1 Reply Latest reply on Apr 19, 2016 10:26 AM by xxxx86230625

    Coldfusion 11 Multiple Instance Multiple User Access to Settings Summary exception

    michael001

      I have a multi-instance and using multiple user administration. One of my users notified me he was checking an exception when viewing "Settings Summary" in CFIDE. I was able to replicate the issue by creating a new user and assigning all available permissions. Going out on a limb, I'm guessing the the function $funcCHECKROOTADMINUSER is checking if the user is the "admin" user, which they are not.


      Can someone confirm if this is actually what is happening?

       

      "Error","ajp-bio-8012-exec-1","03/03/15","09:42:21","cfadmin","The current user is not authorized to invoke this method. The specific sequence of files included or processed is: D:\ColdFusion11\BIA\wwwroot\CFIDE\administrator\reports\index.cfm, line: 105 "

      coldfusion.runtime.CustomException: The current user is not authorized to invoke this method.

        at coldfusion.tagext.lang.ThrowTag.doStartTag(ThrowTag.java:142)

        at coldfusion.runtime.CfJspPage._emptyTcfTag(CfJspPage.java:2986)

        at cfaccessmanager2ecfc2038841021$funcCHECKROOTADMINUSER.runFunction(/CFIDE/adminapi/accessm anager.cfc:105)

        at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:487)

        at coldfusion.filter.SilentFilter.invoke(SilentFilter.java:47)

        at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:383)

        at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:95)

        at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:334)

        at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:231)

        at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:643)

        at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:432)

        at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:402)

        at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2483)

        at cfsecurity2ecfc1699800112$funcISSECUREPROFILE.runFunction(/CFIDE/adminapi/security.cfc:59 )

        at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:487)

        at coldfusion.filter.SilentFilter.invoke(SilentFilter.java:47)

        at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:383)

        at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:95)

        at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:334)

        at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:231)

        at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:643)

        at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:432)

        at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:402)

        at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2483)

        at cf_report2ecfm1337730512._factor77(/CFIDE/administrator/reports/_report.cfm:2637)

        at cf_report2ecfm1337730512._factor78(/CFIDE/administrator/reports/_report.cfm:67)

        at cf_report2ecfm1337730512.runPage(/CFIDE/administrator/reports/_report.cfm:1)

        at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:246)

        at coldfusion.tagext.lang.IncludeTag.handlePageInvoke(IncludeTag.java:736)

        at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:572)

        at coldfusion.runtime.CfJspPage._emptyTcfTag(CfJspPage.java:2986)

        at cfindex2ecfm1729336913.runPage(/CFIDE/administrator/reports/index.cfm:41)

        at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:246)

        at coldfusion.tagext.lang.IncludeTag.handlePageInvoke(IncludeTag.java:736)

        at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:572)

        at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65)

        at coldfusion.filter.IpFilter.invoke(IpFilter.java:45)

        at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:487)

        at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:42)

        at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40)

        at coldfusion.filter.PathFilter.invoke(PathFilter.java:142)

        at coldfusion.filter.LicenseFilter.invoke(LicenseFilter.java:30)

        at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:94)

        at coldfusion.filter.BrowserDebugFilter.invoke(BrowserDebugFilter.java:78)

        at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:2 8)

        at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38)

        at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:58)

        at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38)

        at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22)

        at coldfusion.filter.CachingFilter.invoke(CachingFilter.java:62)

        at coldfusion.CfmServlet.service(CfmServlet.java:219)

        at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.j ava:303)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)

        at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42 )

        at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.j ava:241)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)

        at coldfusion.filter.ClickjackingProtectionFilter.doFilter(ClickjackingProtectionFilter.java :75)

        at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.j ava:241)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)

        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220)

        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122)

        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:501)

        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171)

        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)

        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)

        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:422)

        at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:199)

        at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.jav a:607)

        at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:314)

        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)

        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)

        at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)

        at java.lang.Thread.run(Thread.java:745)

        • 1. Re: Coldfusion 11 Multiple Instance Multiple User Access to Settings Summary exception
          xxxx86230625

          I have the same setting and similar issue with different error message.  Can anyone here help?  Thanks.

           

          The current user is not authorized to invoke this method.

           
            The error occurred in accessmanager.cfc: line 105
             Called from security.cfc: line 59
            Called from _report.cfm: line 2637
            Called from _report.cfm: line 67
            Called from _report.cfm: line 1
            Called from index.cfm: line 41
           
          -1 : Unable to display error's location in a CFML template. 

          Resources:
          Browser  Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
          Remote Address  192.168.3.207
          Referrer  http://devintcf11:8500/CFIDE/administrator/index.cfm
          Date/Time  19-Apr-16 10:24 AM
          Stack Trace
          at cfaccessmanager2ecfc1495508863$funcCHECKROOTADMINUSER.runFunction(/CFIDE/adminapi/accessm anager.cfc:105) at cfsecurity2ecfc479294193$funcISSECUREPROFILE.runFunction(/CFIDE/adminapi/security.cfc:59) at cf_report2ecfm1609719726._factor77(/CFIDE/administrator/reports/_report.cfm:2637) at cf_report2ecfm1609719726._factor78(/CFIDE/administrator/reports/_report.cfm:67) at cf_report2ecfm1609719726.runPage(/CFIDE/administrator/reports/_report.cfm:1) at cfindex2ecfm1841327952.runPage(/CFIDE/administrator/reports/index.cfm:41) 

          coldfusion.runtime.CustomException: The current user is not authorized to invoke this method. at coldfusion.tagext.lang.ThrowTag.doStartTag(ThrowTag.java:142) at coldfusion.runtime.CfJspPage._emptyTcfTag(CfJspPage.java:2991) at cfaccessmanager2ecfc1495508863$funcCHECKROOTADMINUSER.runFunction(/CFIDE/adminapi/accessmanager.cfc:105) at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:487) at coldfusion.filter.SilentFilter.invoke(SilentFilter.java:47) at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:383) at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:95) at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:334) at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:231) at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:643) at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:432) at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:402) at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2483) at cfsecurity2ecfc479294193$funcISSECUREPROFILE.runFunction(/CFIDE/adminapi/security.cfc:59) at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:487) at coldfusion.filter.SilentFilter.invoke(SilentFilter.java:47) at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:383) at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:95) at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:334) at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:231) at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:643) at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:432) at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:402) at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2483) at cf_report2ecfm1609719726._factor77(/CFIDE/administrator/reports/_report.cfm:2637) at cf_report2ecfm1609719726._factor78(/CFIDE/administrator/reports/_report.cfm:67) at cf_report2ecfm1609719726.runPage(/CFIDE/administrator/reports/_report.cfm:1) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:246) at coldfusion.tagext.lang.IncludeTag.handlePageInvoke(IncludeTag.java:736) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:572) at coldfusion.runtime.CfJspPage._emptyTcfTag(CfJspPage.java:2991) at cfindex2ecfm1841327952.runPage(/CFIDE/administrator/reports/index.cfm:41) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:246) at coldfusion.tagext.lang.IncludeTag.handlePageInvoke(IncludeTag.java:736) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:572) at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65) at coldfusion.filter.IpFilter.invoke(IpFilter.java:45) at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:487) at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:42) at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40) at coldfusion.filter.PathFilter.invoke(PathFilter.java:142) at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:94) at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28) at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38) at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:58) at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38) at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22) at coldfusion.filter.CachingFilter.invoke(CachingFilter.java:62) at coldfusion.CfmServlet.service(CfmServlet.java:219) at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) at coldfusion.inspect.weinre.MobileDeviceDomInspectionFilter.doFilter(MobileDeviceDomInspectionFilter.java:121) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) at coldfusion.filter.ClickjackingProtectionFilter.doFilter(ClickjackingProtectionFilter.java:75) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122) at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:505) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:170) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:437) at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1079) at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:625) at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1760) at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.java:1719) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) at java.lang.Thread.run(Thread.java:745)