[JIRA] Created: (MGNLWEBDAV-15) Node names aren't validated before creation

[JIRA (on behalf of Jan Haderka)]

Node names aren't validated before creation
-------------------------------------------

                 Key: MGNLWEBDAV-15
                 URL: http://jira.magnolia-cms.com/browse/MGNLWEBDAV-15
             Project: Magnolia WebDAV Module
          Issue Type: Bug
    Affects Versions: 1.0-m2
            Reporter: Grégory Joseph
            Assignee: Jan Haderka
             Fix For: 1.0


When trying to create a folder with non-ascii characters (from a fs-mounted WebDAV), {{pascaläöü}} in this case:

{code}
2009-10-27 19:16:59,826 INFO  info.magnolia.cms.beans.config.MIMEMapping        : Cannot find MIME type for extension "_pascale%CC%80u%CC%88"
2009-10-27 19:17:00.416::WARN:  /magnolia-snapshot-demo/.webdav/resources/folders/
java.lang.RuntimeException: info.magnolia.cms.security.AccessDeniedException: User not allowed to Read path [/folders/pascale?u?]
        at info.magnolia.module.webdav.LocatorFactory.getResourcePath(LocatorFactory.java:76)
        at org.apache.jackrabbit.webdav.AbstractLocatorFactory.createResourceLocator(AbstractLocatorFactory.java:170)
        at org.apache.jackrabbit.webdav.simple.DavResourceImpl.getMembers(DavResourceImpl.java:564)
        at org.apache.jackrabbit.webdav.MultiStatus.addResourceProperties(MultiStatus.java:64)
        at org.apache.jackrabbit.webdav.server.AbstractWebdavServlet.doPropFind(AbstractWebdavServlet.java:447)
        at org.apache.jackrabbit.webdav.server.AbstractWebdavServlet.execute(AbstractWebdavServlet.java:235)
{code}
The exception reminds of MAGNOLIA-2098.

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.magnolia-cms.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira



----------------------------------------------------------------
For list details see
http://www.magnolia-cms.com/home/community/mailing-lists.html
To unsubscribe, E-mail to: <dev-list-unsubscribe@...>
----------------------------------------------------------------

[JIRA (on behalf of Jan Haderka)]

     [ http://jira.magnolia-cms.com/browse/MGNLWEBDAV-15?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Grégory Joseph updated MGNLWEBDAV-15:
-------------------------------------

    Description:
When trying to create a folder with non-ascii characters (from a fs-mounted WebDAV), {{pascaläöü}} in this case:

{code}
2009-10-27 19:16:59,826 INFO  info.magnolia.cms.beans.config.MIMEMapping        : Cannot find MIME type for extension "_pascale%CC%80u%CC%88"
2009-10-27 19:17:00.416::WARN:  /magnolia-snapshot-demo/.webdav/resources/folders/
java.lang.RuntimeException: info.magnolia.cms.security.AccessDeniedException: User not allowed to Read path [/folders/pascale?u?]
        at info.magnolia.module.webdav.LocatorFactory.getResourcePath(LocatorFactory.java:76)
        at org.apache.jackrabbit.webdav.AbstractLocatorFactory.createResourceLocator(AbstractLocatorFactory.java:170)
        at org.apache.jackrabbit.webdav.simple.DavResourceImpl.getMembers(DavResourceImpl.java:564)
        at org.apache.jackrabbit.webdav.MultiStatus.addResourceProperties(MultiStatus.java:64)
        at org.apache.jackrabbit.webdav.server.AbstractWebdavServlet.doPropFind(AbstractWebdavServlet.java:447)
        at org.apache.jackrabbit.webdav.server.AbstractWebdavServlet.execute(AbstractWebdavServlet.java:235)
{code}
The exception reminds of MAGNOLIA-2098. (this happened while logged in as superuser)

  was:
When trying to create a folder with non-ascii characters (from a fs-mounted WebDAV), {{pascaläöü}} in this case:

{code}
2009-10-27 19:16:59,826 INFO  info.magnolia.cms.beans.config.MIMEMapping        : Cannot find MIME type for extension "_pascale%CC%80u%CC%88"
2009-10-27 19:17:00.416::WARN:  /magnolia-snapshot-demo/.webdav/resources/folders/
java.lang.RuntimeException: info.magnolia.cms.security.AccessDeniedException: User not allowed to Read path [/folders/pascale?u?]
        at info.magnolia.module.webdav.LocatorFactory.getResourcePath(LocatorFactory.java:76)
        at org.apache.jackrabbit.webdav.AbstractLocatorFactory.createResourceLocator(AbstractLocatorFactory.java:170)
        at org.apache.jackrabbit.webdav.simple.DavResourceImpl.getMembers(DavResourceImpl.java:564)
        at org.apache.jackrabbit.webdav.MultiStatus.addResourceProperties(MultiStatus.java:64)
        at org.apache.jackrabbit.webdav.server.AbstractWebdavServlet.doPropFind(AbstractWebdavServlet.java:447)
        at org.apache.jackrabbit.webdav.server.AbstractWebdavServlet.execute(AbstractWebdavServlet.java:235)
{code}
The exception reminds of MAGNOLIA-2098.

> Node names aren't validated before creation
> -------------------------------------------
>
>                 Key: MGNLWEBDAV-15
>                 URL: http://jira.magnolia-cms.com/browse/MGNLWEBDAV-15
>             Project: Magnolia WebDAV Module
>          Issue Type: Bug
>    Affects Versions: 1.0-m2
>            Reporter: Grégory Joseph
>            Assignee: Jan Haderka
>             Fix For: 1.0
>
>
> When trying to create a folder with non-ascii characters (from a fs-mounted WebDAV), {{pascaläöü}} in this case:
> {code}
> 2009-10-27 19:16:59,826 INFO  info.magnolia.cms.beans.config.MIMEMapping        : Cannot find MIME type for extension "_pascale%CC%80u%CC%88"
> 2009-10-27 19:17:00.416::WARN:  /magnolia-snapshot-demo/.webdav/resources/folders/
> java.lang.RuntimeException: info.magnolia.cms.security.AccessDeniedException: User not allowed to Read path [/folders/pascale?u?]
>         at info.magnolia.module.webdav.LocatorFactory.getResourcePath(LocatorFactory.java:76)
>         at org.apache.jackrabbit.webdav.AbstractLocatorFactory.createResourceLocator(AbstractLocatorFactory.java:170)
>         at org.apache.jackrabbit.webdav.simple.DavResourceImpl.getMembers(DavResourceImpl.java:564)
>         at org.apache.jackrabbit.webdav.MultiStatus.addResourceProperties(MultiStatus.java:64)
>         at org.apache.jackrabbit.webdav.server.AbstractWebdavServlet.doPropFind(AbstractWebdavServlet.java:447)
>         at org.apache.jackrabbit.webdav.server.AbstractWebdavServlet.execute(AbstractWebdavServlet.java:235)
> {code}
> The exception reminds of MAGNOLIA-2098. (this happened while logged in as superuser)

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.magnolia-cms.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira



----------------------------------------------------------------
For list details see
http://www.magnolia-cms.com/home/community/mailing-lists.html
To unsubscribe, E-mail to: <dev-list-unsubscribe@...>
----------------------------------------------------------------

[JIRA (on behalf of Jan Haderka)]

     [ http://jira.magnolia-cms.com/browse/MGNLWEBDAV-15?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Grégory Joseph reassigned MGNLWEBDAV-15:
----------------------------------------

    Assignee: Grégory Joseph  (was: Jan Haderka)

> Node names aren't validated before creation
> -------------------------------------------
>
>                 Key: MGNLWEBDAV-15
>                 URL: http://jira.magnolia-cms.com/browse/MGNLWEBDAV-15
>             Project: Magnolia WebDAV Module
>          Issue Type: Bug
>    Affects Versions: 1.0-m2
>            Reporter: Grégory Joseph
>            Assignee: Grégory Joseph
>             Fix For: 1.0
>
>
> When trying to create a folder with non-ascii characters (from a fs-mounted WebDAV), {{pascaläöü}} in this case:
> {code}
> 2009-10-27 19:16:59,826 INFO  info.magnolia.cms.beans.config.MIMEMapping        : Cannot find MIME type for extension "_pascale%CC%80u%CC%88"
> 2009-10-27 19:17:00.416::WARN:  /magnolia-snapshot-demo/.webdav/resources/folders/
> java.lang.RuntimeException: info.magnolia.cms.security.AccessDeniedException: User not allowed to Read path [/folders/pascale?u?]
>         at info.magnolia.module.webdav.LocatorFactory.getResourcePath(LocatorFactory.java:76)
>         at org.apache.jackrabbit.webdav.AbstractLocatorFactory.createResourceLocator(AbstractLocatorFactory.java:170)
>         at org.apache.jackrabbit.webdav.simple.DavResourceImpl.getMembers(DavResourceImpl.java:564)
>         at org.apache.jackrabbit.webdav.MultiStatus.addResourceProperties(MultiStatus.java:64)
>         at org.apache.jackrabbit.webdav.server.AbstractWebdavServlet.doPropFind(AbstractWebdavServlet.java:447)
>         at org.apache.jackrabbit.webdav.server.AbstractWebdavServlet.execute(AbstractWebdavServlet.java:235)
> {code}
> The exception reminds of MAGNOLIA-2098. (this happened while logged in as superuser)

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.magnolia-cms.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira



----------------------------------------------------------------
For list details see
http://www.magnolia-cms.com/home/community/mailing-lists.html
To unsubscribe, E-mail to: <dev-list-unsubscribe@...>
----------------------------------------------------------------

[JIRA (on behalf of Jan Haderka)]

     [ http://jira.magnolia-cms.com/browse/MGNLWEBDAV-15?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Work on MGNLWEBDAV-15 started by Grégory Joseph.

> Node names aren't validated before creation
> -------------------------------------------
>
>                 Key: MGNLWEBDAV-15
>                 URL: http://jira.magnolia-cms.com/browse/MGNLWEBDAV-15
>             Project: Magnolia WebDAV Module
>          Issue Type: Bug
>    Affects Versions: 1.0-m2
>            Reporter: Grégory Joseph
>            Assignee: Grégory Joseph
>             Fix For: 1.0
>
>
> When trying to create a folder with non-ascii characters (from a fs-mounted WebDAV), {{pascaläöü}} in this case:
> {code}
> 2009-10-27 19:16:59,826 INFO  info.magnolia.cms.beans.config.MIMEMapping        : Cannot find MIME type for extension "_pascale%CC%80u%CC%88"
> 2009-10-27 19:17:00.416::WARN:  /magnolia-snapshot-demo/.webdav/resources/folders/
> java.lang.RuntimeException: info.magnolia.cms.security.AccessDeniedException: User not allowed to Read path [/folders/pascale?u?]
>         at info.magnolia.module.webdav.LocatorFactory.getResourcePath(LocatorFactory.java:76)
>         at org.apache.jackrabbit.webdav.AbstractLocatorFactory.createResourceLocator(AbstractLocatorFactory.java:170)
>         at org.apache.jackrabbit.webdav.simple.DavResourceImpl.getMembers(DavResourceImpl.java:564)
>         at org.apache.jackrabbit.webdav.MultiStatus.addResourceProperties(MultiStatus.java:64)
>         at org.apache.jackrabbit.webdav.server.AbstractWebdavServlet.doPropFind(AbstractWebdavServlet.java:447)
>         at org.apache.jackrabbit.webdav.server.AbstractWebdavServlet.execute(AbstractWebdavServlet.java:235)
> {code}
> The exception reminds of MAGNOLIA-2098. (this happened while logged in as superuser)

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.magnolia-cms.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira



----------------------------------------------------------------
For list details see
http://www.magnolia-cms.com/home/community/mailing-lists.html
To unsubscribe, E-mail to: <dev-list-unsubscribe@...>
----------------------------------------------------------------

[JIRA (on behalf of Jan Haderka)]

    [ http://jira.magnolia-cms.com/browse/MGNLWEBDAV-15?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=24800#action_24800 ]

Hudson CI server commented on MGNLWEBDAV-15:
--------------------------------------------

Integrated in !http://hudson.magnolia-cms.com/nocacheImages/16x16/blue.gif! [magnolia-module-webdav #603|http://hudson.magnolia-cms.com/job/magnolia-module-webdav/603/]
      now strictly limit the accepted range of chars in paths for webdav...

> Node names aren't validated before creation
> -------------------------------------------
>
>                 Key: MGNLWEBDAV-15
>                 URL: http://jira.magnolia-cms.com/browse/MGNLWEBDAV-15
>             Project: Magnolia WebDAV Module
>          Issue Type: Bug
>    Affects Versions: 1.0-m2
>            Reporter: Grégory Joseph
>            Assignee: Grégory Joseph
>             Fix For: 1.0
>
>
> When trying to create a folder with non-ascii characters (from a fs-mounted WebDAV), {{pascaläöü}} in this case:
> {code}
> 2009-10-27 19:16:59,826 INFO  info.magnolia.cms.beans.config.MIMEMapping        : Cannot find MIME type for extension "_pascale%CC%80u%CC%88"
> 2009-10-27 19:17:00.416::WARN:  /magnolia-snapshot-demo/.webdav/resources/folders/
> java.lang.RuntimeException: info.magnolia.cms.security.AccessDeniedException: User not allowed to Read path [/folders/pascale?u?]
>         at info.magnolia.module.webdav.LocatorFactory.getResourcePath(LocatorFactory.java:76)
>         at org.apache.jackrabbit.webdav.AbstractLocatorFactory.createResourceLocator(AbstractLocatorFactory.java:170)
>         at org.apache.jackrabbit.webdav.simple.DavResourceImpl.getMembers(DavResourceImpl.java:564)
>         at org.apache.jackrabbit.webdav.MultiStatus.addResourceProperties(MultiStatus.java:64)
>         at org.apache.jackrabbit.webdav.server.AbstractWebdavServlet.doPropFind(AbstractWebdavServlet.java:447)
>         at org.apache.jackrabbit.webdav.server.AbstractWebdavServlet.execute(AbstractWebdavServlet.java:235)
> {code}
> The exception reminds of MAGNOLIA-2098. (this happened while logged in as superuser)

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.magnolia-cms.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira



----------------------------------------------------------------
For list details see
http://www.magnolia-cms.com/home/community/mailing-lists.html
To unsubscribe, E-mail to: <dev-list-unsubscribe@...>
----------------------------------------------------------------

[JIRA (on behalf of Jan Haderka)]

    [ http://jira.magnolia-cms.com/browse/MGNLWEBDAV-15?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=24801#action_24801 ]

Grégory Joseph commented on MGNLWEBDAV-15:
------------------------------------------

Since we can't rename nodes "on the fly" like we do in the AdminCentral tree (at least not without digging much further in the Jackrabbit WebDAV code and the protocol), the only option is currently to prohibit such names.

> Node names aren't validated before creation
> -------------------------------------------
>
>                 Key: MGNLWEBDAV-15
>                 URL: http://jira.magnolia-cms.com/browse/MGNLWEBDAV-15
>             Project: Magnolia WebDAV Module
>          Issue Type: Bug
>    Affects Versions: 1.0-m2
>            Reporter: Grégory Joseph
>            Assignee: Grégory Joseph
>             Fix For: 1.0
>
>
> When trying to create a folder with non-ascii characters (from a fs-mounted WebDAV), {{pascaläöü}} in this case:
> {code}
> 2009-10-27 19:16:59,826 INFO  info.magnolia.cms.beans.config.MIMEMapping        : Cannot find MIME type for extension "_pascale%CC%80u%CC%88"
> 2009-10-27 19:17:00.416::WARN:  /magnolia-snapshot-demo/.webdav/resources/folders/
> java.lang.RuntimeException: info.magnolia.cms.security.AccessDeniedException: User not allowed to Read path [/folders/pascale?u?]
>         at info.magnolia.module.webdav.LocatorFactory.getResourcePath(LocatorFactory.java:76)
>         at org.apache.jackrabbit.webdav.AbstractLocatorFactory.createResourceLocator(AbstractLocatorFactory.java:170)
>         at org.apache.jackrabbit.webdav.simple.DavResourceImpl.getMembers(DavResourceImpl.java:564)
>         at org.apache.jackrabbit.webdav.MultiStatus.addResourceProperties(MultiStatus.java:64)
>         at org.apache.jackrabbit.webdav.server.AbstractWebdavServlet.doPropFind(AbstractWebdavServlet.java:447)
>         at org.apache.jackrabbit.webdav.server.AbstractWebdavServlet.execute(AbstractWebdavServlet.java:235)
> {code}
> The exception reminds of MAGNOLIA-2098. (this happened while logged in as superuser)

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.magnolia-cms.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira



----------------------------------------------------------------
For list details see
http://www.magnolia-cms.com/home/community/mailing-lists.html
To unsubscribe, E-mail to: <dev-list-unsubscribe@...>
----------------------------------------------------------------

[JIRA (on behalf of Jan Haderka)]

    [ http://jira.magnolia-cms.com/browse/MGNLWEBDAV-15?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=24801#action_24801 ]

Grégory Joseph edited comment on MGNLWEBDAV-15 at 11/9/09 7:00 PM:
-------------------------------------------------------------------

Since we can't rename nodes "on the fly" like we do in the AdminCentral tree (at least not without digging much further in the Jackrabbit WebDAV code and the protocol), the only option is currently to prohibit such names.
See MGNLWEBDAV-18 and MAGNOLIA-2929 for further progress.

      was (Author: gjoseph):
    Since we can't rename nodes "on the fly" like we do in the AdminCentral tree (at least not without digging much further in the Jackrabbit WebDAV code and the protocol), the only option is currently to prohibit such names.
 

> Node names aren't validated before creation
> -------------------------------------------
>
>                 Key: MGNLWEBDAV-15
>                 URL: http://jira.magnolia-cms.com/browse/MGNLWEBDAV-15
>             Project: Magnolia WebDAV Module
>          Issue Type: Bug
>    Affects Versions: 1.0-m2
>            Reporter: Grégory Joseph
>            Assignee: Grégory Joseph
>             Fix For: 1.0
>
>
> When trying to create a folder with non-ascii characters (from a fs-mounted WebDAV), {{pascaläöü}} in this case:
> {code}
> 2009-10-27 19:16:59,826 INFO  info.magnolia.cms.beans.config.MIMEMapping        : Cannot find MIME type for extension "_pascale%CC%80u%CC%88"
> 2009-10-27 19:17:00.416::WARN:  /magnolia-snapshot-demo/.webdav/resources/folders/
> java.lang.RuntimeException: info.magnolia.cms.security.AccessDeniedException: User not allowed to Read path [/folders/pascale?u?]
>         at info.magnolia.module.webdav.LocatorFactory.getResourcePath(LocatorFactory.java:76)
>         at org.apache.jackrabbit.webdav.AbstractLocatorFactory.createResourceLocator(AbstractLocatorFactory.java:170)
>         at org.apache.jackrabbit.webdav.simple.DavResourceImpl.getMembers(DavResourceImpl.java:564)
>         at org.apache.jackrabbit.webdav.MultiStatus.addResourceProperties(MultiStatus.java:64)
>         at org.apache.jackrabbit.webdav.server.AbstractWebdavServlet.doPropFind(AbstractWebdavServlet.java:447)
>         at org.apache.jackrabbit.webdav.server.AbstractWebdavServlet.execute(AbstractWebdavServlet.java:235)
> {code}
> The exception reminds of MAGNOLIA-2098. (this happened while logged in as superuser)

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.magnolia-cms.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira



----------------------------------------------------------------
For list details see
http://www.magnolia-cms.com/home/community/mailing-lists.html
To unsubscribe, E-mail to: <dev-list-unsubscribe@...>
----------------------------------------------------------------

[JIRA (on behalf of Jan Haderka)]

     [ http://jira.magnolia-cms.com/browse/MGNLWEBDAV-15?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Grégory Joseph resolved MGNLWEBDAV-15.
--------------------------------------

    Resolution: Fixed

> Node names aren't validated before creation
> -------------------------------------------
>
>                 Key: MGNLWEBDAV-15
>                 URL: http://jira.magnolia-cms.com/browse/MGNLWEBDAV-15
>             Project: Magnolia WebDAV Module
>          Issue Type: Bug
>    Affects Versions: 1.0-m2
>            Reporter: Grégory Joseph
>            Assignee: Grégory Joseph
>             Fix For: 1.0
>
>
> When trying to create a folder with non-ascii characters (from a fs-mounted WebDAV), {{pascaläöü}} in this case:
> {code}
> 2009-10-27 19:16:59,826 INFO  info.magnolia.cms.beans.config.MIMEMapping        : Cannot find MIME type for extension "_pascale%CC%80u%CC%88"
> 2009-10-27 19:17:00.416::WARN:  /magnolia-snapshot-demo/.webdav/resources/folders/
> java.lang.RuntimeException: info.magnolia.cms.security.AccessDeniedException: User not allowed to Read path [/folders/pascale?u?]
>         at info.magnolia.module.webdav.LocatorFactory.getResourcePath(LocatorFactory.java:76)
>         at org.apache.jackrabbit.webdav.AbstractLocatorFactory.createResourceLocator(AbstractLocatorFactory.java:170)
>         at org.apache.jackrabbit.webdav.simple.DavResourceImpl.getMembers(DavResourceImpl.java:564)
>         at org.apache.jackrabbit.webdav.MultiStatus.addResourceProperties(MultiStatus.java:64)
>         at org.apache.jackrabbit.webdav.server.AbstractWebdavServlet.doPropFind(AbstractWebdavServlet.java:447)
>         at org.apache.jackrabbit.webdav.server.AbstractWebdavServlet.execute(AbstractWebdavServlet.java:235)
> {code}
> The exception reminds of MAGNOLIA-2098. (this happened while logged in as superuser)

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.magnolia-cms.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira



----------------------------------------------------------------
For list details see
http://www.magnolia-cms.com/home/community/mailing-lists.html
To unsubscribe, E-mail to: <dev-list-unsubscribe@...>
----------------------------------------------------------------