[GeoNetwork-devel] Access deined to logos on portal list page?

Hi All,

I have been exploring the API (3.10.x) and looking at the portal-list
page at http://localhost:8080/geonetwork/srv/api/0.1/sources but all
the links are broken. Investigation suggests that each call to the
images/logos location is triggering an access denied error, even the
main catalog logo.

This seems like incorrect behaviour- is it a bug or a known issue, or
something that can be fixed somewhere in the config? I tried to add it
in config-security-mapping.xml using the form <sec:intercept-url
pattern="/images/.*" access="permitAll"/> but that doesn't seem to
work.

Thanks

Jo

--
Jo Cook
t:+44 7930 524 155/twitter:@archaeogeek
Please note that currently I do not work on Friday afternoons. For
urgent responses at that time, please visit
support.astuntechnology.com or phone our office on 01372 744009

--
--
*Sign up to our mailing list
<https://astuntechnology.com/company/#email-updates&gt; for updates on news,
products, conferences, events and training*
*
*

Astun Technology Ltd,
Epsom Square Centre, 6-7 The Derby Square, Epsom, Surrey, KT19 8AG, UK

t:+44 1372 744 009 w: astuntechnology.com <http://astuntechnology.com/&gt;
twitter:@astuntech <https://twitter.com/astuntech&gt;

iShare - enterprise
geographic intelligence platform <https://astuntechnology.com/ishare/&gt;

GeoServer, PostGIS and QGIS training
<https://astuntechnology.com/training-courses/&gt;
Helpdesk and customer
portal
<https://astuntech.atlassian.net/wiki/spaces/ISHAREHELP/pages/364970043/Astun+Technology+Support+Portal&gt;

Company registration no. 5410695. Registered in England and Wales.
Registered office: 120 Manor Green Road, Epsom, Surrey, KT19 8LN VAT no.
864201149.

Hi Jo,

Le ven. 22 mai 2020 à 13:42, Jo Cook <jocook@anonymised.com> a écrit :

Hi All,

I have been exploring the API (3.10.x) and looking at the portal-list
page at http://localhost:8080/geonetwork/srv/api/0.1/sources but all

the links are broken.

Indeed this is due to the version number in API path and relative path to logos.
https://sdi.eea.europa.eu/catalogue/srv/api/sources works fine.

So http://localhost:8080/geonetwork/srv/api/sources will probably works ?

Cheers.
Francois

Investigation suggests that each call to the
images/logos location is triggering an access denied error, even the
main catalog logo.

This seems like incorrect behaviour- is it a bug or a known issue, or
something that can be fixed somewhere in the config? I tried to add it
in config-security-mapping.xml using the form <sec:intercept-url
pattern=“/images/.*” access=“permitAll”/> but that doesn’t seem to
work.

Thanks

Jo

–
Jo Cook
t:+44 7930 524 155/twitter:@archaeogeek
Please note that currently I do not work on Friday afternoons. For
urgent responses at that time, please visit
support.astuntechnology.com or phone our office on 01372 744009

–

Sign up to our mailing list
<https://astuntechnology.com/company/#email-updates> for updates on news,
products, conferences, events and training

*
*

Astun Technology Ltd,
Epsom Square Centre, 6-7 The Derby Square, Epsom, Surrey, KT19 8AG, UK

t:+44 1372 744 009 w: astuntechnology.com <http://astuntechnology.com/>
twitter:@astuntech <https://twitter.com/astuntech>

iShare - enterprise
geographic intelligence platform <https://astuntechnology.com/ishare/>

GeoServer, PostGIS and QGIS training
<https://astuntechnology.com/training-courses/>
Helpdesk and customer
portal
<https://astuntech.atlassian.net/wiki/spaces/ISHAREHELP/pages/364970043/Astun+Technology+Support+Portal>

Company registration no. 5410695. Registered in England and Wales.
Registered office: 120 Manor Green Road, Epsom, Surrey, KT19 8LN VAT no.
864201149.


GeoNetwork-devel mailing list
GeoNetwork-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-devel
GeoNetwork OpenSource is maintained at http://sourceforge.net/projects/geonetwork

Thanks Francois,

That has fixed it (and I should have thought of that myself, sorry)

Jo

On Fri, May 22, 2020 at 4:44 PM Francois Prunayre <fx.prunayre@anonymised.com> wrote:

Hi Jo,

Le ven. 22 mai 2020 à 13:42, Jo Cook <jocook@anonymised.com> a écrit :

Hi All,

I have been exploring the API (3.10.x) and looking at the portal-list
page at http://localhost:8080/geonetwork/srv/api/0.1/sources but all

the links are broken.

Indeed this is due to the version number in API path and relative path to logos.
https://sdi.eea.europa.eu/catalogue/srv/api/sources works fine.
So http://localhost:8080/geonetwork/srv/api/sources will probably works ?

Cheers.
Francois

Investigation suggests that each call to the
images/logos location is triggering an access denied error, even the
main catalog logo.

This seems like incorrect behaviour- is it a bug or a known issue, or
something that can be fixed somewhere in the config? I tried to add it
in config-security-mapping.xml using the form <sec:intercept-url
pattern="/images/.*" access="permitAll"/> but that doesn't seem to
work.

Thanks

Jo

--
Jo Cook
t:+44 7930 524 155/twitter:@archaeogeek
Please note that currently I do not work on Friday afternoons. For
urgent responses at that time, please visit
support.astuntechnology.com or phone our office on 01372 744009

--
--
*Sign up to our mailing list
<https://astuntechnology.com/company/#email-updates&gt; for updates on news,
products, conferences, events and training*
*
*

Astun Technology Ltd,
Epsom Square Centre, 6-7 The Derby Square, Epsom, Surrey, KT19 8AG, UK

t:+44 1372 744 009 w: astuntechnology.com <http://astuntechnology.com/&gt;
twitter:@astuntech <https://twitter.com/astuntech&gt;

iShare - enterprise
geographic intelligence platform <https://astuntechnology.com/ishare/&gt;

GeoServer, PostGIS and QGIS training
<https://astuntechnology.com/training-courses/&gt;
Helpdesk and customer
portal
<https://astuntech.atlassian.net/wiki/spaces/ISHAREHELP/pages/364970043/Astun+Technology+Support+Portal&gt;

Company registration no. 5410695. Registered in England and Wales.
Registered office: 120 Manor Green Road, Epsom, Surrey, KT19 8LN VAT no.
864201149.

_______________________________________________
GeoNetwork-devel mailing list
GeoNetwork-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-devel
GeoNetwork OpenSource is maintained at http://sourceforge.net/projects/geonetwork

--
Jo Cook
t:+44 7930 524 155/twitter:@archaeogeek
Please note that currently I do not work on Friday afternoons. For
urgent responses at that time, please visit
support.astuntechnology.com or phone our office on 01372 744009

--
--
*Sign up to our mailing list
<https://astuntechnology.com/company/#email-updates&gt; for updates on news,
products, conferences, events and training*
*
*

Astun Technology Ltd,
Epsom Square Centre, 6-7 The Derby Square, Epsom, Surrey, KT19 8AG, UK

t:+44 1372 744 009 w: astuntechnology.com <http://astuntechnology.com/&gt;
twitter:@astuntech <https://twitter.com/astuntech&gt;

iShare - enterprise
geographic intelligence platform <https://astuntechnology.com/ishare/&gt;

GeoServer, PostGIS and QGIS training
<https://astuntechnology.com/training-courses/&gt;
Helpdesk and customer
portal
<https://astuntech.atlassian.net/wiki/spaces/ISHAREHELP/pages/364970043/Astun+Technology+Support+Portal&gt;

Company registration no. 5410695. Registered in England and Wales.
Registered office: 120 Manor Green Road, Epsom, Surrey, KT19 8LN VAT no.
864201149.