Flex app authenticates with any user credentials

[GoogleCodeExporter]

On Linux - using the Opera web browser, I can enter anything as the
username and password and successfully log in to the flex app and view all
the transcripts (and also edit the event metadata). (same build was tested
with IE and firefox - and this problem is not there). The logged in user
only has guest permissions

Conversely, if I log in as a registered user, it does not recognize the
groups that the user is a member of, so the user still has guest
permissions in this case also (i.e. it doesn't show that the user is a
member of the text and markup groups)

Original issue reported on code.google.com by swami.ke...@gmail.com on 16 Sep 2009 at 9:40

[GoogleCodeExporter]

After further investigations... it's not a problem with Opera (the code is 
actually 
authenticating the user when it should not be). In Firefox and IE there is an 
inbuilt authentication popup which comes up - which Opera doesn't seem to have, 
which has been masking the issue.

I have traced the problem to the RESTClient class. Here the call() function is 
incorrectly executing the success function when, in fact, the user has not been 
authenticated. See below for the offending code !

httpService.addEventListener(ResultEvent.RESULT, function(evt:ResultEvent):void 
{
    if (evt.result.hasOwnProperty("error") && evt.result.error != null) {
        failureFunc("Failed because: " + evt.result.error);
        return;
    }
    trace("Executed REST service in " + (getTimer() - callStartTime) + "ms");
    successFunc(evt.result);
});

Original comment by swami.ke...@gmail.com on 16 Sep 2009 at 11:10

• Changed title: Flex app authenticates with any user credentials

[GoogleCodeExporter]

http://kb2.adobe.com/cps/403/kb403184.html

Original comment by swami.ke...@gmail.com on 16 Sep 2009 at 12:42

[GoogleCodeExporter]

need to set file and collection access permissions properly

Original comment by swami.ke...@gmail.com on 18 Sep 2009 at 9:24