[mapguide-users] Permissions problem...

[Andrew DeMerchant]

Sounds about right......at least I know I'm not missing something 
obvious. I'll submit an artifact...

Andrew


Walt Welton-Lair wrote:
> I tested this a little more, and here's what I found.
>  
> When opening a web layout using AJAX viewer, the login prompt appears 
> immediately, before *any* server request is even made.  The first 
> server operation then ends up being an authentication request 
> (OpAuthenticate).  After this come the requests for resources - the 
> web layout, etc.  These succeed because we have provided credentials.
>  
> When opening a web layout using DWF viewer, the behavior is 
> different.  There's a couple of authentication requests that get made 
> using "anonymous" user, but no login prompt has yet been displayed.  
> Then comes a request to get the web layout resource, again using 
> "anonymous".  This fails because user "anonymous" does not have access 
> to the library.  The browser then displays the exception message.
>  
> At this point the web layout hasn't been loaded and DWF Viewer hasn't 
> even entered into the picture.  So this is a MapGuide web tier issue...
>  
> Walt
> ------------------------------------------------------------------------
> *From:* Andrew DeMerchant [mailto:andrew.demerchant at gemtec.ca]
> *Sent:* Tuesday, November 07, 2006 6:29 PM
> *To:* users at mapguide.osgeo.org
> *Subject:* Re: [mapguide-users] Permissions problem...
>
> Ya, that's sort of what I figured was happening....that it's not 
> asking me to log in, because it doesn't have permission to ask...which 
> is a bit silly. If that's the case, then it's a fairly annoying bug....
>
> Andrew
>
> Walt Welton-Lair wrote:
>> So it's a question of order.  Should MapGuide first authenticate 
>> before it tries to access the resource (and find out that you don't 
>> have permission)?  It looks like it does it the other way - it checks 
>> whether you have permission before authenticating.  I don't know the 
>> right answer.
>>  
>> I do know that the DWF Viewer code which handles the HTTP request 
>> knows nothing about MapGuide and doesn't know what to do with the 
>> permission denied response.
>>  
>> Walt
>>
>> ------------------------------------------------------------------------
>> *From:* Andrew DeMerchant [mailto:andrew.demerchant at gemtec.ca]
>> *Sent:* Tuesday, November 07, 2006 6:15 PM
>> *To:* users at mapguide.osgeo.org
>> *Subject:* Re: [mapguide-users] Permissions problem...
>>
>> Ah...sorry. I should have posted the error that it gives me.....When 
>> I try to use the DWF Viewer, this is what I get:
>>
>> Permission denied to resource: Library://test/
>>
>> Permission denied to resource: Library://test/ Exception occurred in 
>> method MgResourceHeaderManager.CheckPermission at line 2495 in file 
>> c:\build_tux_area\mgdev_opensource\server\src\services\resource\ResourceHeaderManager.cpp 
>>
>>
>>
>> Andrew
>>
>>
>> Walt Welton-Lair wrote:
>>> So DWF Viewer doesn't prompt for credentials.  Do you get back any 
>>> data or does it just sit there?
>>>  
>>> Ultimately DWF Viewer simply makes a Mapping Service GetMap HTTP 
>>> request via WinINet.  It prompts for credentials when it gets a 401 
>>> response to that initial request, and then resubmits the GetMap 
>>> request.  If it just sits there that means it didn't get a 401 
>>> response and it thinks it's done.
>>>  
>>> Walt
>>>
>>> ------------------------------------------------------------------------
>>> *From:* Andrew DeMerchant [mailto:andrew.demerchant at gemtec.ca]
>>> *Sent:* Tuesday, November 07, 2006 4:53 PM
>>> *To:* users at mapguide.osgeo.org
>>> *Subject:* [mapguide-users] Permissions problem...
>>>
>>> I've got a project that I want to password protect....I've given a 
>>> specific MapGuide User read permissions to my library (removed 
>>> 'Everyone', and added 'Administrator' as read/write as well). What's 
>>> happening now is that the DWF viewer isn't asking me to log in. If I 
>>> change my URL to use the AJAX viewer, it works fine (asks me to log 
>>> in, and then works as it should). So, for example:
>>>
>>> http://host/mapguide/mapviewerdwf/?WEBLAYOUT=.....   ----This does 
>>> NOT work
>>>
>>> http://host/mapguide/mapviewerajax/?WEBLAYOUT=.....   ----This DOES work
>>>
>>> This happens on any PC that I've tested it on. Am I missing 
>>> something here, or is this a bug? I'm using v1.0.2.17861 (the latest 
>>> release).
>>>
>>> Andrew
>>> -- 
>>> 	*Andrew DeMerchant*
>>> *Computer Technologist*
>>> ph.1-877-2GEMTEC x.163
>>> fax 506-453-9470
>>>
>>> /GEMTEC Limited <http://www.gemtec.ca>
>>> /191 Doak Road
>>> Fredericton, NB, Canada
>>> E3C 2E6
>>>
>>
>> -- 
>> 	*Andrew DeMerchant*
>> *Computer Technologist*
>> ph.1-877-2GEMTEC x.163
>> fax 506-453-9470
>>
>> /GEMTEC Limited <http://www.gemtec.ca>
>> /191 Doak Road
>> Fredericton, NB, Canada
>> E3C 2E6
>>
>
> -- 
> 	*Andrew DeMerchant*
> *Computer Technologist*
> ph.1-877-2GEMTEC x.163
> fax 506-453-9470
>
> /GEMTEC Limited <http://www.gemtec.ca>
> /191 Doak Road
> Fredericton, NB, Canada
> E3C 2E6
>