Requested template has been denied access

1
votes

Recently, a migration from CF8 to CF10 has caused some issues. Both environments are sandboxed. The developers are moving their CF8 production code to the CF10 development environment to test and refine before moving to CF10 production.

The CF8 data areas were hosted locally on the server. The CF10 data areas are hosted on a NAS device. This is the code that is referenced in the error:

    <cfinvoke component="popup/ListComponent" method="diaplayDivNavigazione" form=search_files page=#JavaCast("int",page)# recordCount=#fatFileData.RecordCount# maxRows=#maxrow# field=page>

The error is produced in the CF10 dev environment but performs as expected in the CF8 production environment. The error is:

Security: The requested template has been denied access to C:/ColdFusion10/cfusion3/gateway/cfc.

The following is the internal exception message: access denied (java.io.FilePermission C:/ColdFusion10/cfusion3/gateway/cfc read)

The error makes me think the app cannot read C:/Coldfusion10/cfusion3/gateway/cfc. This mapping is present in the CF Admin for the overall server. Must it be specified in the individual sandbox as well? As far as the sandbox access, I added R/W/E/D access to the "popup" directory listed in the code using "FULLPATH\popup\" and "FULLPATH\popup-"

I cannot access the page to test and must wait for the developer. Is there anything else that I could add, modify or enable to resolve this?

Thank you.

1
coldfusioncoldfusion-8coldfusion-10
Is this a linux or windows server? - fyroc
My apologies. This is a Windows 2008 R2 Server running IIS 7.5 - aparker81
Sounds like a folder permission issue. Can you check to see if ColdFusion is a user for the Coldfusion10 folder? - fyroc
The Coldfusion runtime user is present and has full control of the Coldfusion10 folder. - aparker81
I'm going to go ahead and post my comments as an answer so that they are easier to find for people. After you have tested please come back here and either accept the answer or add more details so we can help you further. And by they way, you don't need access to the code to test this but you do need access to the page. If you can browse to the page throwing the error that will test it. The sandbox settings do not require a restart. - Miguel-F

1 Answers

2
votes

Promoted from the comments

The error that is being reported - access denied (java.io.FilePermission ... - is coming from the sandbox security. If I understand correctly, you have a mapping named "popup" that you are using in the code. The sandbox however requires physical paths. I do not see the folder "popup" in the error message you provided. It looks like you added a sandbox entry for the "popup" mapping. That won't work. Add an entry for the physical path instead.

And by the way, from the error, that piece of code only requires READ access.
And you are also missing a trailing slash "\" in your sandbox setting.

C:\FULLPATH\popup-

should be 

C:\FULLPATH\The_Real_Folder_Name\-

and you also need the other (without the hyphen)

C:\FULLPATH\The_Real_Folder_Name\

You don't need access to the code to test this but you do need access to the page. If you can browse to the page that is throwing the error then that will test it. Modifying the sandbox settings does not require a restart.