Testing Fortress Beta 2.

Logged in developers can click the "External Add" link from a project's Item Tracking page and view the External/AddItemExternal.aspx?pid=100 page just fine.

Anyone who uses the link who is not logged in as a licensed user receives an error. Even developers who log out and then try to access the page. They never see the External/AddItemExternal.aspx?pid=100 page. They are redirected to External/Error.aspx. That page does not exist in the directory.

The error log has the following entry for each attempt:

Helpers::ListProjects Session is no longer valid. Either the server restarted, or your session timed out. You may need to login again to re-authenticate.
at MantisServiceLib.Helpers.GetCurrUIDAndUpdateSession(HttpSessionState hss) at MantisServiceLib.Helpers.ListProjects(HttpSessionState session, MantisProjectColl& mProjects)

The web.config has:

<location path="External">
<system.web>
<authorization>
<allow users="*"/>
</authorization>
</system.web>
</location>

External submissions are enabled. The external-user user is listed in the Project Access section:

external-user No Access Edit Project default

UPDATE: I tried uninstalling beta 2 and reinstalling but nothing changed.

We've reproduced this behavior, and we'll get this fixed before the 2.0 release. Thank you very much for the report. If we find a workaround in the meantime, I'll post back to this thread.