Repeatable faces exception requiring logout

[hikenboots]

This is a permissions issue:
1.  John has created a space called "Johns Space"
2. John is the owner, of course, and unchecks inherit permissions.
3. John adds the user "gumby" to "Johns Space" as a coordinator.
4. John creates a child space in "Johns Space" called "test"
5. Gumby logs in adds documents to "test".  All is well.
6. Gumby starts dinking around in the "test" child space and unchecks "inherit permissions" just because he can. (He needs more to do…) All is no longer well.  The system error below appears.  gumby is dead in the water until he logs out and back in.  gumby strokes out because the "test" space has disappeared along with those documents he placed in it.  John is gonna be mad…

From Gumby's perspective, he just got a nasty error and 8 hours of work is gone.  However, Gumby really just removed his own permissions to "test".  John (owner) and Admin can still access test just fine.

7. John just re-checks "Inherit permissions" on "test" and all is right with the world again. 

Gumby needs a dialog box telling him that he's about to lock himself out of the space and the exception needs to be handled or gumby just needs to be better protected from himself.



System Error  

javax.faces.el.EvaluationException: Cannot get value for expression '#{SpaceUsersBean.owner != null}'

caused by:
javax.faces.el.EvaluationException: org.alfresco.web.bean.users.SpaceUsersBean

caused by:
javax.faces.el.EvaluationException: Bean: org.alfresco.web.bean.users.SpaceUsersBean, property: owner

caused by:
java.lang.reflect.InvocationTargetException

caused by:
org.alfresco.repo.security.permissions.AccessDeniedException: Access Denied. You do not have the appropriate permissions to perform this operation.

caused by:
net.sf.acegisecurity.AccessDeniedException: Access is denied.

Hide Details

javax.faces.el.EvaluationException: Cannot get value for expression '#{SpaceUsersBean.owner != null}' at org.apache.myfaces.el.ValueBindingImpl.getValue(ValueBindingImpl.java:397) at javax.faces.component.UIComponentBase.isRendered(UIComponentBase.java:822) at javax.faces.component.UIComponentBase.processUpdates(UIComponentBase.java:424) at javax.faces.component.UIForm.processUpdates(UIForm.java:85) at javax.faces.component.UIComponentBase.processUpdates(UIComponentBase.java:428) at javax.faces.component.UIViewRoot.processUpdates(UIViewRoot.java:153) at org.apache.myfaces.lifecycle.LifecycleImpl.updateModelValues(LifecycleImpl.java:277) at org.apache.myfaces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:81) at javax.faces.webapp.FacesServlet.service(FacesServlet.java:105) at org.alfresco.web.app.servlet.AlfrescoFacesServlet.service(AlfrescoFacesServlet.java:49) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at org.alfresco.web.app.servlet.AuthenticationFilter.doFilter(AuthenticationFilter.java:73) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:868) at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:663) at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527) at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80) at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684) at java.lang.Thread.run(Thread.java:595) Caused by: javax.faces.el.EvaluationException: org.alfresco.web.bean.users.SpaceUsersBean at org.apache.myfaces.el.PropertyResolverImpl.getValue(PropertyResolverImpl.java:78) at org.apache.myfaces.el.ELParserHelper$MyPropertySuffix.evaluate(ELParserHelper.java:532) at org.apache.commons.el.ComplexValue.evaluate(ComplexValue.java:145) at org.apache.commons.el.BinaryOperatorExpression.evaluate(BinaryOperatorExpression.java:154) at org.apache.myfaces.el.ValueBindingImpl.getValue(ValueBindingImpl.java:378) … 26 more Caused by: javax.faces.el.EvaluationException: Bean: org.alfresco.web.bean.users.SpaceUsersBean, property: owner at org.apache.myfaces.el.PropertyResolverImpl.getProperty(PropertyResolverImpl.java:404) at org.apache.myfaces.el.PropertyResolverImpl.getValue(PropertyResolverImpl.java:71) … 30 more Caused by: java.lang.reflect.InvocationTargetException at sun.reflect.GeneratedMethodAccessor589.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:585) at org.apache.myfaces.el.PropertyResolverImpl.getProperty(PropertyResolverImpl.java:400) … 31 more Caused by: org.alfresco.repo.security.permissions.AccessDeniedException: Access Denied. You do not have the appropriate permissions to perform this operation. at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:44) at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:96) at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176) at $Proxy39.getOwner(Unknown Source) at org.alfresco.web.bean.users.UserMembersBean.getOwner(UserMembersBean.java:271) … 35 more Caused by: net.sf.acegisecurity.AccessDeniedException: Access is denied. at net.sf.acegisecurity.vote.AffirmativeBased.decide(AffirmativeBased.java:86) at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:394) at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:77) at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170) at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:40) … 41 more
Return to application
Logout

[kevinr]

I agree this is an issue. Please raise it in JIRA and we'll see what can be done for 1.4.

Thanks,

Kevin

[hikenboots]

I agree this is an issue. Please raise it in JIRA and we'll see what can be done for 1.4.

Thanks,

Kevin

OK.  Hope I submitted it in the right category. http://www.alfresco.org/jira/browse/AR-783