Security exception in Modulesettings.aspx for blog module

This is the place to report bugs and get support. When posting in this forum, please always provide as much detail as possible.

Please do not report problems with a custom build or custom code in this forum. If you are producing your own build from the source code and have problems or questions, ask in the developer forum, do not report it as a bug.

This is the place to report bugs and get support

When posting in this forum, please try to provide as many relevant details as possible. Particularly the following:

  • What operating system were you running when the bug appeared?
  • What database platform is your site using?
  • What version of mojoPortal are you running?
  • What version of .NET do you use?
  • What steps are necessary to reproduce the issue? Compare expected results vs actual results.
Please do not report problems with a custom build or custom code in this forum. If you are producing your own build from the source code and have problems or questions, ask in the developer forum.
This thread is closed to new posts. You must sign in to post in the forums.
11/12/2010 6:09:45 AM
rspost
Gravatar
Total Posts 1
View Posts

Security exception in Modulesettings.aspx for blog module

I'm using mojoportal 2.3.5.5 MySQL with .Net framework 4.0 (partial trust) and i'm getting a security exceptions when i want to change the settings of a blogmodule. Changes to all other modules works great. 

///////////////////////////////BEGIN////////////////////////////////////////

2010-11-12 13:02:00,774 ERROR mojoPortal.Web.mojoBasePage - 193.173.111.185-nl-NL - /Admin/ModuleSettings.aspx?mid=19&pageid=10
System.Security.SecurityException: Request failed.
at AjaxControlToolkit.HTMLEditor.EditPanel.set_ActiveMode(ActiveModeType value)
at AjaxControlToolkit.HTMLEditor.EditPanel.LoadPostData(String postDataKey, NameValueCollection postCollection)
at AjaxControlToolkit.ScriptControlBase.System.Web.UI.IPostBackDataHandler.LoadPostData(String postDataKey, NameValueCollection

postCollection)
at System.Web.UI.Page.ProcessPostData(NameValueCollection postData, Boolean fBeforeLoad)
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
The action that failed was:
Demand
The type of the first permission that failed was:
System.Security.PermissionSet
The Zone of the assembly that failed was:
MyComputer
2010-11-12 13:02:00,805 ERROR mojoPortal.Web.Global - 193.173.111.185-nl-NL - /Admin/ModuleSettings.aspx?mid=19&pageid=10
System.Security.SecurityException: Request failed.
at AjaxControlToolkit.HTMLEditor.EditPanel.set_ActiveMode(ActiveModeType value)
at AjaxControlToolkit.HTMLEditor.EditPanel.LoadPostData(String postDataKey, NameValueCollection postCollection)
at AjaxControlToolkit.ScriptControlBase.System.Web.UI.IPostBackDataHandler.LoadPostData(String postDataKey, NameValueCollection

postCollection)
at System.Web.UI.Page.ProcessPostData(NameValueCollection postData, Boolean fBeforeLoad)
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest()
at System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context)
at System.Web.UI.Page.ProcessRequest(HttpContext context)
at ASP.admin_modulesettings_aspx.ProcessRequest(HttpContext context) in c:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET

Files\root\ee4696a5\4e10c936\App_Web_if1iykek.7.cs:line 0
at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
The action that failed was:
Demand
The type of the first permission that failed was:
System.Security.PermissionSet
The Zone of the assembly that failed was:
MyComputer


////////////////////////////////////////END/////////////////////// 

11/12/2010 11:17:18 AM
Joe Audette
Gravatar
Total Posts 18439
View Posts

Re: Security exception in Modulesettings.aspx for blog module

Hi,

Thanks for reporting this problem, I was not aware of it, but after looking into it it seems to be a known issue. We really need Microsoft to fix this so you can help by voting for this work item on codeplex

http://ajaxcontroltoolkit.codeplex.com/workitem/26772

In the meantime, the only solution I can think of is to add logic to degrade to a plain textarea if running in medium trust. I will do that before the next release of mojoPortal.

Thanks,

Joe

You must sign in to post in the forums. This thread is closed to new posts.