FYI, I ended up finding the issue.  The tinyMCE code ends up calling
/webtop/thirdparty/tiny_mce/tiny_mce_gzip.cfm which triggers webtop security
and instead of loading a script for tinyMCE, it ends up loading the login
page which is the reason for the errors.  There does not appear to be a
workaround for this so I created one by doing the following:

In /webtop/Application.cfc, I added the following lines:

<!--- Param override security to false --->
<cfset request.fc.overrideWebtopSecurity = false />

Then on line 26 (line 29 after the above change) I changed it from this:

<cfif not findNoCase( "login.cfm", cgi.script_name )>

To this:

<cfif not findNoCase( "login.cfm", cgi.script_name ) AND NOT
request.fc.overrideWebtopSecurity>

Finally, since the _serverSpecificRequestScope.cfm file in the project is
called before this, I added this in there:

<cfif FindNoCase("tiny_mce_gzip.cfm",CGI.script_name)>
    <cfset request.fc.overridewebtopsecurity = false />
</cfif>

The result is a per-project ability to override webtop security for certain
items (in this case, the richtext editor files needed to load tinyMCE).

I think this would be a "nice to have" in future additions (at least the
Application.cfc portion), that way upgrades don't break production code.

Thanks!

-Jake

On Thu, Aug 25, 2011 at 9:43 AM, Jake Churchill <[email protected]> wrote:

> I have a page that is meant for users without webtop permissions to submit
> a form:
>
> <ft:form>
>     <ft:object objectid="" typename="tfMessage" lfields="title,body"
> lhiddenFields="" legend="Forum Message" />
>
>     <ft:farcryButtonPanel>
>         <ft:button value="Save" color="orange" />
>         <ft:button value="Cancel" validate="false" />
>     </ft:farcryButtonPanel>
> </ft:form>
>
> The users who will access this must login but they are part of a group
> which has the most basic permissions (no webtop, just view permissions on a
> nav node).  If I login with this kind of user, message field which is set to
> richtext is only displayed as a textarea and the following js error is
> found:
>
> Error: missing } in XML expression
> Source File:
> http://della.local/webtop/thirdparty/tiny_mce/tiny_mce_gzip.js
> Line: 217, Column: 127
> Source Code:
>    $j("#f-btn-5E7A7503-CF28-11E0-8F3C000C297C8697").button({icons:
> {primary: '/webtop/images/crystal/22x22/actions/lock.png'}});
>
> However, if I am logged in with a user that does have webtop permissions,
> the tinyMCE editor is displayed correctly.  I would love this to work
> without webtop permissions but I'm not sure how to accomplish that.
>
> Any ideas?
>
> Thanks!
>
> -Jake Churchill
>

-- 
You received this message cos you are subscribed to "farcry-dev" Google group.
To post, email: [email protected]
To unsubscribe, email: [email protected]
For more options: http://groups.google.com/group/farcry-dev
--------------------------------
Follow us on Twitter: http://twitter.com/farcry

Reply via email to