Eurasia user can't edit profile

Bug #687348 reported by Jim B. Glenn
264
This bug affects 1 person
Affects Status Importance Assigned to Milestone
KARL3
Invalid
Medium
Jim B. Glenn

Bug Description

reported from customer:

Hi Jim!

Eurasia has a user who is unable to perform three related functions:

1.) He can't edit his profile.
2.) He can't use the "manage tags" function.
3.) He can't use the "manage communities" function.

-A "Forbidden" user-credentials error is generated when he clicks on any
of those buttons.

-I've tested making the account a KARLAdmin. This restores the
account's ability to edit its associated profile. However:
-When I remove admin permission and restore the account to KARLStaff
status only (this is a user who should not be KARLAdmin or
KARLUserAdmin), the account again loses the ability to edit its
associated profile, and manage tags and communities.

The username in question is "canderson".

Thank you!

-Erik

Revision history for this message
Jim B. Glenn (jimbglenn) wrote :
Revision history for this message
Paul Everitt (paul-agendaless) wrote :

Chris, if you have a moment, could you go into bin/debug and try to diagnose this one?

visibility: public → private
Changed in karl3:
assignee: nobody → Chris Rossi (chris-archimedeanco)
importance: Undecided → Medium
milestone: none → m51
summary: - user can't edit profile
+ Eurasia user can't edit profile
Changed in karl3:
milestone: m51 → m52
security vulnerability: no → yes
visibility: private → public
Changed in karl3:
status: New → In Progress
Revision history for this message
Chris Rossi (chris-archimedeanco) wrote :

As far as I can tell, this user used to be 'randerson' and the rename user admin utility was used to rename the user to 'canderson'. Unfortunately that utility fails to update acl's for objects owned by the previous user so the acls were, unfortunately, still for 'randerson', hence canderson's difficulties.

I have gone ahead and manually fixed the acls for objects owned by canderson. We will need, however, to fix the rename user utility to update acls and write an evolve script to find other cases that we don't know about of users having been renamed and fix those.

Changed in karl3:
status: In Progress → Confirmed
Revision history for this message
Erik Tepley-Ferguson (etepleyferguson) wrote :

Thank you for the manual fix for "canderson", Chris.

Paul, is it okay if I request a manual fix for user "vkolobaeva" as well? Her former username was "vkharina"; I also ran the rename command for her after she was married, and she is experiencing the same error.

Thank you!

-Erik
Eurasia Foundation

Revision history for this message
Paul Everitt (paul-agendaless) wrote : Re: [Bug 687348] Re: Eurasia user can't edit profile

We're going to be doing an update this week (I believe, Six Feet Up decides when updates are pushed out) which will fix this problem.

--Paul

On Jan 13, 2011, at 2:03 PM, Erik Tepley-Ferguson wrote:

> Thank you for the manual fix for "canderson", Chris.
>
> Paul, is it okay if I request a manual fix for user "vkolobaeva" as
> well? Her former username was "vkharina"; I also ran the rename command
> for her after she was married, and she is experiencing the same error.
>
> Thank you!
>
> -Erik
> Eurasia Foundation
>
> --
> You received this bug notification because you are a direct subscriber
> of the bug.
> https://bugs.launchpad.net/bugs/687348
>
> Title:
> Eurasia user can't edit profile
>
> Status in KARL3:
> Confirmed
>
> Bug description:
> reported from customer:
>
> Hi Jim!
>
> Eurasia has a user who is unable to perform three related functions:
>
> 1.) He can't edit his profile.
> 2.) He can't use the "manage tags" function.
> 3.) He can't use the "manage communities" function.
>
> -A "Forbidden" user-credentials error is generated when he clicks on any
> of those buttons.
>
> -I've tested making the account a KARLAdmin. This restores the
> account's ability to edit its associated profile. However:
> -When I remove admin permission and restore the account to KARLStaff
> status only (this is a user who should not be KARLAdmin or
> KARLUserAdmin), the account again loses the ability to edit its
> associated profile, and manage tags and communities.
>
> The username in question is "canderson".
>
> Thank you!
>
> -Erik
>
> To unsubscribe from this bug, go to:
> https://bugs.launchpad.net/karl3/+bug/687348/+subscribe

Revision history for this message
Chris Rossi (chris-archimedeanco) wrote :

I've gone ahead and manually fixed vkolabaeva. The permanent fix will actually be rolled out sometime after this week.

Revision history for this message
Erik Tepley-Ferguson (etepleyferguson) wrote :

Thanks so much to all!

-Erik
Eurasia Foundation

Changed in karl3:
milestone: m52 → m53
Revision history for this message
Paul Everitt (paul-agendaless) wrote :

We don't know when is the next partner update. I'll move this to June timeframe.

Changed in karl3:
assignee: Chris Rossi (chris-archimedeanco) → Jim B. Glenn (jimbglenn)
milestone: m53 → m56
Changed in karl3:
milestone: m61 → m62
Revision history for this message
Paul Everitt (paul-agendaless) wrote :

Rather than just kicking the can down the road, I'll move this to the barge.

Changed in karl3:
milestone: m62 → m999
Changed in karl3:
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.