AnsweredAssumed Answered

alf_ticket vs ticket

Question asked by stevescott on Aug 5, 2010
Latest reply on Aug 7, 2010 by openpj
I opened my web interface and found an XML file, clicked it to open in a new tab.  I then logged out of alfresco copied the URL out into fiddler, and put alf_ticket on the end to see if I could get it while not being logged in (with a valid ticket of course).

So that failed, fiddler showed me a protected result

so I changed alf_ticket to just ticket (with the same ticket#) and I got the xml file back fine

…whats the deal?  is it now "ticket" for everything?

Even more strange is when I try and use jQuery to get that xml file with Ajax
            var xmlurl = $('#xmlFile').attr('value');
                type: "GET",
                url: xmlurl,
                dataType: "xml",
                success: parseXml

…it comes back protected
Set-Cookie   JSESSIONID=6816088CF7273B77A1E721C48D9031E3; Path=/alfresco
Location   http://alfrescosite/alfresco/faces/jsp/login.jsp