Warning: Can't synchronize with repository "(default)" (/home/git/ome.git does not appear to be a Git repository.). Look in the Trac log for more information.
Notice: In order to edit this ticket you need to be either: a Product Owner, The owner or the reporter of the ticket, or, in case of a Task not yet assigned, a team_member"

Bug #1802 (closed)

Opened 12 years ago

Closed 12 years ago

Permissions : Indexer broken since doesn't log into proper group

Reported by: jamoore Owned by: jamoore
Priority: blocker Cc: carlos@…
Sprint: n.a.
Total Remaining Time: n.a.

Description

2010-02-17 14:56:52,151 ERROR [             org.quartz.core.ErrorLogger] (r_Worker-7) Job (DEFAULT.fullTextThreadRun threw an exception.
org.quartz.SchedulerException: Job threw an unhandled exception. [See nested exception: org.springframework.scheduling.quartz.JobMethodInvocationFailedException: Invoc
ation of method 'run' on target class [class ome.services.fulltext.FullTextThread] failed; nested exception is ome.conditions.SecurityViolation: Cannot read ome.model.
annotations.ExperimenterAnnotationLink:Id_51]
        at org.quartz.core.JobRunShell.run(JobRunShell.java:214)
        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:520)
* Nested Exception (Underlying Cause) ---------------
org.springframework.scheduling.quartz.JobMethodInvocationFailedException: Invocation of method 'run' on target class [class ome.services.fulltext.FullTextThread] faile
d; nested exception is ome.conditions.SecurityViolation: Cannot read ome.model.annotations.ExperimenterAnnotationLink:Id_51
        at org.springframework.scheduling.quartz.MethodInvokingJobDetailFactoryBean$MethodInvokingJob.executeInternal(MethodInvokingJobDetailFactoryBean.java:269)
        at org.springframework.scheduling.quartz.QuartzJobBean.execute(QuartzJobBean.java:86)
        at org.quartz.core.JobRunShell.run(JobRunShell.java:203)
        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:520)
Caused by: ome.conditions.SecurityViolation: Cannot read ome.model.annotations.ExperimenterAnnotationLink:Id_51
        at ome.security.basic.BasicACLVoter.throwLoadViolation(BasicACLVoter.java:112)
        at ome.security.CompositeACLVoter.throwLoadViolation(CompositeACLVoter.java:86)
        at ome.security.ACLEventListener.onPostLoad(ACLEventListener.java:104)
        at org.hibernate.engine.TwoPhaseLoad.initializeEntity(TwoPhaseLoad.java:204)
        at org.hibernate.loader.Loader.initializeEntitiesAndCollections(Loader.java:854)
        at org.hibernate.loader.Loader.doQuery(Loader.java:729)
        at org.hibernate.loader.Loader.doQueryAndInitializeNonLazyCollections(Loader.java:236)
        at org.hibernate.loader.Loader.doList(Loader.java:2213)
        at org.hibernate.loader.Loader.listIgnoreQueryCache(Loader.java:2104)
        at org.hibernate.loader.Loader.list(Loader.java:2099)
        at org.hibernate.loader.hql.QueryLoader.list(QueryLoader.java:378)
        at org.hibernate.hql.ast.QueryTranslatorImpl.list(QueryTranslatorImpl.java:338)
        at org.hibernate.engine.query.HQLQueryPlan.performList(HQLQueryPlan.java:172)
        at org.hibernate.impl.SessionImpl.list(SessionImpl.java:1121)
        at org.hibernate.impl.QueryImpl.list(QueryImpl.java:79)
        at org.hibernate.impl.AbstractQueryImpl.uniqueResult(AbstractQueryImpl.java:811)
        at ome.services.fulltext.FullTextIndexer.get(FullTextIndexer.java:240)
        at ome.services.fulltext.FullTextIndexer.doIndexing(FullTextIndexer.java:166)
        at ome.services.fulltext.FullTextIndexer.doWork(FullTextIndexer.java:138)

Change History (1)

comment:1 Changed 12 years ago by jmoore

  • Resolution set to fixed
  • Status changed from new to closed

r6112 essentially disables the security system for the "ome.fulltext" application. It runs in its own process, and neither creates nor modifies objects (other than system types: sessions, etc). An easier way to handle this would have been to add a single flag, but then other future changes to the likes of OmeroInterceptor or BasicACLVoter could again have caused the indexer to break.

Note: See TracTickets for help on using tickets. You may also have a look at Agilo extensions to the ticket.

1.3.13-PRO © 2008-2011 Agilo Software all rights reserved (this page was served in: 0.60704 sec.)

We're Hiring!