Project

General

Profile

Bug #6141

Permission denied to update/publish metadata for group member on Gulfwatch

Added by Lauren Walker almost 6 years ago. Updated almost 6 years ago.

Status:
Closed
Priority:
Urgent
Assignee:
Category:
metacat
Target version:
Start date:
10/11/2013
Due date:
% Done:

0%

Estimated time:
Bugzilla-Id:

Description

Sarah Clark was unable to publish metadata on Gulfwatch even though she is a member of the evos group which has permission type 7 for that guid.

Jing and I could not replicate the problem on dev2 and were able to publish.

Example: http://gulfwatch.nceas.ucsb.edu/gulfwatch/d1/mn/v1/meta/df35a.21.31

Tomcat log:
INFO: [] webapp=null path=/select params={q=id:"df35a.21.31"} hits=0 status=0 QTime=1
SEVERE: SystemMetadataEventListener.itemAdded - could not comit the index into the solr server since Solr index doesn't have the information about the id df35a.21.31 which is a component in the resource map resourceMap_df35a.21.31. Metacat-Index can't process the resource map prior to its components.
org.apache.solr.client.solrj.SolrServerException: Solr index doesn't have the information about the id df35a.21.31 which is a component in the resource map resourceMapdf35a.21.31. Metacat-Index can't process the resource map prior to its components.
INFO: ===================================adding the document df35a.21.31
INFO: [] webapp=null path=/select params={q=id:"df35a.21.30"} hits=1 status=0 QTime=4
INFO: {delete=[df35a.21.30]} 0 13
INFO: [] webapp=null path=/select params={q=id:"df35a.21.29"} hits=0 status=0 QTime=7
INFO: {delete=[df35a.21.29]} 0 5
INFO: [] webapp=null path=/select params={q=id:"df35a.21.28"} hits=0 status=0 QTime=8
INFO: {delete=[df35a.21.28]} 0 5
INFO: [] webapp=null path=/select params={q=id:"df35a.21.27"} hits=0 status=0 QTime=7
INFO: {delete=[df35a.21.27]} 0 5
INFO: [] webapp=null path=/select params={q=id:"df35a.21.26"} hits=0 status=0 QTime=2
INFO: {delete=[df35a.21.26]} 0 13
INFO: [] webapp=null path=/select params={q=id:"df35a.21.25"} hits=0 status=0 QTime=1
INFO: {delete=[df35a.21.25]} 0 13
INFO: [] webapp=null path=/select params={q=id:"df35a.21.22"} hits=0 status=0 QTime=2
INFO: {delete=[df35a.21.22]} 0 15
INFO: [] webapp=null path=/select params={q=id:"df35a.21.21"} hits=0 status=0 QTime=7
INFO: {delete=[df35a.21.21]} 0 5
INFO: [] webapp=null path=/select params={q=id:"df35a.21.20"} hits=0 status=0 QTime=1
INFO: {delete=[df35a.21.20]} 0 13
INFO: [] webapp=null path=/select params={q=id:"df35a.21.16"} hits=0 status=0 QTime=1
INFO: {delete=[df35a.21.16]} 0 13
INFO: [] webapp=null path=/select params={q=id:"df35a.21.15"} hits=0 status=0 QTime=7
INFO: {delete=[df35a.21.15]} 0 5
INFO: [] webapp=null path=/select params={q=id:"df35a.21.14"} hits=0 status=0 QTime=5
INFO: {delete=[df35a.21.14]} 0 5
INFO: [] webapp=null path=/select params={q=id:"df35a.21.13"} hits=0 status=0 QTime=8
INFO: {delete=[df35a.21.13]} 0 5
INFO: [] webapp=null path=/select params={q=id:"df35a.21.12"} hits=0 status=0 QTime=7
INFO: {delete=[df35a.21.12]} 0 6
INFO: [] webapp=null path=/select params={q=id:"df35a.21.11"} hits=0 status=0 QTime=8
INFO: {delete=[df35a.21.11]} 0 5
INFO: [] webapp=null path=/select params={q=id:"df35a.21.10"} hits=0 status=0 QTime=2
INFO: {delete=[df35a.21.10]} 0 13
INFO: [] webapp=null path=/select params={q=id:"df35a.21.9"} hits=0 status=0 QTime=1
INFO: {delete=[df35a.21.9]} 0 13
INFO: [] webapp=null path=/select params={q=id:"df35a.21.8"} hits=0 status=0 QTime=2
INFO: {delete=[df35a.21.8]} 0 12
INFO: [] webapp=null path=/select params={q=id:"df35a.21.7"} hits=0 status=0 QTime=1
INFO: {delete=[df35a.21.7]} 0 12
INFO: [] webapp=null path=/select params={q=id:"df35a.21.5"} hits=0 status=0 QTime=1
INFO: {delete=[df35a.21.5]} 0 12
INFO: [] webapp=null path=/select params={q=id:"df35a.21.4"} hits=0 status=0 QTime=1
INFO: {delete=[df35a.21.4]} 0 12
INFO: [] webapp=null path=/select params={q=id:"df35a.21.3"} hits=0 status=0 QTime=1
INFO: {delete=[df35a.21.3]} 0 12
INFO: [] webapp=null path=/select params={q=id:"df35a.21.31"} hits=0 status=0 QTime=8
INFO: {add=[df35a.21.31]} 0 58
INFO: ============================= insert index for the identifier df35a.21.31
original pathInfo: /views/metacatui/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/views/metacatui/df35a.21.31
new pathinfo: /views/metacatui/df35a.21.31
original pathInfo: /query/solr/fl=id,resourceMap&wt=xml&q=formatType:METADATA+-obsoletedBy:*+resourceMap:*+id:"df35a.21.31"
original requestURI: /gulfwatch/d1/mn/v1/query/solr/fl=id,resourceMap&wt=xml&q=formatType:METADATA+-obsoletedBy:*+resourceMap:*+id:%22df35a.21.31%22
new pathinfo: /query/solr/fl=id,resourceMap&wt=xml&q=formatType:METADATA -obsoletedBy:* resourceMap:* id:"df35a.21.31"
fl=id,resourceMap&wt=xml&q=formatType:METADATA -obsoletedBy:* resourceMap:* id:"df35a.21.31" [edu.ucsb.nceas.metacat.dataone.MNodeService]
original pathInfo: /meta/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/meta/df35a.21.31
new pathinfo: /meta/df35a.21.31
INFO: [] webapp=null path=/select params={{main(fl=id,resourceMap&q=formatType:METADATA+-obsoletedBy:*+resourceMap:*+id:"df35a.21.31"&wt=xml),extra(fq=(readPermission:"cn%3Devos,o%3DNCEAS,dc%3Decoinformatics,dc%3Dorg")OROROROROR)}} hits=0 status=0 QTime=19
original pathInfo: /meta/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/meta/df35a.21.31
new pathinfo: /meta/df35a.21.31
original pathInfo: /isAuthorized/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/isAuthorized/df35a.21.31
new pathinfo: /isAuthorized/df35a.21.31
original pathInfo: /publish/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/publish/df35a.21.31
new pathinfo: /publish/df35a.21.31
metacat 20131011-13:14:13: [DEBUG]: Updating pid df35a.21.31 [edu.ucsb.nceas.metacat.dataone.D1NodeService]
metacat 20131011-13:14:13: [DEBUG]: looking in identifier table for pid df35a.21.31 [edu.ucsb.nceas.metacat.dataone.D1NodeService]
metacat 20131011-13:14:13: [DEBUG]: localId: df35a.21.31 [edu.ucsb.nceas.metacat.dataone.D1NodeService]
metacat 20131011-13:14:13: [DEBUG]: incremented localId: df35a.21.32 [edu.ucsb.nceas.metacat.dataone.D1NodeService]
java.lang.Exception: User uid=sclark,o=NCEAS,dc=ecoinformatics,dc=org does not have permission to update XML Document #df35a.21.31
metacat 20131011-13:14:13: [ERROR]: D1ResourceHandler: Serializing exception with code 500: Error inserting or updating document: <error>User uid=sclark,o=NCEAS,dc=ecoinformatics,dc=org does not have permission to update XML Document #df35a.21.31</error> [edu.ucsb.nceas.metacat.restservice.D1ResourceHandler]
org.dataone.service.exceptions.ServiceFailure: Error inserting or updating document: <error>User uid=sclark,o=NCEAS,dc=ecoinformatics,dc=org does not have permission to update XML Document #df35a.21.31</error>
original pathInfo: /views/metacatui/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/views/metacatui/df35a.21.31
new pathinfo: /views/metacatui/df35a.21.31
original pathInfo: /query/solr/fl=id,resourceMap&wt=xml&q=formatType:METADATA+-obsoletedBy:*+resourceMap:*+id:"df35a.21.31"
original requestURI: /gulfwatch/d1/mn/v1/query/solr/fl=id,resourceMap&wt=xml&q=formatType:METADATA+-obsoletedBy:*+resourceMap:*+id:%22df35a.21.31%22
new pathinfo: /query/solr/fl=id,resourceMap&wt=xml&q=formatType:METADATA -obsoletedBy:* resourceMap:* id:"df35a.21.31"
fl=id,resourceMap&wt=xml&q=formatType:METADATA -obsoletedBy:* resourceMap:* id:"df35a.21.31" [edu.ucsb.nceas.metacat.dataone.MNodeService]
original pathInfo: /meta/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/meta/df35a.21.31
new pathinfo: /meta/df35a.21.31
INFO: [] webapp=null path=/select params={{main(fl=id,resourceMap&q=formatType:METADATA+-obsoletedBy:*+resourceMap:*+id:"df35a.21.31"&wt=xml),extra(fq=(readPermission:"public"))}} hits=0 status=0 QTime=14
original pathInfo: /meta/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/meta/df35a.21.31
new pathinfo: /meta/df35a.21.31
original pathInfo: /isAuthorized/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/isAuthorized/df35a.21.31
new pathinfo: /isAuthorized/df35a.21.31
metacat 20131011-13:36:02: [ERROR]: D1ResourceHandler: Serializing exception with code 401: CHANGE_PERMISSION not allowed on df35a.21.31 for subject[s]: public; [edu.ucsb.nceas.metacat.restservice.D1ResourceHandler]
org.dataone.service.exceptions.NotAuthorized: CHANGE_PERMISSION not allowed on df35a.21.31 for subject[s]: public;
original pathInfo: /views/metacatui/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/views/metacatui/df35a.21.31
new pathinfo: /views/metacatui/df35a.21.31
original pathInfo: /query/solr/fl=id,resourceMap&wt=xml&q=formatType:METADATA+-obsoletedBy:*+resourceMap:*+id:"df35a.21.31"
original requestURI: /gulfwatch/d1/mn/v1/query/solr/fl=id,resourceMap&wt=xml&q=formatType:METADATA+-obsoletedBy:*+resourceMap:*+id:%22df35a.21.31%22
new pathinfo: /query/solr/fl=id,resourceMap&wt=xml&q=formatType:METADATA -obsoletedBy:* resourceMap:* id:"df35a.21.31"
fl=id,resourceMap&wt=xml&q=formatType:METADATA -obsoletedBy:* resourceMap:* id:"df35a.21.31" [edu.ucsb.nceas.metacat.dataone.MNodeService]
original pathInfo: /meta/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/meta/df35a.21.31
new pathinfo: /meta/df35a.21.31
INFO: [] webapp=null path=/select params={{main(fl=id,resourceMap&q=formatType:METADATA+-obsoletedBy:*+resourceMap:*+id:"df35a.21.31"&wt=xml),extra(fq=(readPermission:"public"))}} hits=0 status=0 QTime=14
original pathInfo: /meta/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/meta/df35a.21.31
new pathinfo: /meta/df35a.21.31
original pathInfo: /isAuthorized/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/isAuthorized/df35a.21.31
new pathinfo: /isAuthorized/df35a.21.31
metacat 20131011-13:36:40: [ERROR]: D1ResourceHandler: Serializing exception with code 401: CHANGE_PERMISSION not allowed on df35a.21.31 for subject[s]: public; [edu.ucsb.nceas.metacat.restservice.D1ResourceHandler]

History

#1 Updated by ben leinfelder almost 6 years ago

  • Target version set to 2.2.1

My first guess is that there is something not quite right with the login/session since the error message only mentions "public" as the user trying to publish the DOI. Was she in fact logged in fully?

#2 Updated by Matt Jones almost 6 years ago

  • Assignee set to Jing Tao
  • Category set to metacat

Yes, she was logged in fully. I was tailing the logs and watched her log in, and could see the entry scroll by. Also, she had no problem publishing a DOI for which she was the owner. Jing found the bug in the group handling code and fixed it, so I'm pretty sure we're all set here and this bug can be closed.

#3 Updated by ben leinfelder almost 6 years ago

  • Status changed from New to In Progress

In the branch - being included in 2.2.1 patch for MN and CNs

#4 Updated by ben leinfelder almost 6 years ago

  • Status changed from In Progress to Closed

Also available in: Atom PDF