Repositories only appear to authenticated administrators
When using the attachment or view git file macros, I was frequently seeing no repositories available.
I verified that I can only see repositories (with no restrictions) when I was authenticated as a confluence-administrator. if my session had timed out, or I dropped admin access, all repo's disappeared from the macros.
Testing verified this behavior. This will make using the macros impossible for my users.
Comments (10)
-
reporter -
Derek,
Do you see the same behavior for users that are simply in that group and cannot possibly elevate to admin rights?
-
- attached git-plugin-1.7.5-SNAPSHOT.jar
-
Derek,
We are still having trouble reproducing this issue.
I attached a snapshot version to this issue which logs every step of the permission checking. Could you install this version and share the lines, it writes to the confluence log, with us?
You will have to configure debug logging in Confluence, you can do this in the admin section under 'Logging and Profiling'. Add a new entry with 'nl.avisi' as the class/package name and 'debug' as the log level.
-
reporter I just verified that users who are cannot elevate to confluence-admin cannot see the repositories either. I will get the debugging set up on a non production system and provide data as soon as able.
-
reporter Installed the plugin and got debugging set up, though it may not be too helpful, I walked through a successful load and create first to prove a baseline.
Accessed page while elevated, deleted "git view file" macro, added it back:
2014-04-24 19:19:02,861 DEBUG [TP-Processor18] [gitplugin.configuration.service.SecurityServiceImpl] canUse Checking if user 'derek_sheeman' can use repository 'dsheeman' 2014-04-24 19:19:02,868 DEBUG [TP-Processor18] [gitplugin.configuration.service.SecurityServiceImpl] canUse Yes - Repository has no groups configured 2014-04-24 19:19:22,337 DEBUG [TP-Processor22] [gitplugin.configuration.service.RepositoryServiceImpl] getRepositories Filtering repositories on 'canUse' permission 2014-04-24 19:19:22,340 DEBUG [TP-Processor22] [gitplugin.configuration.service.SecurityServiceImpl] canUse Checking if user 'derek_sheeman' can use repository 'dsheeman' 2014-04-24 19:19:22,342 DEBUG [TP-Processor22] [gitplugin.configuration.service.SecurityServiceImpl] canUse Yes - Repository has no groups configured 2014-04-24 19:19:32,603 DEBUG [TP-Processor22] [gitplugin.configuration.service.SecurityServiceImpl] canUse Checking if user 'derek_sheeman' can use repository 'dsheeman' 2014-04-24 19:19:32,609 DEBUG [TP-Processor22] [gitplugin.configuration.service.SecurityServiceImpl] canUse Yes - Repository has no groups configured
Dropped admin access reloaded page, deleted "git view file" macro, attempted to add it back. No repositories visible on list, cannot add macro (screenshot). Same for "Add Git Attachment" No log entries when the choices pop up, can't save so no log entries there either.
2014-04-24 19:20:32,571 DEBUG [TP-Processor17] [gitplugin.configuration.service.SecurityServiceImpl] canUse Checking if user 'derek_sheeman' can use repository 'dsheeman' 2014-04-24 19:20:32,577 DEBUG [TP-Processor17] [gitplugin.configuration.service.SecurityServiceImpl] canUse Yes - Repository has no groups configured 2014-04-24 19:25:04,183 DEBUG [TP-Processor18] [gitplugin.configuration.service.SecurityServiceImpl] canUse Checking if user 'derek_sheeman' can use repository 'dsheeman' 2014-04-24 19:25:04,189 DEBUG [TP-Processor18] [gitplugin.configuration.service.SecurityServiceImpl] canUse Yes - Repository has no groups configured
-
reporter - attached screenshot_no_choices.png
- attached screenshot_no_choices2.png
-
reporter We are using CROWD for authentication, if that has an impact.
-
It looks like everything is going correctly serverside. Which browser are you using? Could you check if you have any JavaScript errors?
-
- changed status to resolved
Fixed in 1.7.6
- Log in to comment
UPDATE: This repository was restricted to a single group. I am a member of that group.
I removed the group for verification (no restrictions set). While still elevated to admin, repository showed up as select-able from attachment/view git file. After dropping admin elevation, repository no longer appeared.
Running standalone confluence 5.4.3 on linux.