Alpha Software Mobile Development Tools:   Alpha Anywhere    |   Alpha TransForm subscribe to our YouTube Channel  Follow Us on LinkedIn  Follow Us on Twitter  Follow Us on Facebook
Devcon 2020 Goes Virtual! LEARN MORE >

Announcement

Collapse

The Alpha Software Forum Participation Guidelines

The Alpha Software Forum is a free forum created for Alpha Software Developer Community to ask for help, exchange ideas, and share solutions. Alpha Software strives to create an environment where all members of the community can feel safe to participate. In order to ensure the Alpha Software Forum is a place where all feel welcome, forum participants are expected to behave as follows:
  • Be professional in your conduct
  • Be kind to others
  • Be constructive when giving feedback
  • Be open to new ideas and suggestions
  • Stay on topic


Be sure all comments and threads you post are respectful. Posts that contain any of the following content will be considered a violation of your agreement as a member of the Alpha Software Forum Community and will be moderated:
  • Spam.
  • Vulgar language.
  • Quotes from private conversations without permission, including pricing and other sales related discussions.
  • Personal attacks, insults, or subtle put-downs.
  • Harassment, bullying, threatening, mocking, shaming, or deriding anyone.
  • Sexist, racist, homophobic, transphobic, ableist, or otherwise discriminatory jokes and language.
  • Sexually explicit or violent material, links, or language.
  • Pirated, hacked, or copyright-infringing material.
  • Encouraging of others to engage in the above behaviors.


If a thread or post is found to contain any of the content outlined above, a moderator may choose to take one of the following actions:
  • Remove the Post or Thread - the content is removed from the forum.
  • Place the User in Moderation - all posts and new threads must be approved by a moderator before they are posted.
  • Temporarily Ban the User - user is banned from forum for a period of time.
  • Permanently Ban the User - user is permanently banned from the forum.


Moderators may also rename posts and threads if they are too generic or do not property reflect the content.

Moderators may move threads if they have been posted in the incorrect forum.

Threads/Posts questioning specific moderator decisions or actions (such as "why was a user banned?") are not allowed and will be removed.

The owners of Alpha Software Corporation (Forum Owner) reserve the right to remove, edit, move, or close any thread for any reason; or ban any forum member without notice, reason, or explanation.

Community members are encouraged to click the "Report Post" icon in the lower left of a given post if they feel the post is in violation of the rules. This will alert the Moderators to take a look.

Alpha Software Corporation may amend the guidelines from time to time and may also vary the procedures it sets out where appropriate in a particular case. Your agreement to comply with the guidelines will be deemed agreement to any changes to it.



Bonus TIPS for Successful Posting

Try a Search First
It is highly recommended that a Search be done on your topic before posting, as many questions have been answered in prior posts. As with any search engine, the shorter the search term, the more "hits" will be returned, but the more specific the search term is, the greater the relevance of those "hits". Searching for "table" might well return every message on the board while "tablesum" would greatly restrict the number of messages returned.

When you do post
First, make sure you are posting your question in the correct forum. For example, if you post an issue regarding Desktop applications on the Mobile & Browser Applications board , not only will your question not be seen by the appropriate audience, it may also be removed or relocated.

The more detail you provide about your problem or question, the more likely someone is to understand your request and be able to help. A sample database with a minimum of records (and its support files, zipped together) will make it much easier to diagnose issues with your application. Screen shots of error messages are especially helpful.

When explaining how to reproduce your problem, please be as detailed as possible. Describe every step, click-by-click and keypress-by-keypress. Otherwise when others try to duplicate your problem, they may do something slightly different and end up with different results.

A note about attachments
You may only attach one file to each message. Attachment file size is limited to 2MB. If you need to include several files, you may do so by zipping them into a single archive.

If you forgot to attach your files to your post, please do NOT create a new thread. Instead, reply to your original message and attach the file there.

When attaching screen shots, it is best to attach an image file (.BMP, .JPG, .GIF, .PNG, etc.) or a zip file of several images, as opposed to a Word document containing the screen shots. Because Word documents are prone to viruses, many message board users will not open your Word file, therefore limiting their ability to help you.

Similarly, if you are uploading a zipped archive, you should simply create a .ZIP file and not a self-extracting .EXE as many users will not run your EXE file.
See more
See less

Your security credentials do not allow access to this resource

Collapse
X
Collapse
 
  • Page of 1
  • Filter
  • Time
  • Show
Clear All
new posts
Previous template Next
    #1

    Your security credentials do not allow access to this resource

    I keep getting this error message for various a5w pages. I've checked and rechecked security on these pages, even republished them as 'Always Allowed', but I'm still getting this error message.

    It seems to happen when you enter a field that has an onClick event, either an ajax callback or table lookup & fill-in.

    I captured the error to a raw http log, but I've having a difficult time interpreting the log data. No error was recorded in the xbasic error stack log.

    Anyone have any idea what may be causing this?
    Tags: None
    #2
    Re: Your security credentials do not allow access to this resource

    I would study each one as an individual fail. Create a new user with the same credentials and log in and check things out. I get frustrated with this now and again as I have some in depth security group settings. Don't give up, there's something somewhere...
    NWCOPRO: Nuisance Wildlife Control Software My Application: http://www.nwcopro.com "Without forgetting, we would have no memory at all...now what was I saying?"

    Comment

      #3
      Re: Your security credentials do not allow access to this resource

      Originally posted by EF50 View Post
      It seems to happen when you enter a field that has an onClick event, either an ajax callback or table lookup & fill-in.
      That is your key.

      Read this LINK on how the security works when making callbacks, such as lookups, column sorts, etc.. The component security is probably enabled (the suggested setting) so you have to set security on the individual components as well as pages, as any Ajax callback will use the component security.

      Comment

        #4
        Re: Your security credentials do not allow access to this resource

        What's weird is that this application has been running for over 3 years with no problem and no changes have been made to security during this time.

        I have disabled 'Enable component security for virtual pages'. It had previously been enabled. For now, it is working. Thanks Jerry.

        Comment

          #5
          Re: Your security credentials do not allow access to this resource

          Ugh... still getting same error message. OnClick field event (field is Button), should execute table lookup & fill-in but instead get error "Your security credentials do not allow access to this resource".

          Component security for "virtual pages" turned off, page security set to "Always Allowed".

          Any ideas how to fix this?

          Comment

            #6
            Re: Your security credentials do not allow access to this resource

            This would occur if the component had permissions not virtual pages...the lookup component should be double checked as well ad your user group.
            NWCOPRO: Nuisance Wildlife Control Software My Application: http://www.nwcopro.com "Without forgetting, we would have no memory at all...now what was I saying?"

            Comment

              #7
              Re: Your security credentials do not allow access to this resource

              Enabled "virtual pages', enabled "Always enforce security at component level for AJAX grids". Set page and component security to "Always Allowed". Rechecked user security. Republished everything and it now works, but this is identical to original settings when I was getting the same error message.

              No choice but to keep on keeping on and hope it continues to work.

              Thanks Charles.

              Comment

                #8
                Re: Your security credentials do not allow access to this resource

                If you are setting everything to always allow and it now works, AND taking into account the errors you stated in your previous posts. I think you have an issue with groups. Do you know what your group names are? Are you sure your a member of the group you assigned permission to access the looked up component?
                In other words, if your a "New User" you will be in a different group, and even if your the "Administrator" unless you specifically assign permissions you can lock yourself out or hide things from your self in the show/hide expression.
                Also, a far fetched thing to look for would be a blank entry in the database table for groups, OR a field name that contains a space in any related sql security table.
                Spaces in field names in the database caused varied weird responses, and a blank entry as the first entry in the members table made all of my groups dissappear in Alpha security settings for users and groups - but again this is far fetched.

                I think your problem is when you enforce security at the component level you do not have the correct permission for YOUR usergroup in the component.

                Another thing I would check if I came over to your house today would be to ensure that your version of Alpha matched your version of the server.

                That's about all I can think of. You may want to include what version of Alpha your using in your reply if none of these things fix your problem.
                Good Luck! I hope this helps you figure it out...
                NWCOPRO: Nuisance Wildlife Control Software My Application: http://www.nwcopro.com "Without forgetting, we would have no memory at all...now what was I saying?"

                Comment

                  #9
                  Re: Your security credentials do not allow access to this resource

                  Alpha5 version 10.5, build 4369_3712. Alpha5 AppServer, also build 4369_3712. I've downloaded & executed most recent patch files for both.

                  I also checked security levels. I am set up as administrator and I confirmed that I've got the group security correctly assigned to the desired user groups. We only have 12 users and 4 groups, which makes it somewhat easy to keep up with the appropriate assignment of security levels for components and pages.

                  I wonder if I've got the security data tables published to the wrong location. Currently, they are in the default C:\A5Webroot\WestEx folder. 'WestEx' is application's name.
                  "If your Web Application includes security, a number of data tables are created that must be published to the root folder of your application".

                  Comment

                    #10
                    Re: Your security credentials do not allow access to this resource

                    Sounds Like you have a good grasp on what needs to be done correctly to achieve the desired results. On the point of the data tables - all you need to do to check that is to create a field called current user and put =a5ws_getcurrentuser() as the default/initial value. Fire it up and see if it gets populated with the correct username. You can do similar for user groups, you may want to build a UX just to take a look at whats going on when your logged in, and of course build it for an admin only.
                    Unless its a bug which I would doubt (not impossible) you may find that your not really using your security tables, which would explain why everything ONLY works when you turn off security...something aint adding up, lol
                    again, good luck!
                    NWCOPRO: Nuisance Wildlife Control Software My Application: http://www.nwcopro.com "Without forgetting, we would have no memory at all...now what was I saying?"

                    Comment

                      #11
                      Re: Your security credentials do not allow access to this resource

                      Don't forget to make sure you restart the server after a overhaul of security permissions, and restart your browser.
                      Cookies don't forget.
                      NWCOPRO: Nuisance Wildlife Control Software My Application: http://www.nwcopro.com "Without forgetting, we would have no memory at all...now what was I saying?"

                      Comment

                        #12
                        Re: Your security credentials do not allow access to this resource

                        Restarting the server, cookies may not forget but I did....good tip Charles.

                        Comment

                        Previous template Next
                        Working...
                        X