I made changes to the Lucee admin under Security > Access. Under CFML Environment I changed File access from all to local.
After that I wanted to change the location of my WEB-INF directory so I made changes to the param-value tag under the CFMLServlet section in the file /opt/lucee/tomcat/conf/web.xml. After that I restarted Lucee but when I tried to access the admin I got a http 500 error.
Then I went back on the changes in the web.xml file, restarted Lucee again and now I can access lucee/admin/web.cfm (I get the login screen), but when I try to access /lucee/admin/server.cfm I get this error: can’t access [/opt/lucee/tomcat/lucee-server/context/userdata] directory must be inside [/opt/lucee/tomcat/webapps/ROOT], access is prohibited by security manager.
Does anybody know why this is happening?
OS: AlmaLinux 8.4
Java Version: 11.0.6 (AdoptOpenJDK) 64bit
Tomcat Version: Apache Tomcat/9.0.31
Lucee Version: 188.8.131.52