Too many UnauthorizedDownloadResourceException thrown for export by Bots

XMLWordPrintable

    • 2
    • Severity 2 - Major

      I'm seeing a lot of lines in the Tomcat logs (>1k in a day) similar to:

      2008-12-14 01:12:19,687 ERROR [TP-Processor32] [confluence.servlet.download.ExportDownload] getStreamForDownload 
com.atlassian.confluence.importexport.resource.UnauthorizedDownloadResourceException
 -- url: /download/temp/export_12142008_011218/CONF27-145097245-20081214-01_12_18170.pdf;jsessionid=FCBE64C46B556E4DD0C2A300F0CBB530 | userName: anonymous

      in the CAC server logs, they correspond to line pairs in the access log like:

      [14/Dec/2008:01:12:18 -0600] "GET /pages/doexportpage.action?pageId=145097245&type=TYPE_PDF HTTP/1.1" 302 - "-" "Mozilla/5.0 (compatible; Googlebot/2.1; 
+http://www.google.com/bot.html)" 390457
[14/Dec/2008:01:12:19 -0600] "GET /download/temp/export_12142008_011218/CONF27-145097245-20081214-01_12_18170.pdf;jsessionid=FCBE64C46B556E4DD0C2A300F0CBB530 HTTP/1.1" 
403 964 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 4360

      It looks like ExportDownload.getStreamForDownload is catching the exception from ExportDownloadResourceManager.getResourceReader, thrown because DownloadGateKeeper.isAccessPermitted is not finding the key for the anonymous user and exported file. Not sure why, but it's happening almost exclusively for Googlebot and msnbot.

      CLANG crossref: http://extranet.atlassian.com/display/CONFMON/confluence.servlet.download.ExportDownload.getStreamForDownload

        1. temp_dir.png
          temp_dir.png
          9 kB

            Assignee:
            Unassigned
            Reporter:
            David Taylor (Inactive)
            Votes:
            4 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: