Item5524: LdapContrib breaks EditTablePlugin authorization

pencil
Priority: Normal
Current State: No Action Required
Released In: n/a
Target Release: n/a
Applies To: Extension
Component: LdapContrib
Branches:
Reported By: CharlieHerron
Waiting For:
Last Change By: MichaelDaum
On Twiki 4.2.0, we have just implemented LdapContrib, which we eventually configured to work very well. Using web-level and topic-level access control works great using ldap logins and TWiki groups. Then I noticed that whenever I hit the button to Edit on a EditTable, I get an "Access Denied" oops, even though editing the topic which contains the table works fine. This problem seems to only occur when there is a topic- or web-level access control in effect (ALLOWTOPICVIEW, ALLOWWEBCHANGE, etc). I added a little extra debug output to EditTable's Core.pm and get the following in debug.txt:

| 11 Apr 2008 - 10:44 | - TWiki::Plugins::EditTablePlugin::initPlugin( SslInfo ) is OK
| 11 Apr 2008 - 10:44 | - EditTablePlugin::commonTagsHandler( SslInfo )
| 11 Apr 2008 - 10:44 | - EditTablePlugin::doEnableEdit( SysEng, SslInfo )
| 11 Apr 2008 - 10:44 | - TWiki::Func::getWikiName() = CharlesHerron
- TWiki::Func::checkAccessPermission('change', CharlesHerron, undef, SslInfo, SysEng)
| 11 Apr 2008 - 10:44 | - TWiki::Plugins::EditTablePlugin::initPlugin( SslInfo ) is OK

From the error.log (LdapContrib's output):

constructed a new LdapContrib object
cacheAge=1579, lastUpdate=1207923697, refresh=0
cacheAge=1579, lastUpdate=1207923697, refresh=0
called lookupWikiName(cherron)
called lookupWikiName(cherron)
called lookupWikiName(CharlieHerron)
called lookupWikiName(CharlieHerron)
called lookupWikiName(CharlesHerron)
finishing
constructed a new LdapContrib object
cacheAge=1580, lastUpdate=1207923697, refresh=0
cacheAge=1580, lastUpdate=1207923697, refresh=0
called lookupWikiName(cherron)
called lookupWikiName(cherron)
finishing

-- TWiki:Main/CharlieHerron - 11 Apr 2008

I can confirm this behavior. It seems that only LDAP Users are concerned. If you login in as a TWikiAdmin the EditTablePlugin works just fine.

-- GerhardHeeke - 04 Jun 2008

The patches to TWiki-4.2's user code in Item5118 fixed that for me.

-- MichaelDaum - 04 Jun 2008

Doesn't seem to be related to LdapContrib.

-- MichaelDaum - 09 Nov 2010

ItemTemplate edit

Summary LdapContrib breaks EditTablePlugin authorization
ReportedBy CharlieHerron
Codebase
SVN Range TWiki-5.0.0, Thu, 03 Apr 2008, build 16612
AppliesTo Extension
Component LdapContrib
Priority Normal
CurrentState No Action Required
WaitingFor
Checkins
TargetRelease n/a
ReleasedIn n/a
Topic revision: r5 - 09 Nov 2010, MichaelDaum
The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. See Copyright Statement. Creative Commons License    Legal Imprint    Privacy Policy