I have stepped
through the code but I can't see what is responsible
for
preventing the permissions being added from the root role when the
role is
specified on the child with an empty set of permissions. I can see
the
barrier logic, but this isn't a barrier role, and all the rest of the
behaviour seems to add the permissions from the root back. Hence I
can see
the page as the anonymous user?
Strange, why the heck there is a barrier role in your image? This is
actually not part of the base package of SmallWiki. As far as I know
it changes some critical messages in the security framework, so it
might have broken something. David Vogel can you help here?
The following is one of the critical overrides to the SmallWiki core,
check if you have this code and restore it if necessary. It should then
work as you expect:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Structure>>processSecurity: aRequest
"Update the roles of the current user according to the current role
configuration.
See #updateRoles: in the \texttt{User} class for additional
information."
aRequest updateRoles: roles
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Cheers,
Lukas
--
Lukas Renggli