 
> > > access to view page
> > > 
> > 
> > > 
> > > This causes user to lose 
> > > permissions. 
> > And I don't find a reason why.
> > > Logs only shows that.  
> > 
> > > 
> > > 
> > > 
> > > Now I'm deleting old logs and 
> > rebooting tomcat to see 
> > > if I can have a
> > > clearer 
> > cause. 
> > > 
> > > Sometimes it starts to 
> > > work 
> > normally without human intervention.
> > > 
> > > 
> > > 
> > Does anyone 
> > > suffer of the same problem?
> > > 
> > > 
> > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > ____________________________________
> > > 
> > > 
> > > 
> > 
> > > 
> > > 
> > >   Gonzalo Aguilar Delgado
> > 
> > >   Consultor CRM - Ingeniero 
> > > en
> > > 
> > Informática
> > >         M. +34 
> > > 
> > 607814276
> > > 
> > > 
> > > 
> > > 
> > > 
> > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > 
> > > 
> > > 
> > > 
> > > 
> > ---------------------------------------------------------------------
> > 
> > > To 
> > > unsubscribe, e-mail: 
> > > ymailto="mailto:
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org"

> > 
> > > href="mailto:
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org">
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> > 
> > > 
> > > For additional commands, e-mail: 
> > > 
> > ymailto="mailto:
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org"

> > 
> > > href="mailto:
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org">
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> > 
> > > 
> > > 
> > 
> > 
> > 
> > ---------------------------------------------------------------------
> > To 
> > 
> > > unsubscribe, e-mail: 
> > > ymailto="mailto:
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org"

> > 
> > > href="mailto:
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org">
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> > 
> > For 
> > > additional commands, e-mail: 
> > > ymailto="mailto:
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org"

> > 
> > > href="mailto:
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org">
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> > 
> > 
> > 
> >      
> > 
> > 
> > ---------------------------------------------------------------------
> > To 
> > unsubscribe, e-mail: 
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> > 
> > For additional commands, e-mail: 
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> > 
> > 
> 
> 
> ---------------------------------------------------------------------
> To 
> > unsubscribe, e-mail: 
> > ymailto="mailto:jetspeed-dev-unsubscribe@portals.apache.org" 
> > href="mailto:jetspeed-dev-unsubscribe@portals.apache.org">jetspeed-dev-unsubscribe@portals.apache.org
> For 
> > additional commands, e-mail: 
> > ymailto="mailto:jetspeed-dev-help@portals.apache.org" 
> > href="mailto:jetspeed-dev-help@portals.apache.org">jetspeed-dev-help@portals.apache.org
> 
> 
>       
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
> For additional commands, e-mail: jetspeed-dev-help@portals.apache.org
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Mime
View raw message