Coldfusion 11 Multiple Instance Multiple User Access to Settings Summary exception

[michael001]

I have a multi-instance and using multiple user administration. One of my users notified me he was checking an exception when viewing "Settings Summary" in CFIDE. I was able to replicate the issue by creating a new user and assigning all available permissions. Going out on a limb, I'm guessing the the function $funcCHECKROOTADMINUSER is checking if the user is the "admin" user, which they are not.

Can someone confirm if this is actually what is happening?

"Error","ajp-bio-8012-exec-1","03/03/15","09:42:21","cfadmin","The current user is not authorized to invoke this method. The specific sequence of files included or processed is: D:\ColdFusion11\BIA\wwwroot\CFIDE\administrator\reports\index.cfm, line: 105 "

coldfusion.runtime.CustomException: The current user is not authorized to invoke this method.

  at coldfusion.tagext.lang.ThrowTag.doStartTag(ThrowTag.java:142)

  at coldfusion.runtime.CfJspPage._emptyTcfTag(CfJspPage.java:2986)

  at cfaccessmanager2ecfc2038841021$funcCHECKROOTADMINUSER.runFunction(/CFIDE/adminapi/accessmanager.cfc:105)

  at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:487)

  at coldfusion.filter.SilentFilter.invoke(SilentFilter.java:47)

  at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:383)

  at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:95)

  at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:334)

  at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:231)

  at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:643)

  at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:432)

  at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:402)

  at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2483)

  at cfsecurity2ecfc1699800112$funcISSECUREPROFILE.runFunction(/CFIDE/adminapi/security.cfc:59)

  at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:487)

  at coldfusion.filter.SilentFilter.invoke(SilentFilter.java:47)

  at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:383)

  at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:95)

  at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:334)

  at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:231)

  at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:643)

  at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:432)

  at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:402)

  at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2483)

  at cf_report2ecfm1337730512._factor77(/CFIDE/administrator/reports/_report.cfm:2637)

  at cf_report2ecfm1337730512._factor78(/CFIDE/administrator/reports/_report.cfm:67)

  at cf_report2ecfm1337730512.runPage(/CFIDE/administrator/reports/_report.cfm:1)

  at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:246)

  at coldfusion.tagext.lang.IncludeTag.handlePageInvoke(IncludeTag.java:736)

  at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:572)

  at coldfusion.runtime.CfJspPage._emptyTcfTag(CfJspPage.java:2986)

  at cfindex2ecfm1729336913.runPage(/CFIDE/administrator/reports/index.cfm:41)

  at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:246)

  at coldfusion.tagext.lang.IncludeTag.handlePageInvoke(IncludeTag.java:736)

  at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:572)

  at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65)

  at coldfusion.filter.IpFilter.invoke(IpFilter.java:45)

  at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:487)

  at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:42)

  at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40)

  at coldfusion.filter.PathFilter.invoke(PathFilter.java:142)

  at coldfusion.filter.LicenseFilter.invoke(LicenseFilter.java:30)

  at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:94)

  at coldfusion.filter.BrowserDebugFilter.invoke(BrowserDebugFilter.java:78)

  at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28)

  at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38)

  at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:58)

  at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38)

  at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22)

  at coldfusion.filter.CachingFilter.invoke(CachingFilter.java:62)

  at coldfusion.CfmServlet.service(CfmServlet.java:219)

  at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89)

  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303)

  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)

  at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42)

  at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46)

  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)

  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)

  at coldfusion.filter.ClickjackingProtectionFilter.doFilter(ClickjackingProtectionFilter.java:75)

  at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46)

  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)

  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)

  at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220)

  at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122)

  at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:501)

  at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171)

  at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)

  at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)

  at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:422)

  at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:199)

  at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:607)

  at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:314)

  at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)

  at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)

  at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)

  at java.lang.Thread.run(Thread.java:745)

[Guest]

I have the same setting and similar issue with different error message.  Can anyone here help?  Thanks.

The current user is not authorized to invoke this method.

The error occurred in accessmanager.cfc: line 105    Called from security.cfc: line 59   Called from _report.cfm: line 2637   Called from _report.cfm: line 67   Called from _report.cfm: line 1   Called from index.cfm: line 41

-1 : Unable to display error's location in a CFML template.

Resources: Check the ColdFusion documentation to verify that you are using the correct syntax. Search the Knowledge Base to find a solution to your problem.

Browser  Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0 Remote Address  192.168.3.207 Referrer  http://devintcf11:8500/CFIDE/administrator/index.cfm Date/Time  19-Apr-16 10:24 AM

Stack Trace

at cfaccessmanager2ecfc1495508863$funcCHECKROOTADMINUSER.runFunction(/CFIDE/adminapi/accessmanager.cfc:105) at cfsecurity2ecfc479294193$funcISSECUREPROFILE.runFunction(/CFIDE/adminapi/security.cfc:59) at cf_report2ecfm1609719726._factor77(/CFIDE/administrator/reports/_report.cfm:2637) at cf_report2ecfm1609719726._factor78(/CFIDE/administrator/reports/_report.cfm:67) at cf_report2ecfm1609719726.runPage(/CFIDE/administrator/reports/_report.cfm:1) at cfindex2ecfm1841327952.runPage(/CFIDE/administrator/reports/index.cfm:41)  coldfusion.runtime.CustomException: The current user is not authorized to invoke this method. at coldfusion.tagext.lang.ThrowTag.doStartTag(ThrowTag.java:142) at coldfusion.runtime.CfJspPage._emptyTcfTag(CfJspPage.java:2991) at cfaccessmanager2ecfc1495508863$funcCHECKROOTADMINUSER.runFunction(/CFIDE/adminapi/accessmanager.cfc:105) at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:487) at coldfusion.filter.SilentFilter.invoke(SilentFilter.java:47) at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:383) at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:95) at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:334) at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:231) at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:643) at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:432) at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:402) at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2483) at cfsecurity2ecfc479294193$funcISSECUREPROFILE.runFunction(/CFIDE/adminapi/security.cfc:59) at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:487) at coldfusion.filter.SilentFilter.invoke(SilentFilter.java:47) at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:383) at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:95) at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:334) at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:231) at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:643) at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:432) at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:402) at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2483) at cf_report2ecfm1609719726._factor77(/CFIDE/administrator/reports/_report.cfm:2637) at cf_report2ecfm1609719726._factor78(/CFIDE/administrator/reports/_report.cfm:67) at cf_report2ecfm1609719726.runPage(/CFIDE/administrator/reports/_report.cfm:1) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:246) at coldfusion.tagext.lang.IncludeTag.handlePageInvoke(IncludeTag.java:736) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:572) at coldfusion.runtime.CfJspPage._emptyTcfTag(CfJspPage.java:2991) at cfindex2ecfm1841327952.runPage(/CFIDE/administrator/reports/index.cfm:41) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:246) at coldfusion.tagext.lang.IncludeTag.handlePageInvoke(IncludeTag.java:736) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:572) at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65) at coldfusion.filter.IpFilter.invoke(IpFilter.java:45) at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:487) at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:42) at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40) at coldfusion.filter.PathFilter.invoke(PathFilter.java:142) at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:94) at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28) at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38) at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:58) at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38) at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22) at coldfusion.filter.CachingFilter.invoke(CachingFilter.java:62) at coldfusion.CfmServlet.service(CfmServlet.java:219) at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) at coldfusion.inspect.weinre.MobileDeviceDomInspectionFilter.doFilter(MobileDeviceDomInspectionFilter.java:121) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) at coldfusion.filter.ClickjackingProtectionFilter.doFilter(ClickjackingProtectionFilter.java:75) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122) at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:505) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:170) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:437) at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1079) at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:625) at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1760) at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.java:1719) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) at java.lang.Thread.run(Thread.java:745)