- xwiki-users@xwiki.org - lists.xwiki.org

[xwiki-users] security breach?
by Ricardo.Julio.Rodriguez.Fernandez＠sergas.es 14 Feb '12

14 Feb '12

Hi! Under certain circunstances I'm not able to identify, even though a given I've no access to a given XWiki page, it is possible to access/download their attached files provided you know their URLs. Please, could you figure out why this could happen? Thanks! This is causing me some serious problems here. Running XWiki Enterprise 2.4.30451. Greetings! Ricardo -- Ricardo Rodríguez Research Management and Promotion Technician Health Research Institute of Santiago de Compostela (IDIS) http://www.idisantiago.es Nota: A información contida nesta mensaxe e os seus posibles documentos adxuntos é privada e confidencial e está dirixida únicamente ó seu destinatario/a. Se vostede non é o/a destinatario/a orixinal desta mensaxe, por favor elimínea. A distribución ou copia desta mensaxe non está autorizada. Nota: La información contenida en este mensaje y sus posibles documentos adjuntos es privada y confidencial y está dirigida únicamente a su destinatario/a. Si usted no es el/la destinatario/a original de este mensaje, por favor elimínelo. La distribución o copia de este mensaje no está autorizada. See more languages: http://www.sergas.es/aviso_confidencialidad.htm

5 14

[xwiki-users] help
by Jasvent Singh 14 Feb '12

14 Feb '12

Regards Jaswant Singh Eperium Business Soln. Pvt. Ltd. eperium. e-commerceunlimited ________________________________ From: "users-request(a)xwiki.org" <users-request(a)xwiki.org> To: users(a)xwiki.org Sent: Tuesday, 14 February 2012 5:30 PM Subject: users Digest, Vol 55, Issue 29 Send users mailing list submissions to users(a)xwiki.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.xwiki.org/mailman/listinfo/users or, via email, send a message with subject or body 'help' to users-request(a)xwiki.org You can reach the person managing the list at users-owner(a)xwiki.org When replying, please edit your Subject line so it is more specific than "Re: Contents of users digest..." Today's Topics: 1. Re: width=120 (Paul Libbrecht) ---------------------------------------------------------------------- Message: 1 Date: Tue, 14 Feb 2012 11:23:17 +0100 From: Paul Libbrecht <paul(a)hoplahup.net> To: XWiki Users <users(a)xwiki.org> Subject: Re: [xwiki-users] width=120 Message-ID: <CA2ED1A4-B46F-4457-97FB-997BAA02F7CD(a)hoplahup.net> Content-Type: text/plain; charset=iso-8859-1 Le 14 f?vr. 2012 ? 10:28, Vincent Massol a ?crit : >> (in the syntax definition??) > > Definitely not in the syntax. > > This should go in the documentation for the Image Plugin and the Platform extension of Rendering, i.e. both on http://extensions.xwiki.org. you need to make it central in the documentation. Documenting all the details in an extension is useful for sure. But the basic should be referenced from the syntax I feel. Le 14 f?vr. 2012 ? 10:00, Ludovic Dubost a ?crit : > As for why it was not used in Curriki, I think it did not exist when most > of Curriki was developped. Also the issue with possible failures made it > dangerous to use when you don't control the images passed through the > system. Thanks, that is the perfect explanation. And indeed we have places where it miserably fails. We'll be sure to use it better on the new core. paul ------------------------------ _______________________________________________ users mailing list users(a)xwiki.org http://lists.xwiki.org/mailman/listinfo/users End of users Digest, Vol 55, Issue 29 *************************************

1 0

Re: [xwiki-users] Workspaces and group management + access rights bug?
by Dmitry Bakbardin 14 Feb '12

14 Feb '12

oops... sorry Once again I found very strange IMO behaviour of access rights in 3.4 XEM. Access rights are simply ignored. How to reproduce: 1) Clean installation of 3.4 XEM 2) Default Admin creates "test" workspace 3) Test user in XWikiAllGroup in main wiki, not invited in Workspace "test" 4) The task was to restrict access to the workspace to test user. I failed to do this in all possible ways. If Test user is not in the workspace, I can't restrict access to him and workspace is ALWAYS visible to Test user. Access was restricted even to ALL XWikiAllGroup in Main Wiki. Works fine for main wiki, BUT, when you enter direct link like /xwiki/wiki/test/view/Main/WebHome it simply ignores all restrictions both on main wiki and workspace. So, as a result, there is no way to restrict access to users/group of users (or I didn't find it). E.g. I really don't like when my customers have an authorized access to "internal" staff :-))). From that point of view I either don't understand Workspace access rights management quite good, or it's not ready to use yet. Is it a bug, or it's a misused (by me) feature? Kind regards, Dmitry 14 февраля 2012, 00:04 от Dmitry Bakbardin <haru_mamburu(a)mail.ru>: Hi, For now owner can invite users to workspace. Is there any possibility to invite GROUPS? I need following scenario: - Main Wiki Group A, B, C - Workspace "One" invites Group A, B and denies Group C to see workspace "One" - I register a new user and add it to group A - This user AUTOMATICALLY gains access/invitation to workspace. - I delete user from the Group A and user is rejected by workspace "one" also automatically Is there any simple way to do this? Kind regards, Dmitry Kind regards, Dmitry Kind regards, Dmitry

2 1

[xwiki-users] width=120
by Paul Libbrecht 14 Feb '12

14 Feb '12

Hello fellow xwiki users, we discovered recently the usage of the width parameter when delivering a picture from an xwiki document attachment. Surprisingly this is available in our production server, based on the grumpy xwiki 1.5, but has not been used in the UI of Curriki which has, however, been made by a team of XWiki SàRL originally. - can someone describe me how this feature is working? - is the resulting downscaled image cached in file or in ram? - has there been a different implementation between the current xwiki (e.g. 3.4) and 1.5? - except for the CPU hogging of computing the downscaled version, is there any reason not to use this feature? (e.g. RAM overloading?). thanks in advance Paul

4 7

[xwiki-users] Problems with Livetable Macro on MsSql database
by Richard Hierlmeier 14 Feb '12

14 Feb '12

Hi users, I installed xwiki-3.3.1 using MsSql. I works quite well. I found only one problem. The lifetable marco in the document index page does not work. In the log file I found the following logs: 2012-02-14 08:50:41,161 ERROR [http://cloud12-288:8080/xwiki/bin/get/XWiki/LiveTableResults?outputSyntax=p…] o.h.u.JDBCExceptionReporter [JDBCExceptionReporter.java:234] Fehler beim Konvertieren des varchar-Datentyps in float. The jdbc error message is in German, because it is the german jdbc driver. Translated into english it means Error: Cannot convert varchar datatype into float Can someone help me. Is it an error on the jdbc level or is it a problem of the life table marco? Richard

1 0

Re: [xwiki-users] Workspaces and group management
by Dmitry Bakbardin 13 Feb '12

13 Feb '12

Hi, All, again! I found very strange IMO behaviour of access rights in 3.4 XEM. How to reproduce: 1) Clean installation of 3.4 XEM 2) Default Admin creates "test" workspace 14 февраля 2012, 00:04 от Dmitry Bakbardin <haru_mamburu(a)mail.ru>: Hi, For now owner can invite users to workspace. Is there any possibility to invite GROUPS? I need following scenario: - Main Wiki Group A, B, C - Workspace "One" invites Group A, B and denies Group C to see workspace "One" - I register a new user and add it to group A - This user AUTOMATICALLY gains access/invitation to workspace. - I delete user from the Group A and user is rejected by workspace "one" also automatically Is there any simple way to do this? Kind regards, Dmitry Kind regards, Dmitry

1 0

Re: [xwiki-users] Performance tuning for growing wiki
by goldring, richard 13 Feb '12

13 Feb '12

Hi Andrey, You're running using Jetty and HSQL? I had similar problems and eventually moved to Apache Tomcat and MySQL which are more memory efficient - suggest you to the same although I don't lnow if there is another way but I exported my pages to .xar files which I had to break into small .xar file in order to reimport into my new xwiki on Tomcat and MySql (I kept the two installations running until we were happy we had copied everything across ... This process wasn't easy! Hope that helps. Regards, Richard -----Original Message----- From: users-bounces(a)xwiki.org [mailto:[email protected]] On Behalf Of Crowd Covered Sent: 13 February 2012 17:21 To: users(a)xwiki.org Subject: [xwiki-users] Performance tuning for growing wiki Hi guys, Thanks again for great collaborative tool! We currently have about 1200 pages inside, many with objects, where several people search/read/edit info every day. And we are experiencing performance problems - at least once a day, sometimes more often wiki becomes unresponsive for 3-10 minutes while having high CPU load (my guess is either page file swapping or garbage collection by JVM), Out Of Memory errors becoming more often (sometimes wiki is stable for 1-2 weeks, sometimes fails several times a day). Additionally we've got repeating problems even with quite small attachments 500Kb-2Mb (I am aware of x27 DB storage trouble) According to recommendation in guides and some talks on the Internet I tend to try database tuning or change. Could you please recommend a good candidate among freely available databases or even give a hints on HSQLDB tuning (maybe changing default memory mode to cached)? I've taken a look at H2 vs. HSQLDB comparison but there are quite controversial opinions... Current servlet container configuration is -Xms700m -Xmx700m, no tuning for database, computer is a virtual machine on a farm with 2 GHz CPU and 1 Gb RAM. BTW, is this in general expected behavior for such configuration? Many thanks, Andrey _______________________________________________ users mailing list users(a)xwiki.org http://lists.xwiki.org/mailman/listinfo/users

6 6

[xwiki-users] Performance tuning for growing wiki
by Crowd Covered 13 Feb '12

13 Feb '12

Hi guys, Thanks again for great collaborative tool! We currently have about 1200 pages inside, many with objects, where several people search/read/edit info every day. And we are experiencing performance problems - at least once a day, sometimes more often wiki becomes unresponsive for 3-10 minutes while having high CPU load (my guess is either page file swapping or garbage collection by JVM), Out Of Memory errors becoming more often (sometimes wiki is stable for 1-2 weeks, sometimes fails several times a day). Additionally we've got repeating problems even with quite small attachments 500Kb-2Mb (I am aware of x27 DB storage trouble) According to recommendation in guides and some talks on the Internet I tend to try database tuning or change. Could you please recommend a good candidate among freely available databases or even give a hints on HSQLDB tuning (maybe changing default memory mode to cached)? I've taken a look at H2 vs. HSQLDB comparison but there are quite controversial opinions... Current servlet container configuration is -Xms700m -Xmx700m, no tuning for database, computer is a virtual machine on a farm with 2 GHz CPU and 1 Gb RAM. BTW, is this in general expected behavior for such configuration? Many thanks, Andrey

2 1

[xwiki-users] XWiki 3.4, error when exporting PDF
by Ari 13 Feb '12

13 Feb '12

I try to generate PDF from XWiki 3.4. The installation was made from scratch, and imported the documents via XARs from XWiki 3.0.3. >From wiki the error shows as follows: *Detailed information: * * Error number 11015 in 11: Exception while exporting Wrapped Exception: Error number 12002 in 12: Exception while exporting pdf Wrapped Exception: .fop (Permission denied) com.xpn.xwiki.XWikiException: Error number 11015 in 11: Exception while exporting Wrapped Exception: Error number 12002 in 12: Exception while exporting pdf Wrapped Exception: .fop (Permission denied) at com.xpn.xwiki.web.ExportAction.render(ExportAction.java:72) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:231) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:116) at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431) at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236) at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196) at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:414) at javax.servlet.http.HttpServlet.service(HttpServlet.java:621) at javax.servlet.http.HttpServlet.service(HttpServlet.java:722) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:304) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) at com.xpn.xwiki.web.ActionFilter.doFilter(ActionFilter.java:128) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) at org.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:144) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) at com.xpn.xwiki.plugin.webdav.XWikiDavFilter.doFilter(XWikiDavFilter.java:68) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) at org.xwiki.container.servlet.filters.internal.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:217) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) at org.xwiki.container.servlet.filters.internal.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:109) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:224) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:169) at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:168) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:100) at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:929) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:405) at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:964) at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:515) at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:304) at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908) at java.lang.Thread.run(Thread.java:662) Caused by: com.xpn.xwiki.XWikiException: Error number 12002 in 12: Exception while exporting pdf Wrapped Exception: .fop (Permission denied) at com.xpn.xwiki.pdf.impl.PdfExportImpl.createException(PdfExportImpl.java:699) at com.xpn.xwiki.pdf.impl.PdfExportImpl.renderXSLFO(PdfExportImpl.java:468) at com.xpn.xwiki.pdf.impl.PdfExportImpl.exportXHTML(PdfExportImpl.java:402) at com.xpn.xwiki.pdf.impl.PdfExportImpl.exportHtml(PdfExportImpl.java:298) at com.xpn.xwiki.pdf.impl.PdfExportImpl.export(PdfExportImpl.java:279) at com.xpn.xwiki.web.ExportAction.export(ExportAction.java:209) at com.xpn.xwiki.web.ExportAction.render(ExportAction.java:69) ... 39 more * When I dig the tomcat logs, the error seems to be *[WIKUIURL/format=pdf&pdfcover=1&pdfcover=0&pdftoc=1&pdftoc=0&comments=0&attachments=0] WARN c.x.x.p.i.PdfURLFactory - Failed to save image for PDF export java.io.IOException: Failed to create temporary PDF export file with prefix [pdf], suffix [.] in directory [/opt/tomcat/xwiki34/apache-tomcat-7.0.22/work/Catalina/10.10.1.134/xwiki/YfUqLnp5]* However, the directory listed has enough permission for the user which is used when executing the tomcat.. *root@xwiki34:# ls -lah /opt/tomcat/xwiki34/apache-tomcat-7.0.22/work/Catalina/10.10.1.134/xwiki/ drwxr-xr-x 5 tomcatxwiki34 tomcatxwiki34 4.0K Feb 13 09:33 . drwxr-xr-x 8 tomcatxwiki34 tomcatxwiki34 4.0K Feb 3 13:05 .. drwxr-xr-x 2 tomcatxwiki34 tomcatxwiki34 4.0K Feb 3 13:08 charts drwxr-xr-x 2 tomcatxwiki34 tomcatxwiki34 4.0K Feb 3 13:08 svg drwxr-xr-x 4 tomcatxwiki34 tomcatxwiki34 4.0K Feb 3 14:27 xwiki.plugin.image * properties/conf: *xwiki.cfg:xwiki.temp.dir=/tmp/xwiki/ xwiki.cfg:xwiki.tmp.dir=/tmp xwiki.cfg:xwiki.work.dir=/opt/tomcat/xwiki34/xwiki/work-dir* And there is also sufficient permissions in these directories as well.. Is there any advises of where to find more information or how this could be fixed? With Regards, ari

1 0

[xwiki-users] Groovy script to XWiki 2.0 Syntax - constructing URLs
by Ricardo.Julio.Rodriguez.Fernandez＠sergas.es 12 Feb '12

12 Feb '12

Good morning! I'm trying to move a simple script from XWiki 1.0 Syntax to 2.0 one. It includes this lines with which I can easily use SQL to retrieve pages and present a list of URLs to reach those pages: db2 = Sql.newInstance("jdbc:mysql://hostname/schema", "ROuser", "readonly", "com.mysql.jdbc.Driver") List areas = db2.rows('select... println areas.collect{"<a href='../XWiki/${it.XWD_NAME}'>${it.XWD_TITLE}</a>"}.join("<br>") As I'm having problems to include both Velocity (for instance, to control the information panel visibility) and Groovy scripts in the same page when using 1.0 syntax, I'm trying to move it to 2.0. But using the same lines results in that exact text being displayed in the page, but not the URL showed in 1.0 syntax. Please, could you tell me how could I get the same results with XWiki 2.0 syntax? Thanks!!! I know there are a lot of different methods to get the same results within XWiki, but using SQL in this case is useful to me now as kind of probe of concept showing how easily could we link to "external" datasources by using XWiki. -- Ricardo Rodríguez Research Management and Promotion Technician Health Research Institute of Santiago de Compostela (IDIS) http://www.idisantiago.es Nota: A información contida nesta mensaxe e os seus posibles documentos adxuntos é privada e confidencial e está dirixida únicamente ó seu destinatario/a. Se vostede non é o/a destinatario/a orixinal desta mensaxe, por favor elimínea. A distribución ou copia desta mensaxe non está autorizada. Nota: La información contenida en este mensaje y sus posibles documentos adjuntos es privada y confidencial y está dirigida únicamente a su destinatario/a. Si usted no es el/la destinatario/a original de este mensaje, por favor elimínelo. La distribución o copia de este mensaje no está autorizada. See more languages: http://www.sergas.es/aviso_confidencialidad.htm

3 7