Repositories only appear to authenticated administrators

Issue #10 resolved
Derek Sheeman created an issue

When using the attachment or view git file macros, I was frequently seeing no repositories available.

I verified that I can only see repositories (with no restrictions) when I was authenticated as a confluence-administrator. if my session had timed out, or I dropped admin access, all repo's disappeared from the macros.

Testing verified this behavior. This will make using the macros impossible for my users.

Comments (10)

  1. Derek Sheeman reporter

    UPDATE: This repository was restricted to a single group. I am a member of that group.

    I removed the group for verification (no restrictions set). While still elevated to admin, repository showed up as select-able from attachment/view git file. After dropping admin elevation, repository no longer appeared.

    Running standalone confluence 5.4.3 on linux.

  2. Gert-Jan van de Streek

    Derek,

    Do you see the same behavior for users that are simply in that group and cannot possibly elevate to admin rights?

  3. Tomas Theunissen

    Derek,

    We are still having trouble reproducing this issue.

    I attached a snapshot version to this issue which logs every step of the permission checking. Could you install this version and share the lines, it writes to the confluence log, with us?

    You will have to configure debug logging in Confluence, you can do this in the admin section under 'Logging and Profiling'. Add a new entry with 'nl.avisi' as the class/package name and 'debug' as the log level.

  4. Derek Sheeman reporter

    I just verified that users who are cannot elevate to confluence-admin cannot see the repositories either. I will get the debugging set up on a non production system and provide data as soon as able.

  5. Derek Sheeman reporter

    Installed the plugin and got debugging set up, though it may not be too helpful, I walked through a successful load and create first to prove a baseline.

    Accessed page while elevated, deleted "git view file" macro, added it back:

    2014-04-24 19:19:02,861 DEBUG [TP-Processor18] [gitplugin.configuration.service.SecurityServiceImpl] canUse Checking if user 'derek_sheeman' can use repository 'dsheeman' 2014-04-24 19:19:02,868 DEBUG [TP-Processor18] [gitplugin.configuration.service.SecurityServiceImpl] canUse Yes - Repository has no groups configured 2014-04-24 19:19:22,337 DEBUG [TP-Processor22] [gitplugin.configuration.service.RepositoryServiceImpl] getRepositories Filtering repositories on 'canUse' permission 2014-04-24 19:19:22,340 DEBUG [TP-Processor22] [gitplugin.configuration.service.SecurityServiceImpl] canUse Checking if user 'derek_sheeman' can use repository 'dsheeman' 2014-04-24 19:19:22,342 DEBUG [TP-Processor22] [gitplugin.configuration.service.SecurityServiceImpl] canUse Yes - Repository has no groups configured 2014-04-24 19:19:32,603 DEBUG [TP-Processor22] [gitplugin.configuration.service.SecurityServiceImpl] canUse Checking if user 'derek_sheeman' can use repository 'dsheeman' 2014-04-24 19:19:32,609 DEBUG [TP-Processor22] [gitplugin.configuration.service.SecurityServiceImpl] canUse Yes - Repository has no groups configured

    Dropped admin access reloaded page, deleted "git view file" macro, attempted to add it back. No repositories visible on list, cannot add macro (screenshot). Same for "Add Git Attachment" No log entries when the choices pop up, can't save so no log entries there either.

    2014-04-24 19:20:32,571 DEBUG [TP-Processor17] [gitplugin.configuration.service.SecurityServiceImpl] canUse Checking if user 'derek_sheeman' can use repository 'dsheeman' 2014-04-24 19:20:32,577 DEBUG [TP-Processor17] [gitplugin.configuration.service.SecurityServiceImpl] canUse Yes - Repository has no groups configured 2014-04-24 19:25:04,183 DEBUG [TP-Processor18] [gitplugin.configuration.service.SecurityServiceImpl] canUse Checking if user 'derek_sheeman' can use repository 'dsheeman' 2014-04-24 19:25:04,189 DEBUG [TP-Processor18] [gitplugin.configuration.service.SecurityServiceImpl] canUse Yes - Repository has no groups configured

  6. Tomas Theunissen

    It looks like everything is going correctly serverside. Which browser are you using? Could you check if you have any JavaScript errors?

  7. Log in to comment