[jboss-jira] [JBoss JIRA] Resolved: (JBPORTAL-2200) AccessDeniedException on accessing secured resources in anonymous mode

Boleslaw Dawidowicz (JIRA) jira-events at lists.jboss.org
Mon Oct 20 04:12:20 EDT 2008 

     [ https://jira.jboss.org/jira/browse/JBPORTAL-2200?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Boleslaw Dawidowicz resolved JBPORTAL-2200.
-------------------------------------------

    Resolution: Done


done

> AccessDeniedException on accessing secured resources in anonymous mode
> ----------------------------------------------------------------------
>
>                 Key: JBPORTAL-2200
>                 URL: https://jira.jboss.org/jira/browse/JBPORTAL-2200
>             Project: JBoss Portal
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Portal Core
>    Affects Versions: 2.6.6 Final
>            Reporter: Martin Putz
>            Assignee: Boleslaw Dawidowicz
>             Fix For: 2.6.7 Final
>
>
> Accessing secured content as anonymous user such as:
> http://localhost:8080/portal/portal/admin
> leads to the stack trace shown below in the console output. Besides that, everything works as expected.
> 2008-10-16 11:55:18,097 ERROR [org.jboss.portal.core.model.portal.control.portal.DefaultPortalControlPolicy] Rendering portlet window  produced an error
> org.jboss.portal.core.controller.AccessDeniedException: View permission not granted has denied access: /admin
> 	at org.jboss.portal.core.model.portal.command.PortalObjectCommand.enforceSecurity(PortalObjectCommand.java:90)
> 	at org.jboss.portal.core.aspects.controller.PolicyEnforcementInterceptor.invoke(PolicyEnforcementInterceptor.java:66)
> 	at org.jboss.portal.core.controller.ControllerInterceptor.invoke(ControllerInterceptor.java:40)
> 	at org.jboss.portal.common.invocation.Invocation.invokeNext(Invocation.java:115)
> 	at org.jboss.portal.core.aspects.controller.node.PortalNodeInterceptor.invoke(PortalNodeInterceptor.java:81)
> 	at org.jboss.portal.core.controller.ControllerInterceptor.invoke(ControllerInterceptor.java:40)
> 	at org.jboss.portal.common.invocation.Invocation.invokeNext(Invocation.java:115)
> 	at org.jboss.portal.core.aspects.controller.ControlInterceptor.invoke(ControlInterceptor.java:56)
> 	at org.jboss.portal.core.controller.ControllerInterceptor.invoke(ControllerInterceptor.java:40)
> 	at org.jboss.portal.common.invocation.Invocation.invokeNext(Invocation.java:115)
> 	at org.jboss.portal.core.aspects.controller.NavigationalStateInterceptor.invoke(NavigationalStateInterceptor.java:42)
> 	at org.jboss.portal.core.controller.ControllerInterceptor.invoke(ControllerInterceptor.java:40)
> 	at org.jboss.portal.common.invocation.Invocation.invokeNext(Invocation.java:115)
> 	at org.jboss.portal.core.controller.ajax.AjaxInterceptor.invoke(AjaxInterceptor.java:56)
> 	at org.jboss.portal.core.controller.ControllerInterceptor.invoke(ControllerInterceptor.java:40)
> 	at org.jboss.portal.common.invocation.Invocation.invokeNext(Invocation.java:115)
> 	at org.jboss.portal.core.aspects.controller.ResourceAcquisitionInterceptor.invoke(ResourceAcquisitionInterceptor.java:50)
> 	at org.jboss.portal.core.controller.ControllerInterceptor.invoke(ControllerInterceptor.java:40)
> 	at org.jboss.portal.common.invocation.Invocation.invokeNext(Invocation.java:115)
> 	at org.jboss.portal.common.invocation.Invocation.invoke(Invocation.java:157)
> 	at org.jboss.portal.core.controller.ControllerContext.execute(ControllerContext.java:134)
> 	at org.jboss.portal.core.controller.Controller.processCommand(Controller.java:235)
> 	at org.jboss.portal.core.controller.Controller.handle(Controller.java:217)
> 	at org.jboss.portal.server.RequestControllerDispatcher.invoke(RequestControllerDispatcher.java:51)
> 	at org.jboss.portal.common.invocation.Invocation.invokeNext(Invocation.java:131)
> 	at org.jboss.portal.core.cms.aspect.IdentityBindingInterceptor.invoke(IdentityBindingInterceptor.java:47)
> 	at org.jboss.portal.server.ServerInterceptor.invoke(ServerInterceptor.java:38)
> 	at org.jboss.portal.common.invocation.Invocation.invokeNext(Invocation.java:115)
> 	at org.jboss.portal.server.aspects.server.ContentTypeInterceptor.invoke(ContentTypeInterceptor.java:68)
> 	at org.jboss.portal.server.ServerInterceptor.invoke(ServerInterceptor.java:38)
> 	at org.jboss.portal.common.invocation.Invocation.invokeNext(Invocation.java:115)
> 	at org.jboss.portal.core.aspects.server.PortalContextPathInterceptor.invoke(PortalContextPathInterceptor.java:45)
> 	at org.jboss.portal.server.ServerInterceptor.invoke(ServerInterceptor.java:38)
> 	at org.jboss.portal.common.invocation.Invocation.invokeNext(Invocation.java:115)
> 	at org.jboss.portal.core.aspects.server.LocaleInterceptor.invoke(LocaleInterceptor.java:96)
> 	at org.jboss.portal.server.ServerInterceptor.invoke(ServerInterceptor.java:38)
> 	at org.jboss.portal.common.invocation.Invocation.invokeNext(Invocation.java:115)
> 	at org.jboss.portal.core.aspects.server.UserInterceptor.invoke(UserInterceptor.java:246)
> 	at org.jboss.portal.server.ServerInterceptor.invoke(ServerInterceptor.java:38)
> 	at org.jboss.portal.common.invocation.Invocation.invokeNext(Invocation.java:115)
> 	at org.jboss.portal.server.aspects.server.SignOutInterceptor.invoke(SignOutInterceptor.java:98)
> 	at org.jboss.portal.server.ServerInterceptor.invoke(ServerInterceptor.java:38)
> 	at org.jboss.portal.common.invocation.Invocation.invokeNext(Invocation.java:115)
> 	at org.jboss.portal.core.impl.api.user.UserEventBridgeTriggerInterceptor.invoke(UserEventBridgeTriggerInterceptor.java:65)
> 	at org.jboss.portal.server.ServerInterceptor.invoke(ServerInterceptor.java:38)
> 	at org.jboss.portal.common.invocation.Invocation.invokeNext(Invocation.java:115)
> 	at org.jboss.portal.core.aspects.server.IdentityCacheInterceptor.invoke(IdentityCacheInterceptor.java:68)
> 	at org.jboss.portal.server.ServerInterceptor.invoke(ServerInterceptor.java:38)
> 	at org.jboss.portal.common.invocation.Invocation.invokeNext(Invocation.java:115)
> 	at org.jboss.portal.core.aspects.server.TransactionInterceptor.org$jboss$portal$core$aspects$server$TransactionInterceptor$invoke$aop(TransactionInterceptor.java:49)
> 	at org.jboss.portal.core.aspects.server.TransactionInterceptor$invoke_N5143606530999904530.invokeNext(TransactionInterceptor$invoke_N5143606530999904530.java)
> 	at org.jboss.aspects.tx.TxPolicy.invokeInOurTx(TxPolicy.java:79)
> 	at org.jboss.aspects.tx.TxInterceptor$RequiresNew.invoke(TxInterceptor.java:253)
> 	at org.jboss.portal.core.aspects.server.TransactionInterceptor$invoke_N5143606530999904530.invokeNext(TransactionInterceptor$invoke_N5143606530999904530.java)
> 	at org.jboss.aspects.tx.TxPolicy.invokeInOurTx(TxPolicy.java:79)
> 	at org.jboss.aspects.tx.TxInterceptor$RequiresNew.invoke(TxInterceptor.java:262)
> 	at org.jboss.portal.core.aspects.server.TransactionInterceptor$invoke_N5143606530999904530.invokeNext(TransactionInterceptor$invoke_N5143606530999904530.java)
> 	at org.jboss.portal.core.aspects.server.TransactionInterceptor.invoke(TransactionInterceptor.java)
> 	at org.jboss.portal.server.ServerInterceptor.invoke(ServerInterceptor.java:38)
> 	at org.jboss.portal.common.invocation.Invocation.invokeNext(Invocation.java:115)
> 	at org.jboss.portal.server.aspects.LockInterceptor$InternalLock.invoke(LockInterceptor.java:69)
> 	at org.jboss.portal.server.aspects.LockInterceptor.invoke(LockInterceptor.java:130)
> 	at org.jboss.portal.common.invocation.Invocation.invokeNext(Invocation.java:115)
> 	at org.jboss.portal.common.invocation.Invocation.invoke(Invocation.java:157)
> 	at org.jboss.portal.server.servlet.PortalServlet.service(PortalServlet.java:250)
> 	at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
> 	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> 	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> 	at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96)
> 	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
> 	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> 	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:230)
> 	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
> 	at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:179)
> 	at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:433)
> 	at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:84)
> 	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
> 	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:104)
> 	at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:157)
> 	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
> 	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:241)
> 	at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
> 	at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:580)
> 	at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
> 	at java.lang.Thread.run(Thread.java:595)

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

More information about the jboss-jira mailing list