MapGuide Open Source:  Home |  Download |  Internals

Ticket #608 (assigned defect)

Opened 4 months ago

Last modified 3 months ago

Occasional MgPremissionDeniedException

Reported by: andrewd Assigned to: ksgeograf (accepted)
Priority: high Milestone:
Component: Maestro Version:
Severity: major Keywords:
Cc: External ID:

Description

I sometimes get problems in Maestro where I get a MgPremissionDeniedException? when trying to open various things. The items in question do have some security on them - I have only 2 user names allowed to view (one as read only, and one as read/write). The read/write user is the admin user - which is what I'm logging into the server as in Maestro. If I log into Autodesk Studio, using the exact same credentials, it works as it should.

Change History

06/17/08 04:02:23 changed by ksgeograf

  • version deleted.

Maestro sometimes recreates the session, if it detects it has timed out. This usually happens because of long times with no activity, or because the MapGuide server has restarted. I guess that could produce a situation where the first action is denied, and any subsequent actions will occur on a new session and thus be allowed.

Could such an event be involved?

06/17/08 08:09:47 changed by andrewd

Well, in my case yesterday, I opened Maestro - logged in - and then right away tried to open a layer. My timeout settings on the server are set quite high (over an hour) anyway, so I don't think that should be a problem. As for the server restarting, I've never had that security problem when restarting mapguide - If I'm in Maestro (and logged in) and I restart Mapguide, the moment I try to do something in Maestro it crashes. I've just never bothered to report that bug (since it's pretty minor).

06/18/08 05:10:26 changed by ksgeograf

  • status changed from new to assigned.

I cannot reproduce on my own machine and it seems periodic at yours. I will add an extensive log option to trouble shoot this issue.

06/18/08 15:45:04 changed by andrewd

Ok - update....I was just logged into my site (the actual website) in my browser. I logged in as the user that only has read rights (since I'm testing this site out, I'm logging in as though my end user would). Then I wanted to make a change to something, so I opened up Maestro, and logged in as Administrator. Once it logged in, my folder looked empty. I had to do a refresh to get the items to show up. Then I tried opening one of them - no luck. Permission Denied. I believe this is exactly the same thing that happened before (same order of things). It seems as though Maestro is for some reason seeing that I've already got a session open, and trying to use that instead (rather than actually logging in using the credentials I give it).

07/14/08 03:18:48 changed by ksgeograf

I have seen some reports that this happens in other places as well. I'm guessing that it is a security issue that has been mentioned on the mail list. If I get the error myself, I will certainly examine it, but otherwise, I'm awating a fix from the official MapGuide package before I try to solve this.

07/14/08 08:32:50 changed by andrewd

Ya, I read that post, and though it sounded pretty similar.

I'm guessing that you could recreate the problem if you set up a map in a library folder with, and make that folder (and it's contents) accessible only by Administrator and 1 other user. Then view the map in your browser, logging in as that other user - then try to connect to the site using Maestro - using Administrator.