[mapguide-users] Permissions problem...

Andrew DeMerchant andrew.demerchant at gemtec.ca
Wed Nov 8 08:15:01 EST 2006 

Too late...I submitted it last night, and don't see a way to edit it. 
It's MG446 if you (or anyone else watching this thread) has the means to 
edit it....

Andrew


Walt Welton-Lair wrote:
> Thanks.  In the artifact please include the final diagnosis below.
>
> -----Original Message-----
> From: Andrew DeMerchant [mailto:andrew.demerchant at gemtec.ca] 
> Sent: Wednesday, November 08, 2006 4:37 AM
> To: users at mapguide.osgeo.org
> Subject: Re: [mapguide-users] Permissions problem...
>
> Sounds about right......at least I know I'm not missing something 
> obvious. I'll submit an artifact...
>
> Andrew
>
>
> Walt Welton-Lair wrote:
>   
>> I tested this a little more, and here's what I found.
>>  
>> When opening a web layout using AJAX viewer, the login prompt appears 
>> immediately, before *any* server request is even made.  The first 
>> server operation then ends up being an authentication request 
>> (OpAuthenticate).  After this come the requests for resources - the 
>> web layout, etc.  These succeed because we have provided credentials.
>>  
>> When opening a web layout using DWF viewer, the behavior is 
>> different.  There's a couple of authentication requests that get made 
>> using "anonymous" user, but no login prompt has yet been displayed.  
>> Then comes a request to get the web layout resource, again using 
>> "anonymous".  This fails because user "anonymous" does not have access
>>     
>
>   
>> to the library.  The browser then displays the exception message.
>>  
>> At this point the web layout hasn't been loaded and DWF Viewer hasn't 
>> even entered into the picture.  So this is a MapGuide web tier
>>     
> issue...
>   
>>  
>> Walt
>>
>>     
> ------------------------------------------------------------------------
>   
>> *From:* Andrew DeMerchant [mailto:andrew.demerchant at gemtec.ca]
>> *Sent:* Tuesday, November 07, 2006 6:29 PM
>> *To:* users at mapguide.osgeo.org
>> *Subject:* Re: [mapguide-users] Permissions problem...
>>
>> Ya, that's sort of what I figured was happening....that it's not 
>> asking me to log in, because it doesn't have permission to ask...which
>>     
>
>   
>> is a bit silly. If that's the case, then it's a fairly annoying
>>     
> bug....
>   
>> Andrew
>>
>> Walt Welton-Lair wrote:
>>     
>>> So it's a question of order.  Should MapGuide first authenticate 
>>> before it tries to access the resource (and find out that you don't 
>>> have permission)?  It looks like it does it the other way - it checks
>>>       
>
>   
>>> whether you have permission before authenticating.  I don't know the 
>>> right answer.
>>>  
>>> I do know that the DWF Viewer code which handles the HTTP request 
>>> knows nothing about MapGuide and doesn't know what to do with the 
>>> permission denied response.
>>>  
>>> Walt
>>>
>>>
>>>       
> ------------------------------------------------------------------------
>   
>>> *From:* Andrew DeMerchant [mailto:andrew.demerchant at gemtec.ca]
>>> *Sent:* Tuesday, November 07, 2006 6:15 PM
>>> *To:* users at mapguide.osgeo.org
>>> *Subject:* Re: [mapguide-users] Permissions problem...
>>>
>>> Ah...sorry. I should have posted the error that it gives me.....When 
>>> I try to use the DWF Viewer, this is what I get:
>>>
>>> Permission denied to resource: Library://test/
>>>
>>> Permission denied to resource: Library://test/ Exception occurred in 
>>> method MgResourceHeaderManager.CheckPermission at line 2495 in file 
>>>
>>>       
> c:\build_tux_area\mgdev_opensource\server\src\services\resource\Resource
> HeaderManager.cpp 
>   
>>>
>>> Andrew
>>>
>>>
>>> Walt Welton-Lair wrote:
>>>       
>>>> So DWF Viewer doesn't prompt for credentials.  Do you get back any 
>>>> data or does it just sit there?
>>>>  
>>>> Ultimately DWF Viewer simply makes a Mapping Service GetMap HTTP 
>>>> request via WinINet.  It prompts for credentials when it gets a 401 
>>>> response to that initial request, and then resubmits the GetMap 
>>>> request.  If it just sits there that means it didn't get a 401 
>>>> response and it thinks it's done.
>>>>  
>>>> Walt
>>>>
>>>>
>>>>         
> ------------------------------------------------------------------------
>   
>>>> *From:* Andrew DeMerchant [mailto:andrew.demerchant at gemtec.ca]
>>>> *Sent:* Tuesday, November 07, 2006 4:53 PM
>>>> *To:* users at mapguide.osgeo.org
>>>> *Subject:* [mapguide-users] Permissions problem...
>>>>
>>>> I've got a project that I want to password protect....I've given a 
>>>> specific MapGuide User read permissions to my library (removed 
>>>> 'Everyone', and added 'Administrator' as read/write as well). What's
>>>>         
>
>   
>>>> happening now is that the DWF viewer isn't asking me to log in. If I
>>>>         
>
>   
>>>> change my URL to use the AJAX viewer, it works fine (asks me to log 
>>>> in, and then works as it should). So, for example:
>>>>
>>>> http://host/mapguide/mapviewerdwf/?WEBLAYOUT=.....   ----This does 
>>>> NOT work
>>>>
>>>> http://host/mapguide/mapviewerajax/?WEBLAYOUT=.....   ----This DOES
>>>>         
> work
>   
>>>> This happens on any PC that I've tested it on. Am I missing 
>>>> something here, or is this a bug? I'm using v1.0.2.17861 (the latest
>>>>         
>
>   
>>>> release).
>>>>
>>>> Andrew
>>>> -- 
>>>> 	*Andrew DeMerchant*
>>>> *Computer Technologist*
>>>> ph.1-877-2GEMTEC x.163
>>>> fax 506-453-9470
>>>>
>>>> /GEMTEC Limited <http://www.gemtec.ca>
>>>> /191 Doak Road
>>>> Fredericton, NB, Canada
>>>> E3C 2E6
>>>>
>>>>         
>>> -- 
>>> 	*Andrew DeMerchant*
>>> *Computer Technologist*
>>> ph.1-877-2GEMTEC x.163
>>> fax 506-453-9470
>>>
>>> /GEMTEC Limited <http://www.gemtec.ca>
>>> /191 Doak Road
>>> Fredericton, NB, Canada
>>> E3C 2E6
>>>
>>>       
>> -- 
>> 	*Andrew DeMerchant*
>> *Computer Technologist*
>> ph.1-877-2GEMTEC x.163
>> fax 506-453-9470
>>
>> /GEMTEC Limited <http://www.gemtec.ca>
>> /191 Doak Road
>> Fredericton, NB, Canada
>> E3C 2E6
>>
>>     
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe at mapguide.osgeo.org
> For additional commands, e-mail: users-help at mapguide.osgeo.org
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe at mapguide.osgeo.org
> For additional commands, e-mail: users-help at mapguide.osgeo.org
>
>
>
>   

-- 
	*Andrew DeMerchant*
*Computer Technologist*
ph.1-877-2GEMTEC x.163
fax 506-453-9470

/GEMTEC Limited <http://www.gemtec.ca>
/191 Doak Road
Fredericton, NB, Canada
E3C 2E6

-------------- next part --------------
Skipped content of type multipart/related

More information about the Mapguide-users mailing list