[Carbon-dev] [jira] Closed: (CARBON-2566) Resource page goes to blank if non admin user click carbon/system resource link from activity search page.

Krishantha Samaraweera (JIRA) jira at wso2.org
Sun Feb 1 00:12:04 PST 2009


     [ https://wso2.org/jira/browse/CARBON-2566?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Krishantha Samaraweera closed CARBON-2566.
------------------------------------------


verified and close the issue.

> Resource page goes to blank if non admin user click carbon/system resource link from activity search page.
> ----------------------------------------------------------------------------------------------------------
>
>                 Key: CARBON-2566
>                 URL: https://wso2.org/jira/browse/CARBON-2566
>             Project: WSO2 Carbon
>          Issue Type: Bug
>          Components: Registry
>            Reporter: Krishantha Samaraweera
>            Assignee: Nandana Mihindukulasooriya
>             Fix For: Future
>
>
> How to recreate:
> 1. Login as admin.
> 2. Create a new user.
> 3. Create a role with all the permissions.
> 4. Assign the user to newly created role.
> 5. Sign-out and login again from that new user.
> 6. Go to activities search page
> 7. Do a search. 
> All the resources created under carbon and system collections will be displayed. Now click into one of the link with start with /carbon. You will be directed to blank page. If the user is not authorized to access to that resource, we should not display the link under activities results.
> exception.
> =======
> [2009-01-15 13:50:15,053] ERROR -  User test is not authorized to read the resource /system/queries/advanced0000000000T0. {org.wso2.carbon.registry.core.jdbc.Repository}
> [2009-01-15 13:50:15,068] ERROR -  User test is not authorized to read the resource /system/queries/advanced0000000000T0. {org.apache.axis2.rpc.receivers.RPCMessageReceiver}
> java.lang.reflect.InvocationTargetException
>         at sun.reflect.GeneratedMethodAccessor68.invoke(Unknown Source)
>         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>         at java.lang.reflect.Method.invoke(Method.java:585)
>         at org.apache.axis2.rpc.receivers.RPCUtil.invokeServiceClass(RPCUtil.java:191)
>         at org.apache.axis2.rpc.receivers.RPCMessageReceiver.invokeBusinessLogic(RPCMessageReceiver.java:103)
>         at org.apache.axis2.receivers.AbstractInOutMessageReceiver.invokeBusinessLogic(AbstractInOutMessageReceiver.java:40)
>         at org.apache.axis2.receivers.AbstractMessageReceiver.receive(AbstractMessageReceiver.java:100)
>         at org.apache.axis2.engine.AxisEngine.receive(AxisEngine.java:176)
>         at org.apache.axis2.transport.http.HTTPTransportUtils.processHTTPPostRequest(HTTPTransportUtils.java:275)
>         at org.apache.axis2.transport.http.AxisServlet.doPost(AxisServlet.java:133)
>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:709)
>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
>         at org.eclipse.equinox.http.servlet.internal.ServletRegistration.handleRequest(ServletRegistration.java:90)
>         at org.eclipse.equinox.http.servlet.internal.ProxyServlet.processAlias(ProxyServlet.java:111)
>         at org.eclipse.equinox.http.servlet.internal.ProxyServlet.service(ProxyServlet.java:67)
>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
>         at org.wso2.carbon.bridge.BridgeServlet.service(BridgeServlet.java:116)
>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
>         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)
>         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
>         at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:210)
>         at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)
>         at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
>         at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
>         at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)
>         at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:151)
>         at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:870)
>         at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:665)
>         at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:528)
>         at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:81)
>         at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:685)
>         at java.lang.Thread.run(Thread.java:595)
> Caused by: org.wso2.carbon.registry.core.secure.AuthorizationFailedException: User test is not authorized to read the resource /system/queries/advanced0000000000T0.
>         at org.wso2.carbon.registry.core.jdbc.Repository.get(Repository.java:101)
>         at org.wso2.carbon.registry.core.jdbc.handlers.filters.MediaTypeMatcher.handleGet(MediaTypeMatcher.java:83)
>         at org.wso2.carbon.registry.core.jdbc.handlers.HandlerManager.get(HandlerManager.java:134)
>         at org.wso2.carbon.registry.core.jdbc.BasicRegistry.get(BasicRegistry.java:181)
>         at org.wso2.carbon.registry.core.jdbc.AtomicRegistry.get(AtomicRegistry.java:177)
>         at org.wso2.carbon.registry.core.jdbc.JDBCRegistry.get(JDBCRegistry.java:443)
>         at org.wso2.carbon.registry.core.session.UserRegistry.get(UserRegistry.java:230)
>         at org.wso2.carbon.registry.mgt.ui.resource.services.utils.MetadataPopulator.populate(MetadataPopulator.java:36)
>         at org.wso2.carbon.registry.mgt.ui.resource.services.ResourceService.getMetadata(ResourceService.java:31)
>         ... 32 more
> [2009-01-15 13:50:16,240] ERROR -  org.apache.axis2.AxisFault: Mapping qname not fond for the package: org.wso2.carbon.registry.core.secure {org.apache.axis2.transport.http.AxisServlet}
> java.lang.RuntimeException: org.apache.axis2.AxisFault: Mapping qname not fond for the package: org.wso2.carbon.registry.core.secure
>         at org.apache.axis2.databinding.utils.BeanUtil.getPullParser(BeanUtil.java:305)
>         at org.apache.axis2.rpc.receivers.RPCUtil.generateFaultDetail(RPCUtil.java:467)
>         at org.apache.axis2.rpc.receivers.RPCMessageReceiver.invokeBusinessLogic(RPCMessageReceiver.java:160)
>         at org.apache.axis2.receivers.AbstractInOutMessageReceiver.invokeBusinessLogic(AbstractInOutMessageReceiver.java:40)
>         at org.apache.axis2.receivers.AbstractMessageReceiver.receive(AbstractMessageReceiver.java:100)
>         at org.apache.axis2.engine.AxisEngine.receive(AxisEngine.java:176)
>         at org.apache.axis2.transport.http.HTTPTransportUtils.processHTTPPostRequest(HTTPTransportUtils.java:275)
>         at org.apache.axis2.transport.http.AxisServlet.doPost(AxisServlet.java:133)
>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:709)
>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
>         at org.eclipse.equinox.http.servlet.internal.ServletRegistration.handleRequest(ServletRegistration.java:90)
>         at org.eclipse.equinox.http.servlet.internal.ProxyServlet.processAlias(ProxyServlet.java:111)
>         at org.eclipse.equinox.http.servlet.internal.ProxyServlet.service(ProxyServlet.java:67)
>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
>         at org.wso2.carbon.bridge.BridgeServlet.service(BridgeServlet.java:116)
>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
>         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)
>         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
>         at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:210)
>         at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)
>         at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
>         at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
>         at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)
>         at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:151)
>         at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:870)
>         at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:665)
>         at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:528)
>         at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:81)
>         at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:685)
>         at java.lang.Thread.run(Thread.java:595)
> Caused by: org.apache.axis2.AxisFault: Mapping qname not fond for the package: org.wso2.carbon.registry.core.secure
>         at org.apache.axis2.databinding.utils.BeanUtil.getPullParser(BeanUtil.java:107)
>         ... 29 more

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://wso2.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        



More information about the Carbon-dev mailing list