Bug 19791 - AccessDeniedException is thrown in structure.create()
Summary: AccessDeniedException is thrown in structure.create()
Status: NEW
Alias: None
Product: Slide
Classification: Unclassified
Component: Core (show other bugs)
Version: 1.0.16 Stable
Hardware: Other other
: P3 normal (vote)
Target Milestone: ---
Assignee: Slide Developer List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-05-09 05:09 UTC by Willie Vu
Modified: 2004-11-16 19:05 UTC (History)
0 users


Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Willie Vu 2003-05-09 05:09:23 UTC 
Here is the scenario:

/                                [/users/root-/actions-inheritable]
/files/john/resources            [/users/john-/actions-inheritable]
/files/john/resources/folder1

Notice that john has all permissions under /files/john/resources.

Now, if I use structure helper to create /files/john/resources/folder1 using
john, we get AccessDeniedException!!!

Access denied on / by user /users/john for action /actions/read
org.apache.slide.security.AccessDeniedException: Access denied on / by user
/users/john for action /actions/read
  at org.apache.slide.security.SecurityImpl.checkCredentials(SecurityImpl.java:389)
  at org.apache.slide.structure.StructureImpl.create(StructureImpl.java:326)


A workaround is to grant john /actions/read along /, /files/john.  However, it
is very inconvenient as users in our system come and go.  Adding these extra
permissions are undesirable.