Lucee 7.0.2.106
Apache Tomcat/11.0.18
21.0.10 (Eclipse Adoptium) 64bit
Windows 11 (10.0) 64bit
IIS 10
On a fresh install of Lucee 7, when Security > Access > File Access is set to “local” and custom directories are added, none of those directories are retained in the interface, and none are honored by Lucee as file security exceptions. They are, however, saved to the .CFConfig.json.
This seems very similar to an issue I ran into in Lucee 6 multi mode, only, this time, it’s happening in the global single mode context.
I don’t think so…? I tried updating to 7.0.3.43-RC and 7.2.0.13-BETA, and neither appeared to fix this issue.
On a separate note, when I tried to downgrade back to 7.0.2.106 from each of those updates, I received the following error each time:
there is a problem with casting [zip://C:\lucee7\tomcat\lucee-server\context\context\lucee-admin.lar!/Application.cfc/application_cfc$cf] to a component (ComponentPageImpl) (org.apache.felix.framework.BundleWiringImpl$BundleClassLoader)
I couldn’t figure out how to recover, but I was able to return to a previous checkpoint.
re file access
https://luceeserver.atlassian.net/browse/LDEV-6242
that bug with casting is solved in newer builds
nuking the felix cache will resolve it
2 Likes
Beautiful!!
And, thanks for the link, I will definitely bookmark that. 
1 Like