Opened 17 years ago

Closed 17 years ago

#644 closed defect (fixed)

Base1PluginExecuter doesn't have permission to read some items

Reported by: Nicklas Nordborg Owned by: Nicklas Nordborg
Priority: major Milestone: BASE 2.4
Component: coreplugins Version:
Keywords: Cc:

Description (last modified by Nicklas Nordborg)

The plug-in lacks permission on lots of items. Found so far:

  • Extra value types (read)
  • Users (read)
  • Jobs (read)
  • Formulas (read)
  • File (delete)
  • Directory (delete)

Change History (7)

comment:1 by Nicklas Nordborg, 17 years ago

Owner: changed from everyone to Nicklas Nordborg
Status: new → assigned

comment:2 by Nicklas Nordborg, 17 years ago

It doesn't have permission to read users either: 

Permission denied: Not allowed to read User[id=1; name=Root]

comment:3 by Nicklas Nordborg, 17 years ago

Component: web → coreplugins
Milestone: → BASE 2.4

It also lacks permission to read jobs. It now fails when exporting data: 

Error: Error during export

Stack trace:
net.sf.basedb.core.PermissionDeniedException: Permission denied: Not allowed to read Job[id=15; name=Run plugin: Base1PluginExecuter]
at net.sf.basedb.core.BasicItem.checkPermission(BasicItem.java:109)
at net.sf.basedb.core.DbControl.getItem(DbControl.java:793)
at net.sf.basedb.core.DbControl.loadItem(DbControl.java:682)
at net.sf.basedb.core.Job.getById(Job.java:154)
at net.sf.basedb.plugins.Base1PluginExecuter.run(Base1PluginExecuter.java:610)
at net.sf.basedb.core.PluginExecutionRequest.invoke(PluginExecutionRequest.java:88)
at net.sf.basedb.core.InternalJobQueue$JobRunner.run(InternalJobQueue.java:420)
at java.lang.Thread.run(Thread.java:619)

comment:4 by Nicklas Nordborg, 17 years ago

Summary: Base1PluginExecuter doesn't have permission to extra value types → Base1PluginExecuter doesn't have permission to read some items

comment:5 by Nicklas Nordborg, 17 years ago

Description: modified (diff)

Also missing permission on Formulas. Must have access to those since they are used for the mapping of Base1 names to Base2

comment:6 by Nicklas Nordborg, 17 years ago

Description: modified (diff)

Another related error when deleting temporary files: 

Error: Error invoking plugin: Permission denied: Not allowed to delete File[id=100; name=stdin.txt]
 net.sf.basedb.core.PermissionDeniedException: Permission denied: Not allowed to delete File[id=100; name=stdin.txt]
at net.sf.basedb.core.BasicItem.checkPermission(BasicItem.java:109)
at net.sf.basedb.core.DbControl.deleteItem(DbControl.java:913)
at net.sf.basedb.plugins.Base1PluginExecuter.run(Base1PluginExecuter.java:668)
at net.sf.basedb.core.PluginExecutionRequest.invoke(PluginExecutionRequest.java:88)
at net.sf.basedb.core.InternalJobQueue$JobRunner.run(InternalJobQueue.java:420)
at java.lang.Thread.run(Thread.java:619)

comment:7 by Nicklas Nordborg, 17 years ago

Resolution: → fixed
Status: assigned → closed

(In [3505]) Fixes #632, #622, #643, #644, #645, #646, #647

Note: See TracTickets for help on using tickets.