[SAC] [mapserver-users] permission denied on Trac

There was a recent upgrade to the Trac server, might have broke
something. We'll look into it for archival purposes.

Thanks,
Alex

On 04/30/2015 04:21 AM, Håvard Tveite wrote:

I can't fix that, but issue 118 has now been fixed on github.
The correction has not yet made it to mapserver.org.

Håvard

On 29.04.2015 14:44, Richard Greenwood wrote:

Thanks.

On https://github.com/mapserver/mapserver/issues/2436 there are also
three links back to Trac that fail.

Rich

On Wed, Apr 29, 2015 at 6:26 AM, Håvard Tveite <havard.tveite@nmbu.no
<mailto:havard.tveite@nmbu.no>> wrote:

    I have created an issue:
    https://github.com/mapserver/docs/issues/118

    On 29.04.2015 11:41, thomas bonfort wrote:

        we moved to github a little while ago....
        https://github.com/mapserver/mapserver/issues/2436

        On 29 April 2015 at 03:36, Richard Greenwood
        <richard.greenwood@gmail.com
<mailto:richard.greenwood@gmail.com>> wrote:

            There is a link on this page
http://mapserver.org/mapfile/outputformat.htm
            to this page http://trac.osgeo.org/mapserver/ticket/2436
but I get a
            permission denied even when I am logged into Trac.

            Thanks

            --
            Richard W. Greenwood, PLS
            www.greenwoodmap.com <http://www.greenwoodmap.com>

            _______________________________________________
            mapserver-users mailing list
            mapserver-users@lists.osgeo.org
<mailto:mapserver-users@lists.osgeo.org>
            http://lists.osgeo.org/mailman/listinfo/mapserver-users

        _______________________________________________
        mapserver-users mailing list
        mapserver-users@lists.osgeo.org
<mailto:mapserver-users@lists.osgeo.org>
        http://lists.osgeo.org/mailman/listinfo/mapserver-users

    --
    Håvard Tveite
    Department of Mathematical Sciences and Technology, NMBU
    Drøbakveien 31, POBox 5003, N-1432 Ås, NORWAY
    Phone: +47 64965483 <tel:%2B47%2064965483> Fax: +47 64965401
<tel:%2B47%2064965401> http://www.nmbu.no/imt/

    _______________________________________________
    mapserver-users mailing list
    mapserver-users@lists.osgeo.org
<mailto:mapserver-users@lists.osgeo.org>
    http://lists.osgeo.org/mailman/listinfo/mapserver-users

--
Richard W. Greenwood, PLS
www.greenwoodmap.com <http://www.greenwoodmap.com>

Hi Alex,

Note that we (MapServer PSC) purposely disabled Trac for editing (as we're now using GitHub). Or, maybe I'm not understanding this issue fully :slight_smile:

-jeff

On 2015-04-30 1:16 PM, Alex Mandel wrote:

There was a recent upgrade to the Trac server, might have broke
something. We'll look into it for archival purposes.

Thanks,
Alex

On 04/30/2015 04:21 AM, Håvard Tveite wrote:

I can't fix that, but issue 118 has now been fixed on github.
The correction has not yet made it to mapserver.org.

Håvard

On 29.04.2015 14:44, Richard Greenwood wrote:

Thanks.

On https://github.com/mapserver/mapserver/issues/2436 there are also
three links back to Trac that fail.

Rich

On Wed, Apr 29, 2015 at 6:26 AM, Håvard Tveite <havard.tveite@nmbu.no
<mailto:havard.tveite@nmbu.no>> wrote:

     I have created an issue:
     https://github.com/mapserver/docs/issues/118

     On 29.04.2015 11:41, thomas bonfort wrote:

         we moved to github a little while ago....
         https://github.com/mapserver/mapserver/issues/2436

         On 29 April 2015 at 03:36, Richard Greenwood
         <richard.greenwood@gmail.com
<mailto:richard.greenwood@gmail.com>> wrote:

             There is a link on this page
http://mapserver.org/mapfile/outputformat.htm
             to this page http://trac.osgeo.org/mapserver/ticket/2436
but I get a
             permission denied even when I am logged into Trac.

             Thanks

             --
             Richard W. Greenwood, PLS
             www.greenwoodmap.com <http://www.greenwoodmap.com>

             _______________________________________________
             mapserver-users mailing list
             mapserver-users@lists.osgeo.org
<mailto:mapserver-users@lists.osgeo.org>
             http://lists.osgeo.org/mailman/listinfo/mapserver-users

         _______________________________________________
         mapserver-users mailing list
         mapserver-users@lists.osgeo.org
<mailto:mapserver-users@lists.osgeo.org>
         http://lists.osgeo.org/mailman/listinfo/mapserver-users

     --
     Håvard Tveite
     Department of Mathematical Sciences and Technology, NMBU
     Drøbakveien 31, POBox 5003, N-1432 Ås, NORWAY
     Phone: +47 64965483 <tel:%2B47%2064965483> Fax: +47 64965401
<tel:%2B47%2064965401> http://www.nmbu.no/imt/

     _______________________________________________
     mapserver-users mailing list
     mapserver-users@lists.osgeo.org
<mailto:mapserver-users@lists.osgeo.org>
     http://lists.osgeo.org/mailman/listinfo/mapserver-users

--
Richard W. Greenwood, PLS
www.greenwoodmap.com <http://www.greenwoodmap.com>

_______________________________________________
Sac mailing list
Sac@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/sac

--
Jeff McKenna
MapServer Consulting and Training Services
http://www.gatewaygeomatics.com/

Oh, now I see the problem reported :slight_smile:

-jeff

On 2015-04-30 1:28 PM, Jeff McKenna wrote:

Hi Alex,

Note that we (MapServer PSC) purposely disabled Trac for editing (as
we're now using GitHub). Or, maybe I'm not understanding this issue
fully :slight_smile:

-jeff

On 2015-04-30 1:16 PM, Alex Mandel wrote:

There was a recent upgrade to the Trac server, might have broke
something. We'll look into it for archival purposes.

Thanks,
Alex

On 04/30/2015 04:21 AM, Håvard Tveite wrote:

I can't fix that, but issue 118 has now been fixed on github.
The correction has not yet made it to mapserver.org.

Håvard

On 29.04.2015 14:44, Richard Greenwood wrote:

Thanks.

On https://github.com/mapserver/mapserver/issues/2436 there are also
three links back to Trac that fail.

Rich

On Wed, Apr 29, 2015 at 6:26 AM, Håvard Tveite <havard.tveite@nmbu.no
<mailto:havard.tveite@nmbu.no>> wrote:

     I have created an issue:
     https://github.com/mapserver/docs/issues/118

     On 29.04.2015 11:41, thomas bonfort wrote:

         we moved to github a little while ago....
         https://github.com/mapserver/mapserver/issues/2436

         On 29 April 2015 at 03:36, Richard Greenwood
         <richard.greenwood@gmail.com
<mailto:richard.greenwood@gmail.com>> wrote:

             There is a link on this page
http://mapserver.org/mapfile/outputformat.htm
             to this page http://trac.osgeo.org/mapserver/ticket/2436
but I get a
             permission denied even when I am logged into Trac.

             Thanks

             --
             Richard W. Greenwood, PLS
             www.greenwoodmap.com <http://www.greenwoodmap.com>

             _______________________________________________
             mapserver-users mailing list
             mapserver-users@lists.osgeo.org
<mailto:mapserver-users@lists.osgeo.org>
             http://lists.osgeo.org/mailman/listinfo/mapserver-users

         _______________________________________________
         mapserver-users mailing list
         mapserver-users@lists.osgeo.org
<mailto:mapserver-users@lists.osgeo.org>
         http://lists.osgeo.org/mailman/listinfo/mapserver-users

     --
     Håvard Tveite
     Department of Mathematical Sciences and Technology, NMBU
     Drøbakveien 31, POBox 5003, N-1432 Ås, NORWAY
     Phone: +47 64965483 <tel:%2B47%2064965483> Fax: +47 64965401
<tel:%2B47%2064965401> http://www.nmbu.no/imt/

     _______________________________________________
     mapserver-users mailing list
     mapserver-users@lists.osgeo.org
<mailto:mapserver-users@lists.osgeo.org>
     http://lists.osgeo.org/mailman/listinfo/mapserver-users

--
Richard W. Greenwood, PLS
www.greenwoodmap.com <http://www.greenwoodmap.com>

_______________________________________________
Sac mailing list
Sac@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/sac

--
Jeff McKenna
MapServer Consulting and Training Services
http://www.gatewaygeomatics.com/

I am an admin for the mapserver trac instance, and for the "anonymous" user it has "TICKET_VIEW" permissions set. Hmmm....

-jeff

On 2015-04-30 1:30 PM, Jeff McKenna wrote:

Oh, now I see the problem reported :slight_smile:

-jeff

On 2015-04-30 1:28 PM, Jeff McKenna wrote:

Hi Alex,

Note that we (MapServer PSC) purposely disabled Trac for editing (as
we're now using GitHub). Or, maybe I'm not understanding this issue
fully :slight_smile:

-jeff

On 2015-04-30 1:16 PM, Alex Mandel wrote:

There was a recent upgrade to the Trac server, might have broke
something. We'll look into it for archival purposes.

Thanks,
Alex

On 04/30/2015 04:21 AM, Håvard Tveite wrote:

I can't fix that, but issue 118 has now been fixed on github.
The correction has not yet made it to mapserver.org.

Håvard

On 29.04.2015 14:44, Richard Greenwood wrote:

Thanks.

On https://github.com/mapserver/mapserver/issues/2436 there are also
three links back to Trac that fail.

Rich

On Wed, Apr 29, 2015 at 6:26 AM, Håvard Tveite <havard.tveite@nmbu.no
<mailto:havard.tveite@nmbu.no>> wrote:

     I have created an issue:
     https://github.com/mapserver/docs/issues/118

     On 29.04.2015 11:41, thomas bonfort wrote:

         we moved to github a little while ago....
         https://github.com/mapserver/mapserver/issues/2436

         On 29 April 2015 at 03:36, Richard Greenwood
         <richard.greenwood@gmail.com
<mailto:richard.greenwood@gmail.com>> wrote:

             There is a link on this page
http://mapserver.org/mapfile/outputformat.htm
             to this page http://trac.osgeo.org/mapserver/ticket/2436
but I get a
             permission denied even when I am logged into Trac.

             Thanks

             --
             Richard W. Greenwood, PLS
             www.greenwoodmap.com <http://www.greenwoodmap.com>

             _______________________________________________
             mapserver-users mailing list
             mapserver-users@lists.osgeo.org
<mailto:mapserver-users@lists.osgeo.org>
             http://lists.osgeo.org/mailman/listinfo/mapserver-users

         _______________________________________________
         mapserver-users mailing list
         mapserver-users@lists.osgeo.org
<mailto:mapserver-users@lists.osgeo.org>
         http://lists.osgeo.org/mailman/listinfo/mapserver-users

     --
     Håvard Tveite
     Department of Mathematical Sciences and Technology, NMBU
     Drøbakveien 31, POBox 5003, N-1432 Ås, NORWAY
     Phone: +47 64965483 <tel:%2B47%2064965483> Fax: +47 64965401
<tel:%2B47%2064965401> http://www.nmbu.no/imt/

     _______________________________________________
     mapserver-users mailing list
     mapserver-users@lists.osgeo.org
<mailto:mapserver-users@lists.osgeo.org>
     http://lists.osgeo.org/mailman/listinfo/mapserver-users

--
Richard W. Greenwood, PLS
www.greenwoodmap.com <http://www.greenwoodmap.com>

_______________________________________________
Sac mailing list
Sac@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/sac

--
Jeff McKenna
MapServer Consulting and Training Services
http://www.gatewaygeomatics.com/

Ok, this is embarrassing...I was looking for a different setting, something, and I saw a "SecureTicketsPolicy" plugin enabled for this instance..I clicked it off and, well it looks like I should not have. I should not have disabled that. I am sorry, this is a case when I should have not tried anything :frowning: And I don't have access to trac.ini

/humbled

-jeff

On 2015-04-30 1:35 PM, Jeff McKenna wrote:

I am an admin for the mapserver trac instance, and for the "anonymous"
user it has "TICKET_VIEW" permissions set. Hmmm....

-jeff

On 2015-04-30 1:30 PM, Jeff McKenna wrote:

Oh, now I see the problem reported :slight_smile:

-jeff

On 2015-04-30 1:28 PM, Jeff McKenna wrote:

Hi Alex,

Note that we (MapServer PSC) purposely disabled Trac for editing (as
we're now using GitHub). Or, maybe I'm not understanding this issue
fully :slight_smile:

-jeff

On 2015-04-30 1:16 PM, Alex Mandel wrote:

There was a recent upgrade to the Trac server, might have broke
something. We'll look into it for archival purposes.

Thanks,
Alex

On 04/30/2015 04:21 AM, Håvard Tveite wrote:

I can't fix that, but issue 118 has now been fixed on github.
The correction has not yet made it to mapserver.org.

Håvard

On 29.04.2015 14:44, Richard Greenwood wrote:

Thanks.

On https://github.com/mapserver/mapserver/issues/2436 there are also
three links back to Trac that fail.

Rich

On Wed, Apr 29, 2015 at 6:26 AM, Håvard Tveite <havard.tveite@nmbu.no
<mailto:havard.tveite@nmbu.no>> wrote:

     I have created an issue:
     https://github.com/mapserver/docs/issues/118

     On 29.04.2015 11:41, thomas bonfort wrote:

         we moved to github a little while ago....
         https://github.com/mapserver/mapserver/issues/2436

         On 29 April 2015 at 03:36, Richard Greenwood
         <richard.greenwood@gmail.com
<mailto:richard.greenwood@gmail.com>> wrote:

             There is a link on this page
http://mapserver.org/mapfile/outputformat.htm
             to this page http://trac.osgeo.org/mapserver/ticket/2436
but I get a
             permission denied even when I am logged into Trac.

             Thanks

             --
             Richard W. Greenwood, PLS
             www.greenwoodmap.com <http://www.greenwoodmap.com>

             _______________________________________________
             mapserver-users mailing list
             mapserver-users@lists.osgeo.org
<mailto:mapserver-users@lists.osgeo.org>
             http://lists.osgeo.org/mailman/listinfo/mapserver-users

         _______________________________________________
         mapserver-users mailing list
         mapserver-users@lists.osgeo.org
<mailto:mapserver-users@lists.osgeo.org>
         http://lists.osgeo.org/mailman/listinfo/mapserver-users

     --
     Håvard Tveite
     Department of Mathematical Sciences and Technology, NMBU
     Drøbakveien 31, POBox 5003, N-1432 Ås, NORWAY
     Phone: +47 64965483 <tel:%2B47%2064965483> Fax: +47 64965401
<tel:%2B47%2064965401> http://www.nmbu.no/imt/

     _______________________________________________
     mapserver-users mailing list
     mapserver-users@lists.osgeo.org
<mailto:mapserver-users@lists.osgeo.org>
     http://lists.osgeo.org/mailman/listinfo/mapserver-users

--
Richard W. Greenwood, PLS
www.greenwoodmap.com <http://www.greenwoodmap.com>

_______________________________________________
Sac mailing list
Sac@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/sac

I think I managed to fix the config error, but the tickets are still
unreadable,

  Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------

On Thu, Apr 30, 2015 at 01:35:21PM -0300, Jeff McKenna wrote:

I am an admin for the mapserver trac instance, and for the
"anonymous" user it has "TICKET_VIEW" permissions set. Hmmm....

Could you please check again ?

  Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------

Thanks Martin, that brings us back to the ticket permissions problem (and thanks for not getting upset at me).

-jeff

On 2015-04-30 4:13 PM, Martin Spott wrote:

On Thu, Apr 30, 2015 at 01:35:21PM -0300, Jeff McKenna wrote:

I am an admin for the mapserver trac instance, and for the
"anonymous" user it has "TICKET_VIEW" permissions set. Hmmm....

Could you please check again ?

  Martin.

On Thu, Apr 30, 2015 at 04:24:48PM -0300, Jeff McKenna wrote:

Thanks Martin, that brings us back to the ticket permissions problem
(and thanks for not getting upset at me).

Not at all .... but I feel like I didn't fully understand what the
current state is supposed to be. Would anybody tell me wether there's
still need for action ?

Cheers,
  Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------

Current state
-------------

"anonymous" user (anyone not logged in) cannot view the ticket (error displayed to the user is "TICKET_VIEW privileges are required to perform this operation on Ticket #xxxx. You don't have the required permissions.") In the Admin settings, the "anonymous" user has these permissions set:

BROWSER_VIEW
CHANGESET_VIEW
FILE_VIEW
LOG_VIEW
MILESTONE_VIEW
REPORT_SQL_VIEW
REPORT_VIEW
ROADMAP_VIEW
SEARCH_VIEW
TICKET_VIEW
TIMELINE_VIEW
WIKI_VIEW

example: http://trac.osgeo.org/mapserver/ticket/2436

Desired State
-------------

User should be able to view the actual ticket details without logging in (example: https://trac.osgeo.org/gdal/ticket/5639)

Action is required.

-jeff

On 2015-05-02 4:20 AM, Martin Spott wrote:

On Thu, Apr 30, 2015 at 04:24:48PM -0300, Jeff McKenna wrote:

Thanks Martin, that brings us back to the ticket permissions problem
(and thanks for not getting upset at me).

Not at all .... but I feel like I didn't fully understand what the
current state is supposed to be. Would anybody tell me wether there's
still need for action ?

Cheers,
  Martin.

On Sat, May 02, 2015 at 08:39:10AM -0300, Jeff McKenna wrote:

example: http://trac.osgeo.org/mapserver/ticket/2436

Mmmmh:

tracsvn:~# trac-admin /var/www/trac/mapserver permission add anonymous TICKET_VIEW
[...]
The user anonymous already has permission TICKET_VIEW.

Strange .... something I need to invest further investigation into,

  Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------

On Sat, May 02, 2015 at 08:39:10AM -0300, Jeff McKenna wrote:

Action is required.

Could someone please check if the permissions on MapServer Trac tickets
are now working as expected or if they're too lax ?

Thanks,
  Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------

It looks good Martin, I also verified that attachments can be viewed as anonymous now. Thanks for tackling this!

-jeff

On 2015-05-04 7:26 PM, Martin Spott wrote:

On Sat, May 02, 2015 at 08:39:10AM -0300, Jeff McKenna wrote:

Action is required.

Could someone please check if the permissions on MapServer Trac tickets
are now working as expected or if they're too lax ?

Thanks,
  Martin.

On Mon, May 04, 2015 at 07:46:04PM -0300, Jeff McKenna wrote:

It looks good Martin, I also verified that attachments can be viewed
as anonymous now. Thanks for tackling this!

Nice.

The issue was caused by a Trac plugin adding extra access rules layered
on top of the standard mechanisms. I've read a *lot* about Trac
installation and configuration yesterday, but the simple solution was
just to disable this plugin :slight_smile:

I hope I didn't break something different now ....

Cheers,
  Martin.
--
Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------