Opened 3 years ago

Closed 3 years ago

Last modified 3 years ago

#2249 closed defect (fixed)

View Sessions and View Devices fail to display anything

Reported by: Nicklas Nordborg Owned by: everyone
Priority: minor Milestone: BASE 3.18.2
Component: core Version:
Keywords: Cc:

Description

The Sessions and Devices list pages should at least always display the current session and device, but sometime this fails.

This seems to happen if the logged in user is an Administrator but has the "Administrator" role disabled (see ticket #2043). It doesn't happen for regular users.

The workaround is to enable the "Administrator" role.

Change History (2)

comment:1 by Nicklas Nordborg, 3 years ago

Resolution: fixed
Status: newclosed

In 7944:

Fixes #2249: View Sessions and View Devices fail to display anything

The problem was that the "Owned by others" option had been enabled when the "Administrator" role was active. Then, when de-activating the "Administrator" role, the permission system notices that the user lacks the "Owned by others" permissions and applies a "denyAll" filter. The reason for this is that there is no "owned by me" filter defined for Session and Device items, so this is added to HibernateUtil.addFilterConditions(). Also realized that the Messages item has a similar underlying problem (except that it can never be triggered from the GUI since there is no "Owned by others" option for administrators to view messages for other users). To make everything work a QueryRuntimeFilter implementation is needed for Sessions, Devices and Messages.

comment:2 by Nicklas Nordborg, 3 years ago

In 7945:

References #2249: View Sessions and View Devices fail to display anything

Remove debug output.

Note: See TracTickets for help on using tickets.