>Another thing is that if you have *two* JSPWiki instances, we will >randomly use one (since there can be only one Java policy file - it's >a part of Java's security model.
This explains why I get this warning from the logs: WARN com.ecyrd.jspwiki.auth.PolicyLoader - You have set your ' java.security.policy' to point at '/file:/home/claudia/Tools/apache- tomcat-5.5.20/webapps/wiki4/WEB-INF/jspwiki.policy', but that file does not seem to exist. I'll continue anyway, since this may be something specific to your servlet container. Just consider yourself warned. However I can under no conditions get the container to point to the right security policy file. I have undeployed all other wikis and resorted back to the original downloaded just called it wiki4. The physical file is there so why can't it find it???? On 8/20/07, James Cowan <[EMAIL PROTECTED]> wrote: > > > thanks. the very admin/SecurityConfig.jsp confirmed that it was looking at > the policy of the default jspwiki installation. > > James > > ----- Original Message ----- > From: "Janne Jalkanen" <[EMAIL PROTECTED]> > To: "JSPWiki Users discussion list" <[email protected]> > Sent: Monday, August 20, 2007 2:46 PM > Subject: Re: [Jspwiki-users] jspwiki.policy and anonymous users > > > > You are on the right track here. My guess is that you are editing a > > different file than what JSPWiki is using. Please check from your log > > file where jspwiki thinks the policy file is (we output it at > > startup). > > > > For example, you might have a global policy file. > > > > Another thing is that if you have *two* JSPWiki instances, we will > > randomly use one (since there can be only one Java policy file - it's > > a part of Java's security model. We've fixed this in 2.6, though > > ;-). In this case, you must use the command-line switch > > "-Djava.security.policy" to point at a global policy file. > > > > /Janne > > > > On Mon, Aug 20, 2007 at 02:37:23PM +0100, James Cowan wrote: > >> > >> I want to stop anonymous users from being able to edit pages etc. > >> > >> I have removed the roles from the Anonymous and Asserted users as below > >> and > >> restarted tomcat but this seems to have no effect. > >> > >> Is there something else I need to do? > >> > >> James > >> > >> grant signedBy "jspwiki", > >> principal com.ecyrd.jspwiki.auth.authorize.Role "Anonymous" { > >> permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:*", > >> "view"; > >> permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:*", > >> "modify"; > >> permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", > >> "createPages"; > >> permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", > >> "editPreferences"; > >> permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", > >> "editProfile"; > >> permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", > >> "login"; > >> }; > >> > >> changed to > >> > >> grant signedBy "jspwiki", > >> principal com.ecyrd.jspwiki.auth.authorize.Role "Anonymous" { > >> permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:*", > >> "view"; > >> permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", > >> "login"; > >> }; > >> > >> _______________________________________________ > >> This is the Jspwiki-users mailing list, in which we discuss the > >> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues. > >> For development discussion, please join jspwiki-dev. > >> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users > >> http://www.jspwiki.org/JSPWikiMailingList > > _______________________________________________ > > This is the Jspwiki-users mailing list, in which we discuss the > > stable release (even-numbered, 2.4.x, 2.6.x), and user-issues. > > For development discussion, please join jspwiki-dev. > > http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users > > http://www.jspwiki.org/JSPWikiMailingList > > _______________________________________________ > This is the Jspwiki-users mailing list, in which we discuss the > stable release (even-numbered, 2.4.x, 2.6.x), and user-issues. > For development discussion, please join jspwiki-dev. > http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users > http://www.jspwiki.org/JSPWikiMailingList > _______________________________________________ This is the Jspwiki-users mailing list, in which we discuss the stable release (even-numbered, 2.4.x, 2.6.x), and user-issues. For development discussion, please join jspwiki-dev. http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users http://www.jspwiki.org/JSPWikiMailingList
