Bug #6141
closedPermission denied to update/publish metadata for group member on Gulfwatch
0%
Description
Sarah Clark was unable to publish metadata on Gulfwatch even though she is a member of the evos group which has permission type 7 for that guid.
Jing and I could not replicate the problem on dev2 and were able to publish.
Example: http://gulfwatch.nceas.ucsb.edu/gulfwatch/d1/mn/v1/meta/df35a.21.31
Tomcat log:
INFO: [] webapp=null path=/select params={q=id:"df35a.21.31"} hits=0 status=0 QTime=1
SEVERE: SystemMetadataEventListener.itemAdded - could not comit the index into the solr server since Solr index doesn't have the information about the id df35a.21.31 which is a component in the resource map resourceMap_df35a.21.31. Metacat-Index can't process the resource map prior to its components.
org.apache.solr.client.solrj.SolrServerException: Solr index doesn't have the information about the id df35a.21.31 which is a component in the resource map resourceMapdf35a.21.31. Metacat-Index can't process the resource map prior to its components.
INFO: ===================================adding the document df35a.21.31
INFO: [] webapp=null path=/select params={q=id:"df35a.21.30"} hits=1 status=0 QTime=4
INFO: {delete=[df35a.21.30]} 0 13
INFO: [] webapp=null path=/select params={q=id:"df35a.21.29"} hits=0 status=0 QTime=7
INFO: {delete=[df35a.21.29]} 0 5
INFO: [] webapp=null path=/select params={q=id:"df35a.21.28"} hits=0 status=0 QTime=8
INFO: {delete=[df35a.21.28]} 0 5
INFO: [] webapp=null path=/select params={q=id:"df35a.21.27"} hits=0 status=0 QTime=7
INFO: {delete=[df35a.21.27]} 0 5
INFO: [] webapp=null path=/select params={q=id:"df35a.21.26"} hits=0 status=0 QTime=2
INFO: {delete=[df35a.21.26]} 0 13
INFO: [] webapp=null path=/select params={q=id:"df35a.21.25"} hits=0 status=0 QTime=1
INFO: {delete=[df35a.21.25]} 0 13
INFO: [] webapp=null path=/select params={q=id:"df35a.21.22"} hits=0 status=0 QTime=2
INFO: {delete=[df35a.21.22]} 0 15
INFO: [] webapp=null path=/select params={q=id:"df35a.21.21"} hits=0 status=0 QTime=7
INFO: {delete=[df35a.21.21]} 0 5
INFO: [] webapp=null path=/select params={q=id:"df35a.21.20"} hits=0 status=0 QTime=1
INFO: {delete=[df35a.21.20]} 0 13
INFO: [] webapp=null path=/select params={q=id:"df35a.21.16"} hits=0 status=0 QTime=1
INFO: {delete=[df35a.21.16]} 0 13
INFO: [] webapp=null path=/select params={q=id:"df35a.21.15"} hits=0 status=0 QTime=7
INFO: {delete=[df35a.21.15]} 0 5
INFO: [] webapp=null path=/select params={q=id:"df35a.21.14"} hits=0 status=0 QTime=5
INFO: {delete=[df35a.21.14]} 0 5
INFO: [] webapp=null path=/select params={q=id:"df35a.21.13"} hits=0 status=0 QTime=8
INFO: {delete=[df35a.21.13]} 0 5
INFO: [] webapp=null path=/select params={q=id:"df35a.21.12"} hits=0 status=0 QTime=7
INFO: {delete=[df35a.21.12]} 0 6
INFO: [] webapp=null path=/select params={q=id:"df35a.21.11"} hits=0 status=0 QTime=8
INFO: {delete=[df35a.21.11]} 0 5
INFO: [] webapp=null path=/select params={q=id:"df35a.21.10"} hits=0 status=0 QTime=2
INFO: {delete=[df35a.21.10]} 0 13
INFO: [] webapp=null path=/select params={q=id:"df35a.21.9"} hits=0 status=0 QTime=1
INFO: {delete=[df35a.21.9]} 0 13
INFO: [] webapp=null path=/select params={q=id:"df35a.21.8"} hits=0 status=0 QTime=2
INFO: {delete=[df35a.21.8]} 0 12
INFO: [] webapp=null path=/select params={q=id:"df35a.21.7"} hits=0 status=0 QTime=1
INFO: {delete=[df35a.21.7]} 0 12
INFO: [] webapp=null path=/select params={q=id:"df35a.21.5"} hits=0 status=0 QTime=1
INFO: {delete=[df35a.21.5]} 0 12
INFO: [] webapp=null path=/select params={q=id:"df35a.21.4"} hits=0 status=0 QTime=1
INFO: {delete=[df35a.21.4]} 0 12
INFO: [] webapp=null path=/select params={q=id:"df35a.21.3"} hits=0 status=0 QTime=1
INFO: {delete=[df35a.21.3]} 0 12
INFO: [] webapp=null path=/select params={q=id:"df35a.21.31"} hits=0 status=0 QTime=8
INFO: {add=[df35a.21.31]} 0 58
INFO: ============================= insert index for the identifier df35a.21.31
original pathInfo: /views/metacatui/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/views/metacatui/df35a.21.31
new pathinfo: /views/metacatui/df35a.21.31
original pathInfo: /query/solr/fl=id,resourceMap&wt=xml&q=formatType:METADATA+-obsoletedBy:*+resourceMap:*+id:"df35a.21.31"
original requestURI: /gulfwatch/d1/mn/v1/query/solr/fl=id,resourceMap&wt=xml&q=formatType:METADATA+-obsoletedBy:*+resourceMap:*+id:%22df35a.21.31%22
new pathinfo: /query/solr/fl=id,resourceMap&wt=xml&q=formatType:METADATA -obsoletedBy:* resourceMap:* id:"df35a.21.31"
fl=id,resourceMap&wt=xml&q=formatType:METADATA -obsoletedBy:* resourceMap:* id:"df35a.21.31" [edu.ucsb.nceas.metacat.dataone.MNodeService]
original pathInfo: /meta/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/meta/df35a.21.31
new pathinfo: /meta/df35a.21.31
INFO: [] webapp=null path=/select params={{main(fl=id,resourceMap&q=formatType:METADATA+-obsoletedBy:*+resourceMap:*+id:"df35a.21.31"&wt=xml),extra(fq=(readPermission:"cn%3Devos,o%3DNCEAS,dc%3Decoinformatics,dc%3Dorg")OROROROROR)}} hits=0 status=0 QTime=19
original pathInfo: /meta/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/meta/df35a.21.31
new pathinfo: /meta/df35a.21.31
original pathInfo: /isAuthorized/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/isAuthorized/df35a.21.31
new pathinfo: /isAuthorized/df35a.21.31
original pathInfo: /publish/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/publish/df35a.21.31
new pathinfo: /publish/df35a.21.31
metacat 20131011-13:14:13: [DEBUG]: Updating pid df35a.21.31 [edu.ucsb.nceas.metacat.dataone.D1NodeService]
metacat 20131011-13:14:13: [DEBUG]: looking in identifier table for pid df35a.21.31 [edu.ucsb.nceas.metacat.dataone.D1NodeService]
metacat 20131011-13:14:13: [DEBUG]: localId: df35a.21.31 [edu.ucsb.nceas.metacat.dataone.D1NodeService]
metacat 20131011-13:14:13: [DEBUG]: incremented localId: df35a.21.32 [edu.ucsb.nceas.metacat.dataone.D1NodeService]
java.lang.Exception: User uid=sclark,o=NCEAS,dc=ecoinformatics,dc=org does not have permission to update XML Document #df35a.21.31
metacat 20131011-13:14:13: [ERROR]: D1ResourceHandler: Serializing exception with code 500: Error inserting or updating document: <error>User uid=sclark,o=NCEAS,dc=ecoinformatics,dc=org does not have permission to update XML Document #df35a.21.31</error> [edu.ucsb.nceas.metacat.restservice.D1ResourceHandler]
org.dataone.service.exceptions.ServiceFailure: Error inserting or updating document: <error>User uid=sclark,o=NCEAS,dc=ecoinformatics,dc=org does not have permission to update XML Document #df35a.21.31</error>
original pathInfo: /views/metacatui/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/views/metacatui/df35a.21.31
new pathinfo: /views/metacatui/df35a.21.31
original pathInfo: /query/solr/fl=id,resourceMap&wt=xml&q=formatType:METADATA+-obsoletedBy:*+resourceMap:*+id:"df35a.21.31"
original requestURI: /gulfwatch/d1/mn/v1/query/solr/fl=id,resourceMap&wt=xml&q=formatType:METADATA+-obsoletedBy:*+resourceMap:*+id:%22df35a.21.31%22
new pathinfo: /query/solr/fl=id,resourceMap&wt=xml&q=formatType:METADATA -obsoletedBy:* resourceMap:* id:"df35a.21.31"
fl=id,resourceMap&wt=xml&q=formatType:METADATA -obsoletedBy:* resourceMap:* id:"df35a.21.31" [edu.ucsb.nceas.metacat.dataone.MNodeService]
original pathInfo: /meta/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/meta/df35a.21.31
new pathinfo: /meta/df35a.21.31
INFO: [] webapp=null path=/select params={{main(fl=id,resourceMap&q=formatType:METADATA+-obsoletedBy:*+resourceMap:*+id:"df35a.21.31"&wt=xml),extra(fq=(readPermission:"public"))}} hits=0 status=0 QTime=14
original pathInfo: /meta/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/meta/df35a.21.31
new pathinfo: /meta/df35a.21.31
original pathInfo: /isAuthorized/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/isAuthorized/df35a.21.31
new pathinfo: /isAuthorized/df35a.21.31
metacat 20131011-13:36:02: [ERROR]: D1ResourceHandler: Serializing exception with code 401: CHANGE_PERMISSION not allowed on df35a.21.31 for subject[s]: public; [edu.ucsb.nceas.metacat.restservice.D1ResourceHandler]
org.dataone.service.exceptions.NotAuthorized: CHANGE_PERMISSION not allowed on df35a.21.31 for subject[s]: public;
original pathInfo: /views/metacatui/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/views/metacatui/df35a.21.31
new pathinfo: /views/metacatui/df35a.21.31
original pathInfo: /query/solr/fl=id,resourceMap&wt=xml&q=formatType:METADATA+-obsoletedBy:*+resourceMap:*+id:"df35a.21.31"
original requestURI: /gulfwatch/d1/mn/v1/query/solr/fl=id,resourceMap&wt=xml&q=formatType:METADATA+-obsoletedBy:*+resourceMap:*+id:%22df35a.21.31%22
new pathinfo: /query/solr/fl=id,resourceMap&wt=xml&q=formatType:METADATA -obsoletedBy:* resourceMap:* id:"df35a.21.31"
fl=id,resourceMap&wt=xml&q=formatType:METADATA -obsoletedBy:* resourceMap:* id:"df35a.21.31" [edu.ucsb.nceas.metacat.dataone.MNodeService]
original pathInfo: /meta/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/meta/df35a.21.31
new pathinfo: /meta/df35a.21.31
INFO: [] webapp=null path=/select params={{main(fl=id,resourceMap&q=formatType:METADATA+-obsoletedBy:*+resourceMap:*+id:"df35a.21.31"&wt=xml),extra(fq=(readPermission:"public"))}} hits=0 status=0 QTime=14
original pathInfo: /meta/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/meta/df35a.21.31
new pathinfo: /meta/df35a.21.31
original pathInfo: /isAuthorized/df35a.21.31
original requestURI: /gulfwatch/d1/mn/v1/isAuthorized/df35a.21.31
new pathinfo: /isAuthorized/df35a.21.31
metacat 20131011-13:36:40: [ERROR]: D1ResourceHandler: Serializing exception with code 401: CHANGE_PERMISSION not allowed on df35a.21.31 for subject[s]: public; [edu.ucsb.nceas.metacat.restservice.D1ResourceHandler]