You don't have permission to access ....fckeditor.html etc

Hi There

I installed nopcommerce on mys server without any problem appart from the fact that I am getting an error message from fckeditor when I try to add a product in a categorie ( it doesn't stop me to add the product but the html editor diesn't show and istead I have the following error)

You don't have permission to access http://www.mydomain.com/store/editors/fckeditor/editor/fckeditor.html?InstanceName=ctl00_cph1_ctrlProductAdd_ProductTabs_pnlProductInfo_ctrlProductInfoAdd_txtFullDescription&Toolbar=Default on this server.


I checked my file manager and check the permission for the folder "fckeditor" and the permissions seems fine (modify ( IUSR ))

any ideas ?

Thanks


Chris

just installed 1.40 in the hope that it might solve the problem, but no!

by the wayidn't mean to post this topic twice. sorry

Cheers

Chris

Can you post your web.config file here (located in \Administration folder)?

I do not know if this --> is  relevant, but IUSR_ and Network Service must both have read, write, execute permission - i seem to remember giving delete permission as well (i am using webhost4life)

It might be relevant if he removed or renamed "Admin" role.

P.S. Look at \NopCommerceStore\editors\fckeditor\editor\filemanager\connectors\aspx\config.ascx file. CheckAuthentication() method

lol, andrei - i meant i did not know if my comment was relevant !

Hi Guys, thanks for coming back to me.

first, here is my web.config file from the administration directory

<?xml version="1.0"?>
<configuration>
  <system.web>
    <authorization>
      <allow roles="Admin"/>
      <deny users="*"/>
    </authorization>
    <pages theme="administration">
      <namespaces>
        <add namespace="System.Collections.Generic"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Audit"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Categories"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Configuration.Settings"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Content.Blog"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Content.NewsManagement"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Content.Polls"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.CustomerManagement"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Directory"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Localization"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Manufacturers"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Measures"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Media"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Messages"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Orders"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Payment"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Products.Attributes"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Products.Specs"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Products"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Promo.Affiliates"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Promo.Campaigns"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Promo.Discounts"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.SEO"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Shipping"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Tax"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Templates"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Utils"/>
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Warehouses"/>
        <add namespace="NopSolutions.NopCommerce.Common"/>
        <add namespace="NopSolutions.NopCommerce.Common.Utils"/>
        <add namespace="NopSolutions.NopCommerce.Common.Utils.Html"/>
        <add namespace="NopSolutions.NopCommerce.Controls"/>
        <add namespace="NopSolutions.NopCommerce.Controls.Payment.Validators"/>
      </namespaces>
      <controls>
        <add tagPrefix="asp" namespace="System.Web.UI" assembly="System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"/>
        <add tagPrefix="asp" namespace="System.Web.UI.WebControls" assembly="System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"/>
      </controls>
    </pages>
  </system.web>
</configuration>



I also checked the config.ascx from fckeditor>editor>filemanager etc...

and here is what you mentionned

  private bool CheckAuthentication()
  {
    // WARNING : DO NOT simply return "true". By doing so, you are allowing
    // "anyone" to upload and list the files in your server. You must implement
    // some kind of session validation here. Even something very simple as...
    //
    //    return ( Session[ "IsAuthorized" ] != null && (bool)Session[ "IsAuthorized" ] == true );
    //
    // ... where Session[ "IsAuthorized" ] is set to "true" as soon as the
    // user logs in your system.

        bool isAdmin = this.Page != null && this.Page.User != null && this.Page.User.IsInRole("Admin");
        return isAdmin;
  }


I am not sure if it's relevant or not, but in the Nop_Customer table, I changed the Email, Username, field by my own email address as opposed to the one which came with the database ( that's all I changed manually in the db ) Also this problem seems to only affect the "Add a product" page , if I go to "Add a news item" the HTML editor works fine.

Thanks

Chris

Hi Guys

I hope I am not a pain but I am kind f stuck with this problem. Do you have anything that I could try to solve this ?

Thanks

Chris

Hi Cgoasduff,

I'm suffering the same miserable problem, I've set everything up on Windows 7 64 bit locally  and the only thing that fails is the image upload using FCKEditor.

I ran Fiddler and can see that /editors/fckeditor/editor/filemanager/connectors/aspx/upload.aspx?Type=Image is failing with a 500 screaming about

"Content controls have to be top-level controls in a content page or a nested master page that references a master page"

I post if I make progress, but I'm getting fed up.

I ahve a new piece of information, the HTML editor loads fine on the "Add a new campaign list" page

the error is only triggered in the add a category , add a product ?!?

Any input would be valuable.

Chris