Hello,
Since upgrading to Version 14.9 we are unable to delete attachments.
When I try to delete an attachment via “Attachments → Actions → Delete” I get an error message that the attachment can’t be deleted. Only workaround is to create a new site, move the attachment there and then completely delete the new site.
I can’t find anything regarding this error in catalina.out. Anyone know whats the problem here?
Hi, I’m seeing the same problem after upgrading from XWiki 14.7 to 14.10.4. Our installation is behind an NGINX instance and is using the HTTPS protocol (it is in fact the standard Debian/Ubuntu package xwiki-tomcat9-mariadb/lts). The main (and only) wiki’s descriptor’s ‘Secure (SSL)’ Field is set to ‘Yes’.
All generated URLs are https:// (including page proper, create/edit buttons, history tab), except in the ‘Attachments’ tab; the links behind ‘Move’ and ‘Delete’ are http:// rather than https:// (used right-click and Copy Link to check). Pasting those into the browser address field and pressing enter will e. g. delete the attachment.
What I suspect is that HTTP links are untrusted, but after pasting the address manually the browser gets forwarded to the same address on the HTTPS protocol, so that the requested action will be executed.
Is this (presumably since version 14.9) a server misconfiguration, or is it a bug? Going from Descriptor of the wiki "xwiki" (XWiki.org) I’ve expected setting ‘Secure (SSL)’ to ‘Yes’ to be enough, but apparently not. If the former is the case, what other option in what config file might fix this?
Best,
Andreas
EDIT: Never mind, editing tomcat’s server.xml as per Tomcat Installation (XWiki.org) finally did the trick.