[ 
https://issues.apache.org/jira/browse/JSPWIKI-931?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15189432#comment-15189432
 ] 

Lance Bader commented on JSPWIKI-931:
-------------------------------------

Yes.  We have trouble pinpointing the failing scenario as well.

I got another instance today.  I think this is what I did.

# Browser was on the blog page.
# Session timed out.
# Clicked the create button.
# Browser took me to the login.
# Navigated back to the blog page.
# Clicked the create button and got the edit page.
# Realized that I needed text from my last entry before I was ready to edit.
# Clicked cancel and browser back to return to the blog page.
# Used the Permalink to go to my last blog.
# Clicked Edit to get the edit page.
# Press Ctrl-A followed by Ctrl-C to copy the markup to the clipboard.
# Clicked cancel.
# Clicked return to the blog link.
# Clicked the create button to get the edit page.
# Pressed Ctrl-V to load the edit window from the clipboard.
# Edited the entry and clicked Save.  Noticed that the page was attributed to 
me as expected.
# Clicked the link to return to the blog.  BAM!  The entry is attributed to 
unknown.

{code}
# JSPWiki page properties for Sprint3_blogentry_100316_2. DO NOT MODIFY!
#Thu Mar 10 15:12:43 UTC 2016
2.author=Lance Bader
1.author=unknown
{code}

I hope I remembered correctly but I am sure that I did not re-edit an existing 
entry.

So I am willing to believe that the expiring session is a red herring.  Perhaps 
it's all about creating an entry, cancelling without saving, creating another 
entry.

> WeblogEntryPlugin creates entry "by unknown" when it should be an 
> authenticated user
> ------------------------------------------------------------------------------------
>
>                 Key: JSPWIKI-931
>                 URL: https://issues.apache.org/jira/browse/JSPWIKI-931
>             Project: JSPWiki
>          Issue Type: Bug
>    Affects Versions: 2.10.1
>         Environment: AWS Linux, Tomcat 8.0.23, Java JDK 1.8.0_45
>            Reporter: Lance Bader
>         Attachments: EntryWithByUnkown.png, PermalinkShowsWho.png, 
> jspwiki.policy
>
>
> Even though the wiki is configured so that only authenticated users and edit 
> or even view pages in the JSPWiki, the WeblogEntryPlugin creates entries 
> where the by line reads _By unknown_.  7 out of 21 entries are shown this 
> way.  If you follow the entry's Permalink, the entry will show _This page was 
> last changed on 29-Feb-2016 18:44 by ..._ with the correct user name.
> I have not been able to pinpoint the scenario that exposes this defect, but I 
> suspect it occurs when the user's Tomcat session expires, the create entry 
> link is clicked, and then they are forced to log in again.  However, there is 
> reason to believe that it occurs if the user has ever been forced to log in 
> after their session expires, even on some unrelated page.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to