Cannot login to webtools

Hi to all,

I have seen that sometimes is allow from webtools to reach the  
attached screen without having any possibility to login to the  
application.
In the past there was a link that permit to login but now is only  
possible to change manually the request from /control/main to /control/
login but it cannot be acceptable for a final user.
I suggest to made the following changes (in the attached patch) so if  
an user that access to webtools but it is not logged in it will  
forward automatically to the login page.

What did you think of it ?

Thanks
Marco

Index: framework/webtools/webapp/webtools/WEB-INF/controller.xml
===================================================================
--- framework/webtools/webapp/webtools/WEB-INF/controller.xml
(revision 781833)
+++ framework/webtools/webapp/webtools/WEB-INF/controller.xml (working  
copy)
@@ -112,7 +112,7 @@
      <!-- End Utility Requests -->

      <request-map uri="main">
-        <security https="true" auth="false"/>
+        <security https="true" auth="true"/>
          <response name="success" type="view" value="main"/>
      </request-map>

[Jacques Le Roux]

Yes this is pretty annoying, +1

Jacques

From: "Marco Risaliti" <[hidden email]>

> Hi to all,
>
> I have seen that sometimes is allow from webtools to reach the  
> attached screen without having any possibility to login to the  
> application.
> In the past there was a link that permit to login but now is only  
> possible to change manually the request from /control/main to /control/
> login but it cannot be acceptable for a final user.
> I suggest to made the following changes (in the attached patch) so if  
> an user that access to webtools but it is not logged in it will  
> forward automatically to the login page.
>
> What did you think of it ?
>
> Thanks
> Marco
>
> Index: framework/webtools/webapp/webtools/WEB-INF/controller.xml
> ===================================================================
> --- framework/webtools/webapp/webtools/WEB-INF/controller.xml
> (revision 781833)
> +++ framework/webtools/webapp/webtools/WEB-INF/controller.xml (working  
> copy)
> @@ -112,7 +112,7 @@
>      <!-- End Utility Requests -->
>
>      <request-map uri="main">
> -        <security https="true" auth="false"/>
> +        <security https="true" auth="true"/>
>          <response name="success" type="view" value="main"/>
>      </request-map>
>
>
>
>
>
>
>
>
>
>
>
>

[David E. Jones-2]

I'd prefer to see the bug fixed instead of changing the functionality.  
The bug I'm referring to is that there is no login link in webtools.  
Whether we change the main request to require auth or not that should  
be fixed...

-David


On Jun 7, 2009, at 9:19 AM, Marco Risaliti wrote:

> Hi to all,
>
> I have seen that sometimes is allow from webtools to reach the  
> attached screen without having any possibility to login to the  
> application.
> In the past there was a link that permit to login but now is only  
> possible to change manually the request from /control/main to /
> control/login but it cannot be acceptable for a final user.
> I suggest to made the following changes (in the attached patch) so  
> if an user that access to webtools but it is not logged in it will  
> forward automatically to the login page.
>
> What did you think of it ?
>
> Thanks
> Marco
>
> Index: framework/webtools/webapp/webtools/WEB-INF/controller.xml
> ===================================================================
> --- framework/webtools/webapp/webtools/WEB-INF/controller.xml
> (revision 781833)
> +++ framework/webtools/webapp/webtools/WEB-INF/controller.xml
> (working copy)
> @@ -112,7 +112,7 @@
>     <!-- End Utility Requests -->
>
>     <request-map uri="main">
> -        <security https="true" auth="false"/>
> +        <security https="true" auth="true"/>
>         <response name="success" type="view" value="main"/>
>     </request-map>
>
>
>
>
>
>
>
>
>
>
>

Thanks David,

what about to applying the attached patch ?

Thanks
Marco

>
> I'd prefer to see the bug fixed instead of changing the functionality.
> The bug I'm referring to is that there is no login link in webtools.
> Whether we change the main request to require auth or not that should  
> be fixed...
>
> -David
>
>
> On Jun 7, 2009, at 9:19 AM, Marco Risaliti wrote:
>
> > Hi to all,
> >
> > I have seen that sometimes is allow from webtools to reach the
> > attached screen without having any possibility to login to the
> > application.
> > In the past there was a link that permit to login but now is only
> > possible to change manually the request from /control/main to /
> > control/login but it cannot be acceptable for a final user.
> > I suggest to made the following changes (in the attached patch) so
> > if an user that access to webtools but it is not logged in it will
> > forward automatically to the login page.
> >
> > What did you think of it ?
> >
> > Thanks
> > Marco
> >
> > Index: framework/webtools/webapp/webtools/WEB-INF/controller.xml
> > ===================================================================
> > --- framework/webtools/webapp/webtools/WEB-INF/controller.xml
> > (revision 781833)
> > +++ framework/webtools/webapp/webtools/WEB-INF/controller.xml
> > (working copy)
> > @@ -112,7 +112,7 @@
> >     <!-- End Utility Requests -->
> >
> >     <request-map uri="main">
> > -        <security https="true" auth="false"/>
> > +        <security https="true" auth="true"/>
> >         <response name="success" type="view" value="main"/>
> >     </request-map>
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
>
>

[Jacopo Cappellato-4]

Hi Marco,

sorry but the patch didn't pass thru: you may try to copy it as text  
in your mail.

Jacopo

On Jun 8, 2009, at 9:12 AM, [hidden email] wrote:

> Thanks David,
>
> what about to applying the attached patch ?
>
> Thanks
> Marco
>
>>
>> I'd prefer to see the bug fixed instead of changing the  
>> functionality.
>> The bug I'm referring to is that there is no login link in webtools.
>> Whether we change the main request to require auth or not that should
>> be fixed...
>>
>> -David
>>
>>
>> On Jun 7, 2009, at 9:19 AM, Marco Risaliti wrote:
>>
>>> Hi to all,
>>>
>>> I have seen that sometimes is allow from webtools to reach the
>>> attached screen without having any possibility to login to the
>>> application.
>>> In the past there was a link that permit to login but now is only
>>> possible to change manually the request from /control/main to /
>>> control/login but it cannot be acceptable for a final user.
>>> I suggest to made the following changes (in the attached patch) so
>>> if an user that access to webtools but it is not logged in it will
>>> forward automatically to the login page.
>>>
>>> What did you think of it ?
>>>
>>> Thanks
>>> Marco
>>>
>>> Index: framework/webtools/webapp/webtools/WEB-INF/controller.xml
>>> ===================================================================
>>> --- framework/webtools/webapp/webtools/WEB-INF/controller.xml
>>> (revision 781833)
>>> +++ framework/webtools/webapp/webtools/WEB-INF/controller.xml
>>> (working copy)
>>> @@ -112,7 +112,7 @@
>>>    <!-- End Utility Requests -->
>>>
>>>    <request-map uri="main">
>>> -        <security https="true" auth="false"/>
>>> +        <security https="true" auth="true"/>
>>>        <response name="success" type="view" value="main"/>
>>>    </request-map>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>
>>

oops, Thanks Jacopo.

Here the patch:

Index: framework/webtools/webapp/webtools/main.ftl
===================================================================
--- framework/webtools/webapp/webtools/main.ftl (revision 775288)
+++ framework/webtools/webapp/webtools/main.ftl (working copy)
@@ -29,6 +29,8 @@
       <div>${uiLabelMap.WebtoolsForSomethingInteresting}.</div>
       <br />
       <div>${uiLabelMap.WebtoolsNoteAntRunInstall}</div>
+      <br />
+      <div><a href="<@ofbizUrl>checkLogin</@ofbizUrl>">${uiLabelMap.CommonLogin}</a></div>
     </#if>
     <#if userLogin?has_content>
       <ul class="webToolList">

> Hi Marco,
>
> sorry but the patch didn't pass thru: you may try to copy it as text
> in your mail.
>
> Jacopo
>
> On Jun 8, 2009, at 9:12 AM, [hidden email] wrote:
>
> > Thanks David,
> >
> > what about to applying the attached patch ?
> >
> > Thanks
> > Marco
> >
> >>
> >> I'd prefer to see the bug fixed instead of changing the
> >> functionality.
> >> The bug I'm referring to is that there is no login link in webtools.
> >> Whether we change the main request to require auth or not that should
> >> be fixed...
> >>
> >> -David
> >>
> >>
> >> On Jun 7, 2009, at 9:19 AM, Marco Risaliti wrote:
> >>
> >>> Hi to all,
> >>>
> >>> I have seen that sometimes is allow from webtools to reach the
> >>> attached screen without having any possibility to login to the
> >>> application.
> >>> In the past there was a link that permit to login but now is only
> >>> possible to change manually the request from /control/main to /
> >>> control/login but it cannot be acceptable for a final user.
> >>> I suggest to made the following changes (in the attached patch) so
> >>> if an user that access to webtools but it is not logged in it will
> >>> forward automatically to the login page.
> >>>
> >>> What did you think of it ?
> >>>
> >>> Thanks
> >>> Marco
> >>>
> >>> Index: framework/webtools/webapp/webtools/WEB-INF/controller.xml
> >>> ===================================================================
> >>> --- framework/webtools/webapp/webtools/WEB-INF/controller.xml
> >>> (revision 781833)
> >>> +++ framework/webtools/webapp/webtools/WEB-INF/controller.xml
> >>> (working copy)
> >>> @@ -112,7 +112,7 @@
> >>>    <!-- End Utility Requests -->
> >>>
> >>>    <request-map uri="main">
> >>> -        <security https="true" auth="false"/>
> >>> +        <security https="true" auth="true"/>
> >>>        <response name="success" type="view" value="main"/>
> >>>    </request-map>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>
> >>
>
>

[Scott Gray-2]

Hi Marco

It might be worth checking this issue https://issues.apache.org/jira/browse/OFBIZ-2103 
  for some discussion around this topic.

Regards
Scott

On 8/06/2009, at 7:12 PM, [hidden email] wrote:

> Thanks David,
>
> what about to applying the attached patch ?
>
> Thanks
> Marco
>
>>
>> I'd prefer to see the bug fixed instead of changing the  
>> functionality.
>> The bug I'm referring to is that there is no login link in webtools.
>> Whether we change the main request to require auth or not that should
>> be fixed...
>>
>> -David
>>
>>
>> On Jun 7, 2009, at 9:19 AM, Marco Risaliti wrote:
>>
>>> Hi to all,
>>>
>>> I have seen that sometimes is allow from webtools to reach the
>>> attached screen without having any possibility to login to the
>>> application.
>>> In the past there was a link that permit to login but now is only
>>> possible to change manually the request from /control/main to /
>>> control/login but it cannot be acceptable for a final user.
>>> I suggest to made the following changes (in the attached patch) so
>>> if an user that access to webtools but it is not logged in it will
>>> forward automatically to the login page.
>>>
>>> What did you think of it ?
>>>
>>> Thanks
>>> Marco
>>>
>>> Index: framework/webtools/webapp/webtools/WEB-INF/controller.xml
>>> ===================================================================
>>> --- framework/webtools/webapp/webtools/WEB-INF/controller.xml
>>> (revision 781833)
>>> +++ framework/webtools/webapp/webtools/WEB-INF/controller.xml
>>> (working copy)
>>> @@ -112,7 +112,7 @@
>>>    <!-- End Utility Requests -->
>>>
>>>    <request-map uri="main">
>>> -        <security https="true" auth="false"/>
>>> +        <security https="true" auth="true"/>
>>>        <response name="success" type="view" value="main"/>
>>>    </request-map>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>
>>

oops, Thanks Jacopo.

Here the patch:

Index: framework/webtools/webapp/webtools/main.ftl
===================================================================
--- framework/webtools/webapp/webtools/main.ftl (revision 775288)
+++ framework/webtools/webapp/webtools/main.ftl (working copy)
@@ -29,6 +29,8 @@
<div>${uiLabelMap.WebtoolsForSomethingInteresting}.</div>
<br />
<div>${uiLabelMap.WebtoolsNoteAntRunInstall}</div>
+ <br />
+ <div><a href="<@ofbizUrl>checkLogin</@ofbizUrl>">${uiLabelMap.CommonLogin}</a></div>
</#if>
<#if userLogin?has_content>
<ul class="webToolList">

> Hi Marco,
>
> sorry but the patch didn't pass thru: you may try to copy it as text
> in your mail.
>
> Jacopo
>
> On Jun 8, 2009, at 9:12 AM, [hidden email] wrote:
>
> > Thanks David,
> >
> > what about to applying the attached patch ?
> >
> > Thanks
> > Marco
> >
> >>
> >> I'd prefer to see the bug fixed instead of changing the
> >> functionality.
> >> The bug I'm referring to is that there is no login link in webtools.
> >> Whether we change the main request to require auth or not that should
> >> be fixed...
> >>
> >> -David
> >>
> >>
> >> On Jun 7, 2009, at 9:19 AM, Marco Risaliti wrote:
> >>
> >>> Hi to all,
> >>>
> >>> I have seen that sometimes is allow from webtools to reach the
> >>> attached screen without having any possibility to login to the
> >>> application.
> >>> In the past there was a link that permit to login but now is only
> >>> possible to change manually the request from /control/main to /
> >>> control/login but it cannot be acceptable for a final user.
> >>> I suggest to made the following changes (in the attached patch) so
> >>> if an user that access to webtools but it is not logged in it will
> >>> forward automatically to the login page.
> >>>
> >>> What did you think of it ?
> >>>
> >>> Thanks
> >>> Marco
> >>>
> >>> Index: framework/webtools/webapp/webtools/WEB-INF/controller.xml
> >>> ===================================================================
> >>> --- framework/webtools/webapp/webtools/WEB-INF/controller.xml
> >>> (revision 781833)
> >>> +++ framework/webtools/webapp/webtools/WEB-INF/controller.xml
> >>> (working copy)
> >>> @@ -112,7 +112,7 @@
> >>>    <!-- End Utility Requests -->
> >>>
> >>>    <request-map uri="main">
> >>> -        <security https="true" auth="false"/>
> >>> +        <security https="true" auth="true"/>
> >>>        <response name="success" type="view" value="main"/>
> >>>    </request-map>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>
> >>
>
>