Igor Vaynberg wrote:
can you try with 1.3.1, 1.3.0. would help us isolate where the problem is...

I tried with 1.3.0 as well, still the same problem.

My authorization-strategy is quite involved.. I can't see any immediate 
problems, but I'm posting it here just in case:

                getSecuritySettings().setAuthorizationStrategy(new 
IAuthorizationStrategy() {

                        public boolean isActionAuthorized(Component component, 
Action action) {
                                return true;
                        }

                        public boolean isInstantiationAuthorized(Class 
componentClass) {
                                TornadoSession s = (TornadoSession) 
Session.get();

                if(MailuserBasePage.class.isAssignableFrom(componentClass)) {
                    if(s.getCurrentMailuser() == null) {
                        throw new 
RestartResponseAtInterceptPageException(MailLoginPage.class);
                    }
                }
                /* Instance pages needs instance */
                                if 
(BasePage.class.isAssignableFrom(componentClass)) {
                                        if (s.getInstanceId() == null)
                                                throw new 
RestartResponseAtInterceptPageException(NoInstancePage.class);

                                        /* Instance has access to cms module */
                                        CmsModule cmsAnnotation = (CmsModule) 
componentClass.getAnnotation(CmsModule.class);
                                        if (cmsAnnotation != null) {
                                                if 
(!webModuleDao.instanceHasModule(s.getInstanceId(), cmsAnnotation.id())) {
                                                        throw new 
RestartResponseAtInterceptPageException(NoModuleAccessPage.class);
                                                }
                                        }
                                }
                                
                                /* New-instance wizard can only be calles from 
tornado */
                                
if(NewInstanceBasePage.class.isAssignableFrom(componentClass) && !new 
Integer(1).equals(TornadoSession.get().getInstanceId()))
                                        throw new 
RestartResponseAtInterceptPageException(NoModuleAccessPage.class);
                                
                                /* Protected Control Panel pages */
                                
if(CpBasePage.class.isAssignableFrom(componentClass)) {
                                        if(s.getCurrentCustomer() == null)
                        throw new 
RestartResponseAtInterceptPageException(CpLoginPage.class);

                                }

if(PartnerBasePage.class.isAssignableFrom(componentClass) && (TornadoSession.get().getCurrentCustomer() == null || !TornadoSession.get().getCurrentCustomer().getCustomerType().getId().equals(Customer.CTYPE_PARTNER)))
                                        throw new 
RestartResponseAtInterceptPageException(PartnerLoginPage.class);


                                /* CMS Admin */
                                
if(AdminBasePage.class.isAssignableFrom(componentClass)) {
                                        if(s.getCurrentUser() == null || 
!s.getCurrentUser().getInstance().getId().equals(s.getInstanceId()))
                                                throw new 
RestartResponseAtInterceptPageException(AdminLogin.class);
                                }
                        
                                /* Only instance 1 can bootstrap */
                                
if(BootstrapModuleAdmin.class.isAssignableFrom(componentClass) && 
!s.getInstanceId().equals(new Integer(1)))
                                        throw new 
RestartResponseAtInterceptPageException(AdminHomePage.class);
                                
                                return true;
                        }
                });
                
        }

-- Edvin

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to