Ok so I'm using xwiki 1.0 standalone. Setup is pretty simple. I just
unzipped the files and ran the start_xwiki.sh and opened it up in my
browser. I haven't made any modifications (except changing the port number
to 80 in the startup script).
My problem is that a lot of the security related options don't seem to work.
For example, when I create a new group, it doesn't always show up under
http://192.168.1.27/xwiki/bin/view/XWiki/XWikiGroups and if I try to
recreate that group it says it already exists.
Also, when adding a user to a group by clicking the little + button to add a
new line for a new user (on
http://192.168.1.27/xwiki/bin/inline/XWiki/GroupName), the link goes to
http://192.168.1.27xwiki/bin/objectadd/XWiki/GroupName?classname=XWiki.XWik…
Notice that there's no "/" in between the IP address and "xwiki",
so of
course the "page cannot be displayed". If I fix the link myself in the
address bar and add the missing "/" then the page allowing me to add a user
comes up correctly. If I change the startup script to go back to port 8080
(default), then the link is
http://192.168.1.27:8080/bin/objectadd/XWiki/GroupName?classname=XWiki.XWik…Name.
Of course, now there's a "/" but "/xwiki" is missing and I still
get a "page
cannot be displayed".
My other problem is that once I do get a user and/or group created and I
want to set permissions on a particular "space" (i.e. I do or don't want it
to show up altogether for different users), I can deny all the permissions
available on the administration "space rights" tab, but the space is still
visible on the right hand side, it's just that it returns the user an error
if they don't have rights. So I figured I might be able to hide the space
altogether and saw the "space prefs" tab and thought that might be useful.
Of course the link for this tab is
http://192.168.1.27xwiki/bin/objectadd/SpaceName/WebPreferences?classname=X…ce=SpaceName.
Notice the lack of "/" in between the IP address and "xwiki" again at
the
beginning of the link. Of course I can't bring that page up either. I'm
using a completely default xwiki 1.0 standalone version downloaded from
xwiki.org on Fedora 7. Apache is not running, just xwiki (tomcat, I guess).
It seems rather bizarre that I'd have so many problems with something I
didn't change at all, except for the port number. Of course, changing the
port number back just mangles the above mentioned links differently. It
doesn't fix the problem. Seems like I'm missing something pretty
fundamental here. Any ideas what I'm doing wrong?
-BJ Quinn
--
View this message in context:
http://www.nabble.com/Security-problems-tf4119184.html#a11714695
Sent from the XWiki- Users mailing list archive at
Nabble.com.