CF10 Sandbox Security prevents CFCOLLECTION create from working

Hello, everyone,
I've got CF10 installed on my dev system.  I've created several Solr collections.  I have turned on Sandbox Security, and added defined directory permissions for C:/ColdFusion10/cfusion/collections and C:/ColdFusion10/cfusion/jetty folders.  I have edited both paths so that NOTHING is disabled.
If Sandbox is on and I remove a collection from within CFAdmin, when I try to use the CFCOLLECTION action="create" tag, I get java.io.filePermission "read" access denied messages.
If I turn off Sandbox, the tag runs fine.
What else do I need to do in order for CFCOLLECTION action="create" to work while Sandbox is on?
V/r,
^_^

Hi, Charlie!  Thanks for chiming in.  (Also, sorry for delay in responding..)
Yes, when the collection is created in CFAdmin, the collection IS creating the folders in C:\ColdFusion10\cfusion\collections.
When I create them with CFCOLLECTION, I am specifying the same path to the collections folder.
For the Sandbox, CF10 installs with three items in the Sandbox, already:
(ColdFusion WEB-INF system directory)
(ColdFusion CFIDE system directory)
C:/ColdFusion10/cfusion/wwwroot/
I have added to this list:
C:/ColdFusion10/cfusion/jetty/
C:/ColdFusion10/cfusion/collections/
For each of the two I added, I edited them both:
Data Sources - ALL DATASOURCES enabled
CF Tags - All tags enabled, none disabled
CF Functions - All functions enabled, none disabled
Files/Dirs - Each path (with two entries, each: / and /-) set for Read, Write, Delete
Server/Ports - ALL IP:ports are open, no restrictions
Others - ALL runtimes enabled, none disabled
I have gone in to look at the settings for wwwroot.  With one exception, it is identical to the above.  That one exception is that all runtimes (under Others) are disabled, none enabled.
V/r,
^_^

Similar Messages

  • 100% thread pool/CPU usage prevent MII Applications from working

    Hello to all,
    our MII Applications were running on MII 11.5 (windowsserver 2003, with IIS) without any problems.
    We migrated these MII Applications  to SAP xMII Version 12.0 SP8, SAP NW 7.00 SP20, Java HotSpot(TM) 64-Bit Server VM (build 1.4.2_22-rev-b03, mixed mode).
    Since then we faced several problems that prevent the MII Applications from working, e.g.
    - 100% application thread pool usage rate
    - 100% CPU usage
    - awful lot of http connections
    Several sap support calls didn't find the root cause.
    Workaround: restart sap system weekly
    Does anyone has any idea how to go on?
    Thanks
    Simone

    Hi Mike,
    sap support told us to install this Java version.
    Furthermore SAP Note 716604 says "do not use J2SE 5.0" and "Currently, we recommend 1.4.2_24 b06".
    Any more ideas?
    Regards,
    Simone

  • Software that prevents key combinations from working

    Under OSX 10.4.7 the key combination "shift + l" does not produce "L" on my iMac. Everything else seems fine including lower case L. If I start the iMac from the OS software installation disk (OSX 10.4.4) or startup in Windows XP using Boot Camp or start OSX in "safe mode" then "shift + l" does produce "L".
    Also, I have an eMac (also OSX 10.4.7) for which the key combination "shift + /" does not produce "?". If I startup in "safe mode", "shift + /" does produce "?".
    I have never installed any software for setting "hotkeys". How do I identify what software on my hard drives is preventing these key combinations from working?
    iMac Intel   Mac OS X (10.4.7)   regular Apple keyboard

    Sorry about posting in "iMac G5". I have no idea how I failed to get it in the Intel iMac forum.
    I used the "Activity Monitor" utility to see what was different between "safe mode" and my regular startup. I noticed that the "Speech synthesis server" was one difference. I found the "Speak selected text when the key is pressed" option in the preferences pane for "Speech". That was the problem.
    It would be nice if there was a warning message that said, "You will not be able to type '?' if you assign that key combination to Speech."

  • BBLink account is preventing priority hub from working for emails

    The priority hub on my phone was working fine when I got my Q10 a couple months ago. Somewhere along the way it stopped working, but just for my email accounts--BBM, text, twitter, etc, kept working. I have spent some time trying to figure out why this happened, reading forum posts here and such with no luck.
    In the end I settled for making some manual rules that mimicked the priority hub behavour. It was a pain, but it worked.
    Then I had a seperate issue when adding a new email account, where my outlook contacts kept duplicating on my phone. In the end, I fixed this by removing accounts I wasn't using on the phone (mainly the bblink one), and deleting all my local contacts phone information, then readding the outlook account. This stopped the outlook duplicates from being created.
    But low and behond, my priority hub started working again for emails. Which was great. But then a few days later, it stopped working again.
    I figured out it happened when I plugged my phone into my computer to back it up. At this point the "bblink" account was made on my phone again. Then the priority hub stopped working for emails again.
    Deleting the "bblink" account once again fixed the priority hub issue.
    It's not a big deal, I can just delete this "bblink" account every time I back up my phone. But I have the Link program on my computer set to not sync or auto start anything. I just plug in the phone, run the backup, and unplug it.
    So I'm just wondering if anyone knows what is going on here, or has experienced something similar.

    Tom-Zom-W wrote:
    So if I have all the options in Link already turned off, any idea how I can run a backup yet prevent Link from syncing.
    Also, is this BBLink account common to blackberry 10 devices? I checked a friends BB, he didn't have the account and also uses Link for backups.
    Check your Link set for contacts and calendar and turn that off.
    1. If any post helps you please click the below the post(s) that helped you.
    2. Please resolve your thread by marking the post "Solution?" which solved it for you!
    3. Install free BlackBerry Protect today for backups of contacts and data.
    4. Guide to Unlocking your BlackBerry & Unlock Codes
    Join our BBM Channels (Beta)
    BlackBerry Support Forums Channel
    PIN: C0001B7B4   Display/Scan Bar Code
    Knowledge Base Updates
    PIN: C0005A9AA   Display/Scan Bar Code

  • Change PR item short text when created from Work Order

    Hello,
    Is there a way to edit the PR item short text when the PR is generated from a Work Order. When we open the PR, the item short text is grayed out.
    We have created Material Master Number for Contract/ BPA items. When we input that particular material number under the components tab on the WO then release it ,it creates a PR. The Material Master description gets transfered to the PR.
    Our issue is that the Material Master is to generic and we would like to change the description on the PR level.
    Is this possible?
    Thanks,

    Hi
    I think neither there is any way to change the Material Description in PR nor its a good SAP Practise as it is having lot of implecations of stocking , physical inventory , reconciliation etc .
    If Item codes are generic suggest if u can use the PR or PO long text to enable the buyer for the procurement & supplier for supply the material as per long text specifications .
    Regards
    Sameer

  • Neuratron's Photoscope prevents Paper Capture from working

    I have been using Acrobat 9 Professional for some time without any problems.  I installed Sibelius5 with Neuratron's Photoscope a few weeks ago and Paper Capture simply stopped working. I tried repairing the installation, and finally uninstalled Acrobat and re-installed it to no avail. I have spent literally hours trying to fix this problem.
    I finally did a search here on the Acrobat forums and found the post: http://forums.adobe.com/message/1178373#1178373
    I found a copy of the Paper Capture driver drs832.dll located here: C:\Program Files\Adobe\Acrobat 9.0\Acrobat\plug_ins\PaperCapture and copied over the ******* version that Photoscope dumped in C:\Windows\System32. Now my Acrobat Paper Capture applications work perfectly once more.
    I just wanted to share and prevent anyone from going through what I've gone through.
    Acrobat ERROR Message encountered:
    "Acrobat could not access the recognition service because:  Unable to locate the Paper Capture recognition service.  Your installation may be corrupt. This is probably due to either a low memory situation or a corrupt installation.  If the problem is not clears up by shutting down other applications and/or rebooting, then please re-install Acrobat. Acrobat could not perform recognition (OCR) on this page because:"

    Thanks for sharing.

  • Passcode Lock prevents Apple Configurator from working

    We have over 2,000 Supervised iPads in our district. We would like the students to Passcode Lock their iPads to deter other students from messing with the iPads.
    Once the Passcode Lock is set, Apple Configurator no longer works :-(
    Cannot Update/Install Apps
    Cannot Remove/Install Profiles
    Cannot Restore from Backup
    etc
    Must type in the Passcode and Supervise while logged in (which prevents us from closing the lid, plugging in the iPad into the Bretford carts). Once the lid is closed, the passcode lock is activated again. This is a ROYAL PAIN!
    Also, if the teacher is not aware of what the student Passcode is, there is no way of updating the iPad. Multiply this by 2,000 and you can see how much of a pain this is.
    Apple Configurator should be able to work with Supervised iOS devices that are passcode locked. It just makes sense. IF the iOS device is Supervised by Apple Configurator, the Passcode Lock should NOT prevent further management by Apple Configurator.
    Apple, PLEASE FIX IT

    You should leave feedbacke here:
    http://www.apple.com/feedback/

  • New Tab script error prevents other functions from working. How do I remove "New Tab" content (sponsored links, etc)?

    I actually found the settings for it in the top right corner of the page, but figured I'd report it anyway.
    Basically, the New Tab Tiles have been causing script errors (prompt to stop script) that disable a few navigation controls, like being able to close a tab. Any tab that is open or opened after the script error will not close. I have to restart Firefox for the controls to start working again. I have found that the tiles that have been causing the problems are the one's that Firefox provides, as it still happens when my internet history is clear and not loading any tiles from my history.
    It doesn't happen every time, but it does happen regularly. I just changed my settings from "enhanced" to "classic" and will see if this helps, otherwise I will just turn it to blank if its still an issue.

    If it does happen there are other add ons that block scripts like No Script.
    However for script errors, general troubleshooting can be found: [[Warning Unresponsive script - What it means and how to fix it]]

  • When I installed adobes update the other day, this prevents my Mozilla from working at all. Please assist. Thanks.

    This was the first time I have had a problem with Mozilla. I do not like MS Explorer.

    Hello pizzaman7, is Firefox crashing when you're opening it? If so, please perform the following steps in order to give us a crash report ID that helps us find out more about the cause of the crash.
    #Press the following shortcut to get a Run window: [Windows] + [R]. This should bring up a window that contains a text field.
    #In that text field, enter %APPDATA% and press Enter. An explorer window should open.
    #From that explorer window, double-click on the ''Mozilla'' folder, then double-click on ''Firefox'' and then on ''Crash reports''. Double-click on ''submitted''.
    #Now, you should see a list of files that contain reports. Go to ''View'' > ''Arrange Icons by'' > ''Modified'' to get the most recent files at the top of the window.
    #Open the most recent 5 files with a text editor and copy the IDs.
    #Paste each ID into the reply window on the forums.
    Thanks in advance!
    You can find more information and troubleshooting steps in the [[Firefox crashes]] article.

  • ITUNES prevents optical drives from working on Vista

    When ITUNES is installed and computer is restarted, the functionality of the optical drives is compromised due to the filter ITUNES places on the computer. I know Apple has a doc to fix this feature through the REGEDIT option but I'd rather not take the risk on messing with my Windows Registry. Has there been a patch or other fix for this problem yet? If not, hurry.

    Seconded. HURRY!!
    This is a pretty major issue people are having if we have to tinker with our registries to get normal performance from our PCs

  • Prevent multiple users from editing/approving the same form SPD 2013,SP 2013

    Hello all, I have a workflow with a to do task, the task is assigned to a group so any of the users in that group can go in and do a quality check on form data and approve it.  How do I prevent multiple users from working on the
    same form? do I just require check out? or is there a way to notify the rest of the group that a user has already started the quality check.

    The "Require Checkout" option is your best bet.  You can also enable the auto checkout on edit option to allow minimal effort on the side of the user.  Other users will then get the error message stating the item is checked out, if they try to
    edit it.
    If you'd like, you could add a workflow to the task list that triggers when something is changed.  That workflow can check if the item is checked out and if so, email the other users assigned to the task.
    I trust that answers your question...
    Thanks
    C
    |
    RSS |
    http://crayveon.com/blog |
    SharePoint Scripts | Twitter |
    Google+ | LinkedIn |
    Facebook | Quix Utilities for SharePoint

  • Change Purchasing group of PR created from PO

    Hi All,
    When the PR is created individually via ME51N and released it, it still allows to change the Purchasing group by MNE52N.
    But when the PR gets created from the Work order, it does not allow to change the Purchasing group of the PR.
    This seems to be standard SAP functionality. Now incase I want to change the Purchasing group of the PR, I have to go and change the purchasing group on Work order.
    Is there any way by which Purchasing group field on the PR created from Work order, can be made editable.
    Regards,
    Shahu

    This seems to be standard SAP functionality and SAP won't allow to change the Purchasing group if the document is created with reference.
    Handled this by custom enhancement.

  • Prevent Hourly Employees from Ordering Non-stocked Materials and Creating Purchase Reqs in Work Order

    Our SAP plant maintenance system is configured to create a purchase req when a non-stocked material is ordered. We would like to prevent hourly employees from creating a purchase req or ordering non-stocked materials. Only supervisors should be able to order non-stocked materials and create a purchase req. Is there a way to do this via config or system enhancement?

    Hello Rick,
    Clearly there will be 2 ways if not more. One is the Authorization object route and another is Enhancement route. I'm not going to touch the former one. So let's expect answers from other members for that. For the later one, we need to know the answer for the question below:
    'Can we distinguish the hourly employees from regular employees by the user-Id or some other means? If yes, how ?'
    Once we know this, we need to use some user-exit or enhancement spot of the program SAPLCOIH to capture the event of 'N' in the ItemCategory field of Components tab by such UserIds and trigger an error message.  (Suitable user-exit is not striking my mind, so this might go the implicit enhancement way of Order program SAPLCOIH ).
    KJogeswaraRao

  • Cannot prevent authenticated users from creating a blog on "My Page"

    I have a brand new Snow Leopard (10.6.1) 2.26 Ghz quad core Xserve with 12Gb RAM that will be used for web collaboration services. I've currently set up Wiki and Blog services with a group membership to allow creating wikis/blogs. The reason for this is for staff development purposes with the plan to add people into the group as they are trained. The process to set it all up was very simple, however, I'm having an issue preventing authenticated users from creating a personal blog. Although I can prevent the creation of wiki's to members of a group easily, any authenticated user on the server can log into "My Page" and will be able to create a blog. I've gone to server admin>choose the server>choose the "access" icon and set the column "for selected services below" (blog) to "allow only users and groups below" (the group) and it still doesn't prevent them from making a blog page. In WGM for the group on the "Basic" tab, the "enable the following services for this group" has only the choice of "none" and therefore since the site isn't showing as a choice, the Wiki, Blog, Calendar and Mailing List is grayed out. I've seen another thread that states in 10.6 that option for setting the service acl in the group settings of WGM is unavailable. Does anyone know a fix for my problem of security access for a "My Page" blog or is it a possible bug in Snow Leopard? Right now my only workaround is to remove the users access and enable it as they are trained. This isn't an ideal fix, however, because we have some users who want to limit their wiki or blog to authenticated users only, not public access. Any help will be greatly appreciated.
    Message was edited by: dstrollo.il

    Ran into this same issue.... Talked with a field engineer who confirmed the behavior. The question now is this a defect or "feature that does not work as as the audience desires". As I far can tell, the security setting for blogs in server admin does nothing at all. This has the potential to cause a few issues as you cannot limit who can have a blog.
    Message was edited by: jlindler

  • Sandbox security denying CFINDEX from indexing a collection (Solr/CF9)

    Hello, everyone.
    I did fix the last Sandbox security related issue with Solr collections - it was in the "Files/Dir" section, I had to put everything under C:\ColdFusion9\wwwroot.
    Now, I'm facing yet another Sandbox related issue with collections.
    I have one reindex script that has NO ISSUES when pulling data from a database and indexing a collection from that.
    I have another reindex script that will not index a collection from a query, unless Sandbox is disabled.  I will try to give some pseudo code.
    <cfquery name="search_results" datasource="documents">
      SELECT DOC_ID, DOC_NAME, DOC_DESCRIPTION
      FROM DOC
      WHERE DOC_ID in (<cfqueryparam value="#thisList#" cfsqltype="CF_SQL_VARCHAR" list="yes">)
    </cfquery>
    <cftry>
      <cfindex action="refresh" collection="collection_name" key="DOC_DESCRIPTION" type="custom" title="DOC_DESCRIPTION" query="search_results" body="DOC_ID, DOC_NAME, DOC_DESCRIPTION" status="results" />
      <cfcatch><cfdump var="#cfcatch#"></cfcatch>
    </cftry>
    The query will retrieve 15 records, with or without Sandbox.  But the CFINDEX will not work if Sandbox is enabled.
    The other reindex script is not affected, either way.
    What could be causing the CFINDEX to fail?
    Thank you,
    ^_^

    I had a similar issue with CFSEARCH on CF10 with sandbox security that I resolved by adding the following to the neo-security.xml file:
    <struct><var name='CLASS'><string>java.net.SocketPermission</string></var><var name='TARGET'><string>127.0.0.1:0</string></var><var name='ACTION'><string>listen,resolve</string></var></struct></array></var></struct></var> </struct>
    That gives permission to listen on dynamic ports (the colon-zero part).

Maybe you are looking for

  • [Solved]Can sox use thunar's synatax to add wavs from within a folder?

    Sorry I renamed this topic to be more specific to the issue(re-edit: oops that was a terrible subject title earlier I must've rushed when editing.) NOTE:A workable solution is in my last post... Ok I'm trying to configure Thunar to run a simple scrip

  • In an extended classic scenario, how can we make few purchase orders to sta

    Hi All, In an extended classic scenario, how can we make few purchase orders to stay local (i.e. without copying it to the back end). The decision criteria to stay local is information other than product category, i.e. using pcard and the cart value.

  • Install/Uninstall of Oracle10g client deletes TNSNAMES file

    I'm not sure if this is the correct forum to put this in... but... We have an Oracle 9i database and are using the Oracle 10g client. Our TNSNAMES.ORA file is located on a shared folders so that our customers can all access it from one point (by sett

  • Incoming caller full screen photo still not available in iOS8

    I saw iOS 8 videos and can see incoming caller photo is restored with full screen we all love to see in iPhone. However I upgraded my iPhone to iOS 8 and still see that thumb nail caller pic.. Is this corrected or still the same as iOS 7?

  • Country, region , district,office,group

    Hi, In t-code XD01(customer crestion ). in first screen on  GENERAL DATA TAB, i have to add Country , Region. And under SALES AREA DATA  TAB, i have to add Sales District , Sales Office, Sales Group for particular country added.. What are the t-codes