On Twiki 4.2.0, we have just implemented
LdapContrib, which we eventually configured to work very well. Using web-level and topic-level access control works great using ldap logins and TWiki groups. Then I noticed that whenever I hit the button to Edit on a
EditTable, I get an "Access Denied" oops, even though editing the topic which contains the table works fine. This problem seems to only occur when there is a topic- or web-level access control in effect (ALLOWTOPICVIEW, ALLOWWEBCHANGE, etc). I added a little extra debug output to
EditTable's Core.pm and get the following in debug.txt:
| 11 Apr 2008 - 10:44 | - TWiki::Plugins::EditTablePlugin::initPlugin(
SslInfo ) is OK
| 11 Apr 2008 - 10:44 | -
EditTablePlugin::commonTagsHandler(
SslInfo )
| 11 Apr 2008 - 10:44 | -
EditTablePlugin::doEnableEdit(
SysEng,
SslInfo )
| 11 Apr 2008 - 10:44 | - TWiki::Func::getWikiName() =
CharlesHerron- TWiki::Func::checkAccessPermission('change',
CharlesHerron, undef,
SslInfo,
SysEng)
| 11 Apr 2008 - 10:44 | - TWiki::Plugins::EditTablePlugin::initPlugin(
SslInfo ) is OK
From the error.log (
LdapContrib's output):
constructed a new
LdapContrib object
cacheAge=1579, lastUpdate=1207923697, refresh=0
cacheAge=1579, lastUpdate=1207923697, refresh=0
called lookupWikiName(cherron)
called lookupWikiName(cherron)
called lookupWikiName(
CharlieHerron)
called lookupWikiName(
CharlieHerron)
called lookupWikiName(
CharlesHerron)
finishing
constructed a new
LdapContrib object
cacheAge=1580, lastUpdate=1207923697, refresh=0
cacheAge=1580, lastUpdate=1207923697, refresh=0
called lookupWikiName(cherron)
called lookupWikiName(cherron)
finishing
--
TWiki:Main/CharlieHerron
- 11 Apr 2008
I can confirm this behavior. It seems that only LDAP Users are concerned. If you login in as a
TWikiAdmin the
EditTablePlugin works just fine.
--
TWiki:Main.GerhardHeeke
- 04 Jun 2008
The patches to TWiki-4.2's user code in
Item5118 fixed that for me.
--
TWiki:Main.MichaelDaum
- 04 Jun 2008