Ok so I'm using xwiki 1.0 standalone. Setup is pretty simple. I just unzipped the files and ran the start_xwiki.sh and opened it up in my browser. I haven't made any modifications (except changing the port number to 80 in the startup script). My problem is that a lot of the security related options don't seem to work. For example, when I create a new group, it doesn't always show up under http://192.168.1.27/xwiki/bin/view/XWiki/XWikiGroups and if I try to recreate that group it says it already exists. Also, when adding a user to a group by clicking the little + button to add a new line for a new user (on http://192.168.1.27/xwiki/bin/inline/XWiki/GroupName), the link goes to http://192.168.1.27xwiki/bin/objectadd/XWiki/GroupName?classname=XWiki.XWik… Notice that there's no "/" in between the IP address and "xwiki", so of course the "page cannot be displayed". If I fix the link myself in the address bar and add the missing "/" then the page allowing me to add a user comes up correctly. If I change the startup script to go back to port 8080 (default), then the link is http://192.168.1.27:8080/bin/objectadd/XWiki/GroupName?classname=XWiki.XWik…Name. Of course, now there's a "/" but "/xwiki" is missing and I still get a "page cannot be displayed". My other problem is that once I do get a user and/or group created and I want to set permissions on a particular "space" (i.e. I do or don't want it to show up altogether for different users), I can deny all the permissions available on the administration "space rights" tab, but the space is still visible on the right hand side, it's just that it returns the user an error if they don't have rights. So I figured I might be able to hide the space altogether and saw the "space prefs" tab and thought that might be useful. Of course the link for this tab is http://192.168.1.27xwiki/bin/objectadd/SpaceName/WebPreferences?classname=X…ce=SpaceName. Notice the lack of "/" in between the IP address and "xwiki" again at the beginning of the link. Of course I can't bring that page up either. I'm using a completely default xwiki 1.0 standalone version downloaded from xwiki.org on Fedora 7. Apache is not running, just xwiki (tomcat, I guess). It seems rather bizarre that I'd have so many problems with something I didn't change at all, except for the port number. Of course, changing the port number back just mangles the above mentioned links differently. It doesn't fix the problem. Seems like I'm missing something pretty fundamental here. Any ideas what I'm doing wrong? -BJ Quinn -- View this message in context: http://www.nabble.com/Security-problems-tf4119184.html#a11714695 Sent from the XWiki- Users mailing list archive at Nabble.com.