Cannot "Add Application" while logged in with administrator right

[Ryan M Castley, modificado 14 Anos atrás.]

We've setup Liferay, integrated with our Active Directory for sign in purposes. I've left the test/test user with the ability to login. The 'test' user is unable to "Add Application" from the menu on any of the pages, and neither are any of the other users setup with administrative priviliges. The 'Add Application" portlet displays the message "You do not have the roles required to access this portlet. " Using version 5.2. Any ideas?

Thanks!

[Amos Fong, modificado 14 Anos atrás.]

Do you use NTLM and IE? This sounds similar to this ticket:

http://issues.liferay.com/browse/LPS-285

Try the solution on the bottom

[Chris Wirth, modificado 14 Anos atrás.]

I see the fix for this (copied from JIRA) is:
----------------------------------
Fix for our problem was to enable Ntlm filter for all requests instead of just requests for /c/portal/login

<filter-mapping>
<filter-name>Ntlm Filter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>

IE does ntlm authentication every time with POST.
---------------------------------


But... where do I do this?????

[Amos Fong, modificado 14 Anos atrás.]

I believe it's web-inf/web.xml

[Chris Wirth, modificado 14 Anos atrás.]

It was -- thanks, Amos!

And... it worked. Now able to access "add application" as admin in IE7 with AD auth and NTLM SSO

[Victor Zorin, modificado 14 Anos atrás.]

Hi Amos

I found a much lighter fix for this problem. It does not have any impact on performance comparing to a heavy one by applying NTLM for /*.

Hopefully it is going to be a final solution as well.

This one requires a one line addition to html\js\jquery.js file:

	ajax: function( s ) {
		// set the default type
		s.type = s.type ? s.type : 'GET';

		// Extend the settings, but re-extend 's' so that it can be

A bit of explanation:
- for whatever reason the default type value of 'GET' is not passed, so this additional line re-enforces it
- if type is undefined it is set to 'POST', so when http request passes through authentication, POSTed data gets lost. It does not happen when data comes as via GET

I am not sure that the place to enforce type='GET' is the right one. Your js/jquery experts will have to find out why default type value is not there.

Amos, could you please update LPS as well, I do not have my pwd with me.

Regards
Victor

[Amos Fong, modificado 14 Anos atrás.]

Thanks Victor.

I created the ticket http://issues.liferay.com/browse/LPS-3428. I hope I explained it correctly.

[Victor Zorin, modificado 14 Anos atrás.]

That's perfect.
I think adding some cross-references would also benefit to LPS resolution:
- from LPS-3428 to this thread
- from LPS-285 to LPS-3428, as it provides a better temp fix for the problem
- from LPS-285 to this thread

[Ryan M Castley, modificado 14 Anos atrás.]

Thank you all for the suggested fixes, worked beautifully