topic Re: Exception with <authentication>none</authentication> in Alfresco Archive

Exception with none

kapil_k — Mon, 14 Jul 2008 06:49:34 GMT

I have created a simple webscript to list content articles. Using Alfresco Community & WCM 2.9.0B.It works fine with <authentication>admin</authentication> (while logged in to Webclient as admin)But when I try to use <authentication>none</authentication>I get the followin

Re: Exception with none

jpfi — Mon, 14 Jul 2008 08:10:58 GMT

Hi Kapil,
that's not a Bug…that's a feature 😉
Using "none" in authentication context you'll never get any informations out of the repository. You aren't authenticated, so spring security context cannot check your permissions on the node you are asking for.
You can use "none" if you want to build a WebScript which don't use any data out of the repo.
Using "guest" you will get access to all nodes where guest has sufficents permission, e.g. Guest Home.
Cheers, Jan

Re: Exception with none

kapil_k — Tue, 15 Jul 2008 09:23:45 GMT

How do I send authentication credentials as part of the http request?
The Webscript URL is included as a link in a JSP page. I need to authenticate without user intervention and display result inline.

Thanks,
Kapil

Re: Exception with none

stevewickii — Tue, 09 Dec 2008 00:32:31 GMT

I get the same exception with <authentication runas="admin">none</authentication> from a web script deployed on the classpath under alfresco/extension/templates/webscripts. This should work according to the Wiki.

Re: Exception with none

pmonks — Tue, 09 Dec 2008 03:39:27 GMT

Can you post the exception here, including the entire stack trace? The logic of your Web Script's controller (JS / Java) would also be handy, if it's not too lengthy.

Cheers,
Peter

Re: Exception with none

stevewickii — Tue, 09 Dec 2008 19:16:53 GMT

I discovered from the source code that the RUNAS feature is not available in Alfresco 2.9.0B build 683. Alfresco 2.9B was packages on December 10, 2007, well before the runas feature was committed to subversion. RUNAS was added to subversion at revision 3101 on September 29, 2008. I don't know if it has been included in an official community release to this date.

Re: Exception with none

stevewickii — Tue, 09 Dec 2008 19:29:56 GMT

If you intend to use Alfresco 2.9.0B, you can accomplish nearly the same thing by setting <authentication>guest</authentication>, and then append "guest=true" to your web script URL like "http://www.example.com/alfresco/s/test?guest=true".

This works for us as long as the Guest account has been given access to all of the content and spaces you need to access from the web script. Note: you will not have a 'companyhome' root object if Guest has not been given at least the "Consumer" role on the Company Home space.

Hope this helps.

Stephen

Re: Exception with none

pmonks — Tue, 09 Dec 2008 20:14:58 GMT

You can also use the "runAs" API [1] within a Java backed Web Script, then configure the Web Script with authentication=none or authentication=guest. For security reasons this API is not available to Javascript backed Web Scripts however.

[1] http://dev.alfresco.com/resource/docs/java/repository/org/alfresco/repo/security/authentication/AuthenticationUtil.html#runAs(org.alfresco.repo.security.authentication.AuthenticationUtil.RunAsWork,%20java.lang.String)

Cheers,
Peter