Some methods of the ColdFusion MX 7 and MX 7.0.1 Admin API utility may return the error "Current user is not authorized to invoke this method" even though proper authentication has been used.


The Admin API is CFC-based and uses internal roles to regulate access to methods where the roles correspond to the configuration type of the ColdFusion server. Some Admin API methods are availble for use in the Server Configuration only, and are not available in the Multiserver Configuration or J2EE Configuration. This restriction is not mentioned in the ColdFusion MX 7 or MX 7.0.1 documentation at this time.


When using Multiserver or J2EE configurations, the Admin API methods for which you are most likely to encounter the problem aregetJvmProperty and setJvmProperty. In place of the Admin API getJvmProperty method, you can create an object of java.lang.System to gain read access to the JVM System Properties at runtime.

For example:

<cfscript>    System = createObject("java","java.lang.System");</cfscript><CFDUMP var="">

This work is licensed under a Creative Commons Attribution-Noncommercial-Share Alike 3.0 Unported License  Twitter™ and Facebook posts are not covered under the terms of Creative Commons.

Legal Notices   |   Online Privacy Policy