http://bugzilla.novell.com/show_bug.cgi?id=555208 Klaus Kämpf changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium Target Milestone|--- |Final -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=555208 User kkaempf@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=555208#c2 --- Comment #2 from Klaus Kämpf 2009-11-13 02:42:42 MST --- Entering the status module (clicking on 'status' in the control panel) gives me exactly this error -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=555208 User kkaempf@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=555208#c4 --- Comment #4 from Klaus Kämpf 2009-11-13 05:14:59 MST --- Yes, this happens with "git head", doesn't happen with RC2 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=555208 http://bugzilla.novell.com/show_bug.cgi?id=555208#c6 --- Comment #6 from Stefan Schubert 2009-11-19 12:16:36 UTC --- I cannot reproduce this error anymore. But what I see is that #true, :id=>"org.opensuse.yast.system.status.read"}, {:granted=>true, :id=>"org.opensuse.yast.system.status.writelimits"}]> whereas Action: org.opensuse.yast.system.status.read User: root Result: NOT granted NoPermissionException Happens in the same call. If I call http://0.0.0.0:3001/permissions.xml?filter=org.opensuse.yast.system.status&user_id=root The same values are returned. <permissions type="array"> − <permission> <granted type="boolean">true</granted> <id>org.opensuse.yast.system.status.read</id> </permission> − <permission> <granted type="boolean">true</granted> <id>org.opensuse.yast.system.status.writelimits</id> </permission> </permissions> So the permissions are granted *always* -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=555208 http://bugzilla.novell.com/show_bug.cgi?id=555208#c8 --- Comment #8 from Stefan Schubert 2009-11-19 13:26:55 UTC --- waerden:/suse/schubi # cd /usr/share/PolicyKit/policy/ waerden:/usr/share/PolicyKit/policy # l org.opensuse.yast.system.status.policy -rw-r--r-- 1 root root 1011 10. Nov 12:04 org.opensuse.yast.system.status.policy waerden:/usr/share/PolicyKit/policy # polkit-policy-file-validate org.opensuse.yast.system.status.policy waerden:/usr/share/PolicyKit/policy # echo $? 0 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=555208 http://bugzilla.novell.com/show_bug.cgi?id=555208#c10 --- Comment #10 from Stefan Schubert 2009-11-19 13:39:00 UTC --- The problem is that there are two ways for checking policies: in permission module: --------------------- ret = `LC_ALL=C polkit-auth --user '#{user_name}' in permission.rb which returns the wrong value in yast_roles.rb ------------------ if PolKit.polkit_check( action, account.login) == :yes Rails.logger.debug "Action: #{action} User: #{account.login} Result: ok" return true end Which returns the correct value if permissions have been set with polkit_auth -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=555208 http://bugzilla.novell.com/show_bug.cgi?id=555208#c12 Stefan Schubert changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P3 - Medium |P4 - Low Summary|status module crashed when |permissions are evaluated |getting permissions |in two different ways --- Comment #12 from Stefan Schubert 2009-11-19 14:02:05 UTC --- So, I suggest the same cause we also have disabled settings permission in the UI and in the service. Klaus, if you have no objections I would like to decrease the importance in order to fix this after release. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=555208 http://bugzilla.novell.com/show_bug.cgi?id=555208#c13 --- Comment #13 from Stefan Schubert 2009-12-09 17:05:12 UTC --- I have unified it in an own branch. The interesting stuff is that the consuming time is 50 percent only now :-) Will publish after release. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=555208 http://bugzilla.novell.com/show_bug.cgi?id=555208#c15 Stefan Schubert changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution| |FIXED --- Comment #15 from Stefan Schubert 2009-12-15 13:33:04 UTC --- merged to head -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.