[
https://issues.apache.org/jira/browse/JSPWIKI-931?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15191077#comment-15191077
]
Lance Bader commented on JSPWIKI-931:
-------------------------------------
I can recreate the problem at will now. Here is the scenario.
#Browser is on the main page.
#Session is expired manually using the Tomcat manager webapp.
#Click the link for the development page.
#Browser takes me to the login panel. Logging in automatically takes me to the
development page.
#Click the link to the blog page.
#Click the create button and get the edit page.
#Edit the page by adding a header (! markup). Click Save. Update entry is
attributed to me.
#Click link to go back to main blog page. *Note:* New entry is correctly
attributed to me.
#Click the Permalink to get to the new blog entry.
#Click Edit in the upper right tab to get the edit page.
#Add text to the page and click save. Revision is attributed to me.
#Click link to go back to main blog page. *Note:* The new entry is now
attributed to *unknown*.
Contents of the page.properties file after the first save.
{code}
# JSPWiki page properties for JSPWiki-931 trials_blogentry_110316_3. DO NOT
MODIFY!
#Fri Mar 11 15:28:47 UTC 2016
1.author=Lance Bader
{code}
Contents of the page.properties file after the second save.
{code}
# JSPWiki page properties for JSPWiki-931 trials_blogentry_110316_3. DO NOT
MODIFY!
#Fri Mar 11 15:30:56 UTC 2016
2.author=Lance Bader
1.author=unknown
{code}
> WeblogEntryPlugin creates entry "by unknown" when it should be an
> authenticated user
> ------------------------------------------------------------------------------------
>
> Key: JSPWIKI-931
> URL: https://issues.apache.org/jira/browse/JSPWIKI-931
> Project: JSPWiki
> Issue Type: Bug
> Affects Versions: 2.10.1
> Environment: AWS Linux, Tomcat 8.0.23, Java JDK 1.8.0_45
> Reporter: Lance Bader
> Attachments: EntryWithByUnkown.png, PermalinkShowsWho.png,
> jspwiki.policy
>
>
> Even though the wiki is configured so that only authenticated users and edit
> or even view pages in the JSPWiki, the WeblogEntryPlugin creates entries
> where the by line reads _By unknown_. 7 out of 21 entries are shown this
> way. If you follow the entry's Permalink, the entry will show _This page was
> last changed on 29-Feb-2016 18:44 by ..._ with the correct user name.
> I have not been able to pinpoint the scenario that exposes this defect, but I
> suspect it occurs when the user's Tomcat session expires, the create entry
> link is clicked, and then they are forced to log in again. However, there is
> reason to believe that it occurs if the user has ever been forced to log in
> after their session expires, even on some unrelated page.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
