Webmaster Forum / ColdFusion / Server Administration / July 2008

I am having the same error -

"Error","jrpp-1","03/17/08","10:20:15",,"The current user is not authorized to
invoke this method. "
coldfusion.runtime.CustomException: The current user is not authorized to
invoke this method.
    at coldfusion.tagext.lang.ThrowTag.doStartTag(ThrowTag.java:124)
    at coldfusion.runtime.CfJspPage._emptyTag(CfJspPage.java:2640)
    at
cfaccessmanager2ecfc131535872$funcCHECKADMINROLES.runFunction(E:\cf8_final\cfusi
on\wwwroot\CFIDE\adminapi\accessmanager.cfc:48)
    at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:418)
    at coldfusion.filter.SilentFilter.invoke(SilentFilter.java:47)
    at
coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:324)
    at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:56)
    at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:277)
    at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:192)
    at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:448)
    at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:308)
    at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2261)
    at
cfservermonitoring2ecfc1089727812$funcGETALERTSTATUS.runFunction(E:\cf8_final\cf
usion\wwwroot\CFIDE\adminapi\servermonitoring.cfc:2167)
    at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:418)
    at coldfusion.runtime.UDFMethod$ReturnTypeFilter.invoke(UDFMethod.java:360)
    at
coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:324)
    at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:56)
    at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:277)
    at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:192)
    at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:448)
    at coldfusion.flash.filter.CFCInvokeFilter.invoke(CFCInvokeFilter.java:147)
    at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:279)
    at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40)
    at
coldfusion.flash.filter.CFCInvokePathFilter.invoke(CFCInvokePathFilter.java:70)
    at
coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilt
er.java:28)
    at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38)
    at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22)
    at
coldfusion.flash.messaging.ColdFusionAdapter.invoke(ColdFusionAdapter.java:223)
    at
flex.messaging.services.RemotingService.serviceMessage(RemotingService.java:173)
    at flex.messaging.MessageBroker.routeMessageToService(MessageBroker.java:1165)
    at
flex.messaging.endpoints.AbstractEndpoint.serviceMessage(AbstractEndpoint.java:7
57)
    at
flex.messaging.endpoints.amf.MessageBrokerFilter.invoke(MessageBrokerFilter.java

    at flex.messaging.endpoints.amf.LegacyFilter.invoke(LegacyFilter.java:158)
    at flex.messaging.endpoints.amf.SessionFilter.invoke(SessionFilter.java:48)
    at
flex.messaging.endpoints.amf.BatchProcessFilter.invoke(BatchProcessFilter.java:6
7)
    at
flex.messaging.endpoints.amf.SerializationFilter.invoke(SerializationFilter.java

    at flex.messaging.endpoints.AMFEndpoint.service(AMFEndpoint.java:122)
    at flex.messaging.MessageBrokerServlet.service(MessageBrokerServlet.java:424)
    at
coldfusion.flex.ColdFusionMessageBrokerServlet.service(ColdFusionMessageBrokerSe
rvlet.java:50)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
    at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89)
    at jrun.servlet.FilterChain.doFilter(FilterChain.java:86)
    at
coldfusion.filter.FlashRequestControlFilter.doFilter(FlashRequestControlFilter.j
ava:71)
    at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46)
    at jrun.servlet.FilterChain.doFilter(FilterChain.java:94)
    at jrun.servlet.FilterChain.service(FilterChain.java:101)
    at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106)
    at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42)
    at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:284)
    at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543)
    at
jrun.servlet.jrpp.JRunProxyService.invokeRunnable(JRunProxyService.java:203)
    at
jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320)
    at
jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428)
    at
jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266)
    at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66)

Interesting that it is referencing
E:\cf8_final\cfusion\wwwroot\CFIDE\adminapi\servermonitoring.cfc;  I never had
that directory setup during installation.

I did install the security bulletin regarding CF8 logs invalid admin interface
log-in attempts.  Could this be associated?

Well, I guess I'm confused.  I installed and setup my CF8 environment, and did not setup any additional users.  The User Name field is still grayed-out.

I am confused also. Do you have sandbox security turned on? Are you using developer, standard or enterprise?

Sorry - I assumed too much.  My environment is Windows 2003 R2 SP2, Enterprise
Edition with cumulative hotfix 3 and Security Bulletin for invalid login
attempts loaded, J2SDK 1.4.2_17, no sandbox security, with an Access (yes, I
know) database.

I'm using single server configuration, not Multiserver Configuration or J2EE Configuration.  Thanks anyways.

Interesting.  I tried to turn off security (going into the security settings in
CF Administrator, then clicking on 'No authentication needed (not recommended)
', then saved.  After that, I clicked on the 'logout' button at the top right,
but it won't let me logout - it keeps me logged in and at the same page.

I set up the instance of CF8 from scratch.  I orginally tried an upgrade from
CF MX 6.1, but had problems with my scheduled tasks and IIS. So I un-installed
CF8 and CF MX 6.1, rebooted, and then installed CF8.

Sounds like you may have a bad lib\neo-security.xml. Perhaps it is the problem with both of these issues. Can you copy one from another CF8 instance?

I've checked both my test and production environment, and the neo-security.xml
and neo-security.bak files all seem to be the same. I've viewed them in
notepad, but maybe that's not the best product to use to compare the contents.

Interesting - I've checked my log files and have only found the one instance of
this error, so maybe something that had been suggested to me fixed the initial
issue.  For me (at least), I'll continue to monitor the logs for this error and
will be back if I encounter them again.  Thanks for eveyones suggestions.

Does this work with Vista ?

Anthony O'Hare

http://www.advanceddatarecovery.co.uk http://www.inkcartridgesuk.co.uk http://www.datarecovery24.co.uk