Attachment 517680 Details for Bug 729780 – trace from the 403 error

trace from the 403 error

insufficient_permissions_bt (text/plain), 7.96 KB, created by Andrew Edwards on 2011-08-10 19:39:44 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Andrew Edwards

Created: 2011-08-10 19:39:44 UTC

Size: 7.96 KB

patch

obsolete

>2011-08-10 18:00:31,048 INFO  [STDOUT] Aug 10 18:00:31 [http-10.7.13.82-8080-1] DEBUG org.fedoraproject.candlepin.resteasy.interceptor.BasicAuth - principal created for user 'candlepin_admin
>2011-08-10 18:00:31,048 INFO  [STDOUT] Aug 10 18:00:31 [http-10.7.13.82-8080-1] DEBUG org.fedoraproject.candlepin.auth.interceptor.SecurityInterceptor - Invoked security interceptor public org.fedoraproject.candlepin.model.Owner org.fedoraproject.candlepin.resource.OwnerResource.getOwner(java.lang.String)
>2011-08-10 18:00:31,049 INFO  [STDOUT] Aug 10 18:00:31 [http-10.7.13.82-8080-1] DEBUG org.fedoraproject.candlepin.guice.I18nProvider - Getting i18n engine for locale en_US
>2011-08-10 18:00:31,049 INFO  [STDOUT] Aug 10 18:00:31 [http-10.7.13.82-8080-1] DEBUG org.fedoraproject.candlepin.auth.interceptor.SecurityInterceptor - Verifying READ_ONLY access to class org.fedoraproject.candlepin.model.Owner: bogusowner
>2011-08-10 18:00:31,058 INFO  [STDOUT] Aug 10 18:00:31 [http-10.7.13.82-8080-1] ERROR org.fedoraproject.candlepin.auth.interceptor.SecurityInterceptor - No such entity: class org.fedoraproject.candlepin.model.Owner id: bogusowner
>2011-08-10 18:00:31,059 INFO  [STDOUT] Aug 10 18:00:31 [http-10.7.13.82-8080-1] DEBUG org.fedoraproject.candlepin.guice.I18nProvider - Getting i18n engine for locale en_US
>2011-08-10 18:00:31,100 INFO  [STDOUT] Aug 10 18:00:31 [http-10.7.13.82-8080-1] WARN  org.fedoraproject.candlepin.auth.interceptor.SecurityInterceptor - Refusing principal: {"name":"candlepin_admin","type":"user"} access to: getOwner
>2011-08-10 18:00:31,106 INFO  [STDOUT] Aug 10 18:00:31 [http-10.7.13.82-8080-1] ERROR org.fedoraproject.candlepin.exceptions.CandlepinExceptionMapper - Runtime exception:
>org.jboss.resteasy.spi.ApplicationException: org.fedoraproject.candlepin.exceptions.ForbiddenException: Insufficient permissions
>        at org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:154)
>        at org.jboss.resteasy.core.ResourceMethod.invokeOnTarget(ResourceMethod.java:248)
>        at org.jboss.resteasy.core.ResourceMethod.invoke(ResourceMethod.java:216)
>        at org.jboss.resteasy.core.ResourceMethod.invoke(ResourceMethod.java:205)
>        at org.jboss.resteasy.core.SynchronousDispatcher.getResponse(SynchronousDispatcher.java:489)
>        at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:466)
>        at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:120)
>        at org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.service(ServletContainerDispatcher.java:200)
>        at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:48)
>        at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:43)
>        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
>        at com.google.inject.servlet.ServletDefinition.doService(ServletDefinition.java:216)
>        at com.google.inject.servlet.ServletDefinition.service(ServletDefinition.java:141)
>        at com.google.inject.servlet.ManagedServletPipeline.service(ManagedServletPipeline.java:93)
>        at com.google.inject.servlet.FilterChainInvocation.doFilter(FilterChainInvocation.java:63)
>        at org.fedoraproject.candlepin.servlet.filter.VersionFilter.doFilter(VersionFilter.java:47)
>        at com.google.inject.servlet.FilterDefinition.doFilter(FilterDefinition.java:129)
>        at com.google.inject.servlet.FilterChainInvocation.doFilter(FilterChainInvocation.java:59)
>        at org.fedoraproject.candlepin.servlet.filter.logging.LoggingFilter.doFilter(LoggingFilter.java:55)
>        at com.google.inject.servlet.FilterDefinition.doFilter(FilterDefinition.java:129)
>        at com.google.inject.servlet.FilterChainInvocation.doFilter(FilterChainInvocation.java:59)
>        at com.wideplay.warp.persist.PersistenceFilter$3.run(PersistenceFilter.java:141)
>        at com.wideplay.warp.persist.internal.Lifecycles.failEarlyAndLeaveNoOneBehind(Lifecycles.java:29)
>        at com.wideplay.warp.persist.PersistenceFilter.doFilter(PersistenceFilter.java:155)
>        at com.google.inject.servlet.FilterDefinition.doFilter(FilterDefinition.java:129)
>        at com.google.inject.servlet.FilterChainInvocation.doFilter(FilterChainInvocation.java:59)
>        at com.google.inject.servlet.ManagedFilterPipeline.dispatch(ManagedFilterPipeline.java:122)
>        at com.google.inject.servlet.GuiceFilter.doFilter(GuiceFilter.java:110)
>        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
>        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:230)
>        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:173)
>        at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:182)
>        at com.redhat.www.valve.ConfigValve.invoke(ConfigValve.java:79)
>        at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:84)
>        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
>        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:104)
>        at com.redhat.www.valve.UTF8Valve.invoke(UTF8Valve.java:36)
>        at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:157)
>        at org.jboss.web.tomcat.service.sso.ClusteredSingleSignOn.invoke(ClusteredSingleSignOn.java:638)
>        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
>        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:241)
>        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
> 	at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
>        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
>        at java.lang.Thread.run(Thread.java:662)
>Caused by: org.fedoraproject.candlepin.exceptions.ForbiddenException: Insufficient permissions
>        at org.fedoraproject.candlepin.auth.interceptor.SecurityInterceptor.denyAccess(SecurityInterceptor.java:119)
>        at org.fedoraproject.candlepin.auth.interceptor.SecurityInterceptor.verifyParameters(SecurityInterceptor.java:201)
>        at org.fedoraproject.candlepin.auth.interceptor.SecurityInterceptor.invoke(SecurityInterceptor.java:108)
>        at com.google.inject.InterceptorStackCallback$InterceptedMethodInvocation.proceed(InterceptorStackCallback.java:64)
>        at com.google.inject.InterceptorStackCallback.intercept(InterceptorStackCallback.java:44)
>        at org.fedoraproject.candlepin.resource.OwnerResource$$EnhancerByGuice$$b4721139.getOwner(<generated>)
>        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>        at java.lang.reflect.Method.invoke(Method.java:597)
>        at org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:140)
>        ... 45 more
>2011-08-10 18:00:31,106 INFO  [STDOUT] Aug 10 18:00:31 [http-10.7.13.82-8080-1] DEBUG org.fedoraproject.candlepin.guice.I18nProvider - Getting i18n engine for locale en_US
>2011-08-10 18:00:31,154 INFO  [STDOUT] Aug 10 18:00:31 [http-10.7.13.82-8080-1] DEBUG org.fedoraproject.candlepin.servlet.filter.logging.LoggingFilter -
>====Response====
>  Status: 403
>  Content-type: application/json
>====Response====
>2011-08-10 18:00:31,154 INFO  [STDOUT] Aug 10 18:00:31 [http-10.7.13.82-8080-1] DEBUG org.fedoraproject.candlepin.servlet.filter.logging.LoggingFilter - ====ResponseBody====
>2011-08-10 18:00:31,154 INFO  [STDOUT] Aug 10 18:00:31 [http-10.7.13.82-8080-1] DEBUG org.fedoraproject.candlepin.servlet.filter.logging.LoggingFilter - {"displayMessage":"Insufficient permissions"}

Actions: View

Attachments on bug 729780: 517680