From d537c8ec49c5f5ee0407b92ef551cffb84cef639 Mon Sep 17 00:00:00 2001 From: "Brian M. Long" Date: Thu, 9 Jan 2025 11:05:46 -0500 Subject: [PATCH] logging authority for debugging --- .../com/inteligr8/alfresco/asie/rest/AbstractWebScript.java | 6 +++++- .../alfresco-global.properties | 2 +- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/shared/src/main/java/com/inteligr8/alfresco/asie/rest/AbstractWebScript.java b/shared/src/main/java/com/inteligr8/alfresco/asie/rest/AbstractWebScript.java index 14cb6bc..3faf467 100644 --- a/shared/src/main/java/com/inteligr8/alfresco/asie/rest/AbstractWebScript.java +++ b/shared/src/main/java/com/inteligr8/alfresco/asie/rest/AbstractWebScript.java @@ -40,8 +40,11 @@ public abstract class AbstractWebScript extends org.springframework.extensions.w this.authorizedAuthorities.add(authority); } - if (this.authorizedAuthorities.isEmpty()) + if (this.authorizedAuthorities.isEmpty()) { this.logger.warn("All authenticated users will be authorized to access web scripts"); + } else { + this.logger.debug("Allowing only authorities: {}", this.authorizedAuthorities); + } } protected Set getAuthorities() { @@ -66,6 +69,7 @@ public abstract class AbstractWebScript extends org.springframework.extensions.w return true; } + this.logger.trace("Not authorized: user '{}'; authorities: {}", AuthenticationUtil.getFullyAuthenticatedUser(), AuthenticationUtil.getFullAuthentication().getAuthorities()); return false; } diff --git a/shared/src/main/resources/alfresco/module/com_inteligr8_alfresco_asie-shared/alfresco-global.properties b/shared/src/main/resources/alfresco/module/com_inteligr8_alfresco_asie-shared/alfresco-global.properties index a29c9b1..8f2e2fc 100644 --- a/shared/src/main/resources/alfresco/module/com_inteligr8_alfresco_asie-shared/alfresco-global.properties +++ b/shared/src/main/resources/alfresco/module/com_inteligr8_alfresco_asie-shared/alfresco-global.properties @@ -2,7 +2,7 @@ # defaulting to 3 days = 60 * 24 * 3 = 4320 inteligr8.asie.backup.persistTimeMinutes=4320 -inteligr8.asie.allowedAuthorities=ALFRESCO_ADMINISTRATORS +inteligr8.asie.allowedAuthorities=GROUP_ALFRESCO_ADMINISTRATORS # same as solr.baseUrl, but that property is private to the Search subsystem inteligr8.asie.basePath=/solr