[ccnet-user] Security configuration on CCNET project

[matt@groups]

Hi ccnet-users,

I'm currently setting up CC.NET on my project and that's running great
but I have some troubles configuring security. Basically I'd like to
have anonymous (ie no login required) access to project status and
build logs via the web dashboard or CCTray, then I'll use an Admin
user (login required) with full power for forcing builds,etc..

Here's my current security configuration :

<cruisecontrol>

  <internalSecurity>

    <cache type="inMemoryCache" duration="10" mode="sliding" />

    <users>
      <passwordUser name="admin" display="Admin" password="blah"/>
      <simpleUser name="*"/>
    </users>

    <permissions>

      <rolePermission name="Authenticated" defaultRight="Allow">
        <users>
          <userName name="admin"/>
        </users>
      </rolePermission>

      <rolePermission name="Guest" viewSecurity="Allow"
viewProject="Allow" viewConfiguration="Allow" defaultRight="Deny">
        <users>
          <userName name="*"/>
        </users>
      </rolePermission>

    </permissions>

  </internalSecurity>


     <project name="Project_Trunk">

       <security type="defaultProjectSecurity" guest="*">
           <permissions>
               <rolePermission name="Authenticated"
ref="Authenticated"/>
               <rolePermission name="Guest" ref="Guest"/>
           </permissions>
       </security>

       ...

      </project>

</cruisecontrol>

With the configuration above and without logging in, I cannot access
anything besides the basic dashboard view. I can't view the project or
the build log. It says : The session token is either invalid or is for
a session that has expired. I definitely must have missed something.

Any help with that would be really welcome.
Thanks!

To unsubscribe from this group, send email to 
ccnet-user+unsubscribegooglegroups.com or reply to this email with the words 
"REMOVE ME" as the subject.