Item10225: Access Control Failures since upgrade to foswiki 1.0.10 (debian version).

On December 26th, we updated a bunch of Debian foswiki packages:

foswiki_1.0.10-0_all.deb foswiki-calendarplugin_100708-215_all.deb foswiki-bugscontrib_101005-215_all.deb foswiki-checklistplugin_091021-215_all.deb foswiki-checklisttableplugin_090514-215_all.deb foswiki-databaseplugin_081129-215_all.deb foswiki-editrowplugin_090225-215_all.deb foswiki-jqueryplugin_101214-215_all.deb foswiki-ldapcontrib_101216-215_all.deb foswiki-moveabletypeskin_090220-215_all.deb foswiki-msofficeattachmentsashtmlplugin_090421-215_all.deb foswiki-wikidrawplugin_101024-215_all.deb foswiki-zoneplugin_101006-215_all.deb

Since the upgrade, we are having access control problems. We are using ldapcontrib for authentication which appears to still work. We also use ldapcontrib for group management and web access control. ldapcontrib is successfully reading our LDAP groups. However, since the upgrade access controls are no longer working. The only webs viewable by anyone are webs that have unrestricted viewing. The only webs that can have content changed on them are webs that have unrestricted content changing. This doesn't seem to be an ldap problem. For example:

in the Main web, I have group defined as SysAdminGroup. If I view that page, it lists myself and one other person as members of the group. It also states that the SysAdminGroup is the group that is allowed to change the page. However, if I try to edit the page, I receive the following error:

"Access check on SysAdminGroup failed. Action "CHANGE": access not allowed on topic." I get a similar error if I try to view any web that has restricted access but that I am supposed to be allowed to view.

-- BryanWalton - 04 Jan 2011

Does anybody have any ideas or input on this? This problem is making foswiki unusable for us.

-- BryanWalton - 10 Jan 2011

OK, this is embarrassing. Turns out that the AdminGroup.txt file somehow got messed up inside the data/Main folder. This is not a bug for the Foswiki developers. Please close this ticket. Again, sorry for the difficulty.

-- BryanWalton - 26 Jan 2011

Commenting is disabled while not logged in