Hi,

I did some more research into this issue. I added the two properties to the 
jspwiki.properties to enable debug logs for authorization.

So when jspwiki starts I see the following logs which show the ACL's I have on 
two pages: Main and Administration:

2009-04-13 15:22:01,802 [server.startup : 0] DEBUG 
com.ecyrd.jspwiki.auth.acl.DefaultAclManager  -   user = Bhavani: 
(("com.ecyrd.jspwiki.auth.permissions.PagePermission","JSPWiki:Main","edit"))

2009-04-13 15:22:01,831 [server.startup : 0] DEBUG 
com.ecyrd.jspwiki.auth.acl.DefaultAclManager  - Adding new acl entry for edit
2009-04-13 15:22:01,831 [server.startup : 0] DEBUG 
com.ecyrd.jspwiki.auth.acl.DefaultAclManager  -   user = Administrator: 
(("com.ecyrd.jspwiki.auth.permissions.PagePermission","JSPWiki:Admin","edit"))

And whenever a user logs in I see the following stmt in the log:

2009-04-13 15:30:29,234 [WebContainer : 1] DEBUG 
com.ecyrd.jspwiki.auth.acl.DefaultAclManager  - Adding to old acl list: 
[WikiPrincipal (fullName): Bhavani], edit
2009-04-13 15:30:29,234 [WebContainer : 1] DEBUG 
com.ecyrd.jspwiki.auth.acl.DefaultAclManager  -   user = Bhavani: 
(("com.ecyrd.jspwiki.auth.permissions.PagePermission","JSPWiki:Main","edit"))

When this user tries to edit the 'Main' page which the user does not have 
access to, the user first of all is able to edit the page and then I see this 
in the log:

2009-04-13 15:32:26,710 [WebContainer : 3] DEBUG 
com.ecyrd.jspwiki.auth.acl.DefaultAclManager JSPWiki:/wiki/wiki/Main 
JSPWiki:http://w3dev.hitachigst.com/wiki/wiki/Main - Adding to old acl list: 
[WikiPrincipal (fullName): Bhavani], edit
2009-04-13 15:32:26,711 [WebContainer : 3] DEBUG 
com.ecyrd.jspwiki.auth.acl.DefaultAclManager JSPWiki:/wiki/wiki/Main 
JSPWiki:http://w3dev.hitachigst.com/wiki/wiki/Main -   user = Bhavani: 
(("com.ecyrd.jspwiki.auth.permissions.PagePermission","JSPWiki:Main","edit"))

-Bhavani



      

Reply via email to