Repositories only appear to authenticated administrators

Derek Sheeman reporter

UPDATE: This repository was restricted to a single group. I am a member of that group.

I removed the group for verification (no restrictions set). While still elevated to admin, repository showed up as select-able from attachment/view git file. After dropping admin elevation, repository no longer appeared.

Running standalone confluence 5.4.3 on linux.

2014-04-24T01:16:06+00:00

Gert-Jan van de Streek

Derek,

Do you see the same behavior for users that are simply in that group and cannot possibly elevate to admin rights?

2014-04-24T08:47:25+00:00

Tomas Theunissen

attached git-plugin-1.7.5-SNAPSHOT.jar

2014-04-24T10:00:26+00:00

Tomas Theunissen

Derek,

We are still having trouble reproducing this issue.

I attached a snapshot version to this issue which logs every step of the permission checking. Could you install this version and share the lines, it writes to the confluence log, with us?

You will have to configure debug logging in Confluence, you can do this in the admin section under 'Logging and Profiling'. Add a new entry with 'nl.avisi' as the class/package name and 'debug' as the log level.

2014-04-24T10:04:41+00:00

Derek Sheeman reporter

I just verified that users who are cannot elevate to confluence-admin cannot see the repositories either. I will get the debugging set up on a non production system and provide data as soon as able.

2014-04-24T18:21:02+00:00

Derek Sheeman reporter

Installed the plugin and got debugging set up, though it may not be too helpful, I walked through a successful load and create first to prove a baseline.

Accessed page while elevated, deleted "git view file" macro, added it back:

2014-04-24 19:19:02,861 DEBUG [TP-Processor18] [gitplugin.configuration.service.SecurityServiceImpl] canUse Checking if user 'derek_sheeman' can use repository 'dsheeman' 2014-04-24 19:19:02,868 DEBUG [TP-Processor18] [gitplugin.configuration.service.SecurityServiceImpl] canUse Yes - Repository has no groups configured 2014-04-24 19:19:22,337 DEBUG [TP-Processor22] [gitplugin.configuration.service.RepositoryServiceImpl] getRepositories Filtering repositories on 'canUse' permission 2014-04-24 19:19:22,340 DEBUG [TP-Processor22] [gitplugin.configuration.service.SecurityServiceImpl] canUse Checking if user 'derek_sheeman' can use repository 'dsheeman' 2014-04-24 19:19:22,342 DEBUG [TP-Processor22] [gitplugin.configuration.service.SecurityServiceImpl] canUse Yes - Repository has no groups configured 2014-04-24 19:19:32,603 DEBUG [TP-Processor22] [gitplugin.configuration.service.SecurityServiceImpl] canUse Checking if user 'derek_sheeman' can use repository 'dsheeman' 2014-04-24 19:19:32,609 DEBUG [TP-Processor22] [gitplugin.configuration.service.SecurityServiceImpl] canUse Yes - Repository has no groups configured

Dropped admin access reloaded page, deleted "git view file" macro, attempted to add it back. No repositories visible on list, cannot add macro (screenshot). Same for "Add Git Attachment" No log entries when the choices pop up, can't save so no log entries there either.

2014-04-24 19:20:32,571 DEBUG [TP-Processor17] [gitplugin.configuration.service.SecurityServiceImpl] canUse Checking if user 'derek_sheeman' can use repository 'dsheeman' 2014-04-24 19:20:32,577 DEBUG [TP-Processor17] [gitplugin.configuration.service.SecurityServiceImpl] canUse Yes - Repository has no groups configured 2014-04-24 19:25:04,183 DEBUG [TP-Processor18] [gitplugin.configuration.service.SecurityServiceImpl] canUse Checking if user 'derek_sheeman' can use repository 'dsheeman' 2014-04-24 19:25:04,189 DEBUG [TP-Processor18] [gitplugin.configuration.service.SecurityServiceImpl] canUse Yes - Repository has no groups configured