[SAC] [OSGeo] #1745: Authenticated user cannot create ticket on GDAL Trac

#1745: Authenticated user cannot create ticket on GDAL Trac
---------------------------+-------------------
Reporter: rouault | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords:
---------------------------+-------------------
Reported by user "rtorre":

"""I could log into trac but then after writing the ticket I
got a permission error when trying to submit it: "TICKET_CREATE privileges
are required to perform this operation on Ticket #None. You don't have the
required permissions."."""

According to him there are other users that encounter the same issue.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/1745&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#1745: Authenticated user cannot create ticket on GDAL Trac
---------------------------+--------------------
Reporter: rouault | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+--------------------

Comment (by strk):

According to SQL any authenticated users has permission to create tickets
already:
{{{
trac_gdal=# select * from permission where action = 'TICKET_CREATE';
    username | action
---------------+---------------
  authenticated | TICKET_CREATE
(1 row)
}}}

Could it be he tried to create a ticket while his authentication token was
being removed in a spam fight ?

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/1745#comment:1&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#1745: Authenticated user cannot create ticket on GDAL Trac
---------------------------+--------------------
Reporter: rouault | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+--------------------

Comment (by rouault):

In https://trac.osgeo.org/gdal/admin/spamfilter/monitor, there was a
newticket entry with a karma of 0 like other. I classified it as ham. But
why would that one have been rejected whereas others are successful ?

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/1745#comment:2&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#1745: Authenticated user cannot create ticket on GDAL Trac
---------------------------+--------------------
Reporter: rouault | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+--------------------
Changes (by strk):

* cc: rtorre (added)

Old description:

Reported by user "rtorre":

"""I could log into trac but then after writing the ticket I
got a permission error when trying to submit it: "TICKET_CREATE
privileges
are required to perform this operation on Ticket #None. You don't have
the
required permissions."."""

According to him there are other users that encounter the same issue.

New description:

Reported by user "rtorre":

"""I could log into trac but then after writing the ticket I
got a permission error when trying to submit it: "TICKET_CREATE privileges
are required to perform this operation on Ticket #None. You don't have the
required permissions."."""

According to him there are other users that encounter the same issue.

I'm adding rtorre in Cc, in case he has some other info he can add (and at
the same time if he comments here we can at least check commenting still
works)

--

Comment:

My hypothesis was that the user was NOT recognized as an authenticated
user. The message suggests that's the case. I guess authentication is
detected via a browser cookie, so messing with the cookies table on the
database could have accidentally removed his cookie.

My spam cleanup script only removes sessions and cookies data associated
with known spammer users, and "rtorre" is not among them, so if that's the
case I don't know how it could have happened.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/1745#comment:3&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#1745: Authenticated user cannot create ticket on GDAL Trac
---------------------------+--------------------
Reporter: rouault | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+--------------------

Old description:

Reported by user "rtorre":

"""I could log into trac but then after writing the ticket I
got a permission error when trying to submit it: "TICKET_CREATE
privileges
are required to perform this operation on Ticket #None. You don't have
the
required permissions."."""

According to him there are other users that encounter the same issue.

I'm adding rtorre in Cc, in case he has some other info he can add (and
at the same time if he comments here we can at least check commenting
still works)

New description:

Reported by user "rtorre":

"""I could log into trac but then after writing the ticket I
got a permission error when trying to submit it: "TICKET_CREATE privileges
are required to perform this operation on Ticket #None. You don't have the
required permissions."."""

According to him there are other users that encounter the same issue.

--

Comment (by strk):

I've added rtorre in Cc, in case he has some other info he can add (and at
the same time if he comments here we can at least check commenting still
works)

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/1745#comment:4&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#1745: Authenticated user cannot create ticket on GDAL Trac
---------------------------+--------------------
Reporter: rouault | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+--------------------

Comment (by rtorre):

test comment

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/1745#comment:5&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#1745: Authenticated user cannot create ticket on GDAL Trac
---------------------------+---------------------
Reporter: rouault | Owner: sac@…
     Type: task | Status: closed
Priority: normal | Milestone:
Component: Systems Admin | Resolution: fixed
Keywords: |
---------------------------+---------------------
Changes (by rtorre):

* status: new => closed
* resolution: => fixed

Comment:

Fixed now. I also tested ticket creation:
https://trac.osgeo.org/osgeo/ticket/1759

thanks

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/1745#comment:6&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#1745: Authenticated user cannot create ticket on GDAL Trac
---------------------------+-----------------------
Reporter: rouault | Owner: sac@…
     Type: task | Status: reopened
Priority: normal | Milestone:
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+-----------------------
Changes (by rouault):

* status: closed => reopened
* resolution: fixed =>

Comment:

Rafa hit the issue again. I've granted him explicitly TICKET_CREATE
priviledges in GDAL Trac administration pannel in the meantime, but
there's something weird happening.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/1745#comment:7&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#1745: Authenticated user cannot create ticket on GDAL Trac
---------------------------+-----------------------
Reporter: rouault | Owner: sac@…
     Type: task | Status: reopened
Priority: normal | Milestone:
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+-----------------------

Comment (by strk):

Even, you should be able to disable the check or tweak weights of it,
see the spam filter plugin configuration.

As the configuration is global, your changing the local one would hide
any global setting in the future, so if you find your settings to be
working good please suggest to make them global with a new SAC ticket
(trac component). Thank you .

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/1745#comment:8&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#1745: Authenticated user cannot create ticket on GDAL Trac
---------------------------+-----------------------
Reporter: rouault | Owner: sac@…
     Type: task | Status: reopened
Priority: normal | Milestone:
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+-----------------------

Comment (by rouault):

I can't see rtorre in https://trac.osgeo.org/gdal/admin/spamfilter/monitor
, so I'm not sure if it is the spamfilter that rejected him

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/1745#comment:9&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#1745: Authenticated user cannot create ticket on GDAL Trac
---------------------------+-----------------------
Reporter: rouault | Owner: sac@…
     Type: task | Status: reopened
Priority: normal | Milestone:
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+-----------------------

Comment (by strk):

Can it be his browser is loosing the cookie ? I think somebody else
reported a similar error (could tell by looking at the upper-right corner
where you'd see the "login" link instead of the "logout" one)

PS: as you're at that /monitor page, please consider training the spam
filter, I see Mateusz comments/reports being considered spam...

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/1745#comment:10&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#1745: Authenticated user cannot create ticket on GDAL Trac
---------------------------+-----------------------
Reporter: rouault | Owner: sac@…
     Type: task | Status: reopened
Priority: normal | Milestone:
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+-----------------------

Comment (by rouault):

Rafa couldn't comment in that ticket, so here are the elements he sent me
by email

"""I reproduced all the steps and saved traces and screenshots,
anonymizing
them by replacing auth, session and token strings by "[omitted]" to avoid
any security leak. Having the timestamps and everything should be enough
to
relate them to the server traces and get to the bottom of the problem."""

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/1745#comment:11&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#1745: Authenticated user cannot create ticket on GDAL Trac
---------------------------+-----------------------
Reporter: rouault | Owner: sac@…
     Type: task | Status: reopened
Priority: normal | Milestone:
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+-----------------------

Comment (by rouault):

The attachment was too big. Available at
http://even.rouault.free.fr/trac_session_permissions_issue.tgz

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/1745#comment:12&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.