grails - 被拒绝访问grails中的应用程序

Question

我正在学习有关Grails论坛应用程序的本教程:http://grails.asia/grails-forum-application。

我已经完全完成了其中的工作，除了在教程中提到的教程(上面给出的链接)中使用spring-security-core:2.0.0插件代替了spring-security-core:1.2.7.3之外。

当我尝试登录时:出现此错误:

"Sorry, you're not authorized to view this page"

我不确定错误的确切原因是控制台没有提供跟踪信息。

我在Ubuntu Linux 16.04上使用GGTS Groovy / Grails工具套件版本:3.6.4.RELEASE。

我使用的代码与上面和github( https://github.com/grailsasia/grails-ex-forum)链接中列出的代码相同

我究竟做错了什么？该应用程序拒绝我访问，即使我使用的是应用程序自己生成的用户名和密码。

这是我用来加载数据的Bootstrap.groovy的代码(再次-直接来自教程本身):

class BootStrap {
    def random = new Random();
    def words = ("time,person,year,way,day,thing,man,world,life,hand,part,child,eye,woman,place,work,week,case,point," +
                "government,company,number,group,problem,fact,be,have,do,say,get,make,go,know,take,see,come,think,look," +
                "want,give,use,find,tell,ask,work,seem,feel,try,leave,call,good,new,first,last,long,great,little,own," +
                "other,old,right,big,high,different,small,large,next,early,young,important,few,public,bad,same,able,to,of," +
                "in,for,on,with,at,by,from,up,about,into,over,after,beneath,under,above,the,and,a,that,I,it,not,he,as,you," +
                "this,but,his,they,her,she,or,an,will,my,one,all,would,there,their").split(",")

    def init = { servletContext ->
        if (SecUser.count() == 0) {  // no user in db, lets create some
            def defaultRole = new SecRole(authority: 'ROLE_USER').save()
            // create 100 users
            (1..100).each { userNo ->
                String username = "user${userNo}"
                def user = new SecUser(username:username, password: 'secret', enabled: true).save()
                // all users will have default role
                new SecUserSecRole( secUser:user, secRole: defaultRole).save()
            }
        }

        if ( Section.count() == 0 ) { // create data if no forum data found
            // get all users
            def users = SecUser.list()
            // create 3 sections
            ('A'..'C').each { sectionLetter ->
                def sectionTitle = "Section ${sectionLetter}"
                def section = new Section(title: sectionTitle).save()
                // create 4 topics per section
                (1..4).each { topicNumber ->
                    def topicTitle = "Topic ${sectionLetter}-${topicNumber}"
                    def topicDescription = "Description of ${topicTitle}"
                    def topic = new Topic(section: section, title: topicTitle, description: topicDescription).save()
                    // create 10-20 threads each topic
                    def numberOfThreads = random.nextInt(11)+10
                    (1..numberOfThreads).each { threadNo ->
                        def opener = users[random.nextInt(100)]
                        def subject = "Subject ${sectionLetter}-${topicNumber}-${threadNo} "
                        def thread = new DiscussionThread(topic:topic, subject:subject, opener:opener).save()
                        new Comment(thread:thread, commentBy:opener, body:generateRandomComment()).save()
                        // create 10-35 replies per thread
                        def numberOfReplies = random.nextInt(26)+10
                        numberOfReplies.times {
                            def commentBy = users[random.nextInt(100)]
                            new Comment(thread:thread, commentBy:commentBy, body:generateRandomComment()).save()
                        }
                    }
                }
            }
        }
    }

    private String generateRandomComment() {
        def numberOfWords = random.nextInt(50) + 15
        StringBuilder sb = new StringBuilder()
        numberOfWords.times {
            def randomWord = words[random.nextInt(words.length)]
            sb.append("${randomWord} ")
        }
        return sb.toString()
    }

    def destroy = {
    }
}

我正在尽我所能找出正在发生的事情，但是我没有关于问题是什么的错误消息，本教程也无法帮助我找出原因。

更新!

查看我收到的答复后，我回头查看了教程，并将其发布在链接中，发现我的问题确实与允许的角色和访问权限列表有关。

这是我需要使用并了解更多信息的允许访问/角色/资源的列表:

// Added by the Spring Security Core plugin:
grails.plugin.springsecurity.userLookup.userDomainClassName = 'furqanforum.SecUser'
grails.plugin.springsecurity.userLookup.authorityJoinClassName = 'furqanforum.SecUserSecRole'
grails.plugin.springsecurity.authority.className = 'furqanforum.SecRole'
grails.plugin.springsecurity.controllerAnnotations.staticRules = [
  '/':                ['permitAll'],
  '/forum/**':        ['permitAll'],
  '/index':           ['permitAll'],
  '/index.gsp':       ['permitAll'],
  '/assets/**':       ['permitAll'],
  '/**/js/**':        ['permitAll'],
  '/**/css/**':       ['permitAll'],
  '/**/images/**':    ['permitAll'],
  '/**/favicon.ico':  ['permitAll'],
  '/login/**':        ['permitAll'],
  '/logout/**':       ['permitAll']
]

感谢所有为帮助我自助和获得新技能做出积极贡献的人!

我正在阅读有关 Spring 安全性和调整的更多内容，并且我会学习。但是根据已检查的答案以及答复和建议，这解决了我的问题，

Answer 1

没有任何配置更改，您不能仅从1.x版本更改为2.x版本。阅读What's New信息，更具体地说，阅读更改here。

以前，该插件允许访问，除非它需要用户没有的角色，但是现在，除非明确允许，否则该插件默认为拒绝所有访问。使用插件的1.x版本的旧教程不会意识到这一点。