[
https://issues.apache.org/jira/browse/JSPWIKI-931?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15185859#comment-15185859
]
brushed commented on JSPWIKI-931:
---------------------------------
I tested the creation of a new WeblogEntry, which seemed to create correctly a
new page with the right Author name.
However, the information displayed by the WeblogPlugin is apparently based on
the *first version* of the blog-entry page. So the displayed Author and
CreationDate are the attributes of the first version; not the informations of
the latest version.
If the first version of a page was created with an "unknown" author, that's
what you will see in the blog-entry information.
(check out WeblogPlugin.java, findBlogEntries() ...)
I find this behaviour unexpected (but could be intentional). IMO it would be
logical to always show the information of the latest version of the weblog
entry.
dirk
> WeblogEntryPlugin creates entry "by unknown" when it should be an
> authenticated user
> ------------------------------------------------------------------------------------
>
> Key: JSPWIKI-931
> URL: https://issues.apache.org/jira/browse/JSPWIKI-931
> Project: JSPWiki
> Issue Type: Bug
> Affects Versions: 2.10.1
> Environment: AWS Linux, Tomcat 8.0.23, Java JDK 1.8.0_45
> Reporter: Lance Bader
> Attachments: EntryWithByUnkown.png, PermalinkShowsWho.png,
> jspwiki.policy
>
>
> Even though the wiki is configured so that only authenticated users and edit
> or even view pages in the JSPWiki, the WeblogEntryPlugin creates entries
> where the by line reads _By unknown_. 7 out of 21 entries are shown this
> way. If you follow the entry's Permalink, the entry will show _This page was
> last changed on 29-Feb-2016 18:44 by ..._ with the correct user name.
> I have not been able to pinpoint the scenario that exposes this defect, but I
> suspect it occurs when the user's Tomcat session expires, the create entry
> link is clicked, and then they are forced to log in again. However, there is
> reason to believe that it occurs if the user has ever been forced to log in
> after their session expires, even on some unrelated page.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
