Uploaded image for project: 'Grouper'
  1. Grouper
  2. GRP-3865

inherited privilege rule should be invalid if assigning admin to everyentity (daemon fails)

    XMLWordPrintable

Details

    • Improvement
    • Resolution: Unresolved
    • Minor
    • None
    • None
    • None
    • None

    Description

      Ran rules daemon, changed 0 records, there were 1 errors.  All errors logged but here's one: edu.internet2.middleware.grouper.exception.GrantPrivilegeException: GrouperAll can't get a manage privilege.,
      Exception in save: edu.internet2.middleware.grouper.Membership, edu.internet2.middleware.grouper.hibernate.ByObject@42970371,
      Problem in HibernateSession: HibernateSession (36e10112): notNew, notReadonly, READ_WRITE_NEW, activeTransaction, session (7ff95b96),
      Exception in save: edu.internet2.middleware.grouper.Membership, ByObjectStatic, query: ', cacheable: null, cacheRegion: null, entityName: ImmediateMembershipEntry, tx type: null, membership: group: vivek:testGroup, subject: GrouperAll, field: admins, uuid: null, startDate: null, endDate: null, group name: vivek:testGroup, subject: Subject id: GrouperAll, sourceId: g:isa, privilege: admin,
      Problem in HibernateSession: HibernateSession (4b3e6fb7): new, notReadonly, READ_WRITE_NEW, notActiveTransaction, session (7ff95b96)
          at edu.internet2.middleware.grouper.Group$12.callback(Group.java:4384)
          at edu.internet2.middleware.grouper.hibernate.HibernateSession.callbackHibernateSession(HibernateSession.java:700)
          at edu.internet2.middleware.grouper.Group.internal_grantPriv(Group.java:4344)
          at edu.internet2.middleware.grouper.Group.grantPriv(Group.java:4308)
          at edu.internet2.middleware.grouper.rules.RuleCheckType$8.runDaemon(RuleCheckType.java:1091)
          at edu.internet2.middleware.grouper.rules.RuleDefinition$1.callback(RuleDefinition.java:359)
          at edu.internet2.middleware.grouper.GrouperSession.callbackGrouperSession(GrouperSession.java:1000)
          at edu.internet2.middleware.grouper.rules.RuleDefinition.runDaemonOnDefinitionIfShould(RuleDefinition.java:352)
          at edu.internet2.middleware.grouper.rules.RuleEngine$3.callback(RuleEngine.java:558)
          at edu.internet2.middleware.grouper.GrouperSession.callbackGrouperSession(GrouperSession.java:1000)
          at edu.internet2.middleware.grouper.rules.RuleEngine.daemon(RuleEngine.java:535)
          at edu.internet2.middleware.grouper.app.loader.GrouperLoaderType$4.runJob(GrouperLoaderType.java:367)
          at edu.internet2.middleware.grouper.app.loader.GrouperLoaderJob.runJob(GrouperLoaderJob.java:541)
          at edu.internet2.middleware.grouper.app.loader.GrouperLoaderJob.execute(GrouperLoaderJob.java:345)
          at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
          at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573)
      Caused by: edu.internet2.middleware.grouper.exception.UnableToPerformException: GrouperAll can't get a manage privilege.,
      Exception in save: edu.internet2.middleware.grouper.Membership, edu.internet2.middleware.grouper.hibernate.ByObject@42970371,
      Problem in HibernateSession: HibernateSession (36e10112): notNew, notReadonly, READ_WRITE_NEW, activeTransaction, session (7ff95b96),
      Exception in save: edu.internet2.middleware.grouper.Membership, ByObjectStatic, query: ', cacheable: null, cacheRegion: null, entityName: ImmediateMembershipEntry, tx type: null, membership: group: vivek:testGroup, subject: GrouperAll, field: admins, uuid: null, startDate: null, endDate: null
          at edu.internet2.middleware.grouper.privs.AccessWrapper.grantPrivilege(AccessWrapper.java:174)
          at edu.internet2.middleware.grouper.privs.AccessResolverDecorator.grantPrivilege(AccessResolverDecorator.java:164)
          at edu.internet2.middleware.grouper.privs.AccessResolverDecorator.grantPrivilege(AccessResolverDecorator.java:164)
          at edu.internet2.middleware.grouper.privs.CachingAccessResolver.grantPrivilege(CachingAccessResolver.java:138)
          at edu.internet2.middleware.grouper.privs.AccessResolverDecorator.grantPrivilege(AccessResolverDecorator.java:164)
          at edu.internet2.middleware.grouper.privs.ValidatingAccessResolver.grantPrivilege(ValidatingAccessResolver.java:137)
          at edu.internet2.middleware.grouper.Group$12.callback(Group.java:4356)
          ... 15 more
      Caused by: edu.internet2.middleware.grouper.exception.GrantPrivilegeException: GrouperAll can't get a manage privilege.,
      Except 

      Attachments

        Activity

          People

            chris.hyzer@at.internet2.edu Chris Hyzer (upenn.edu)
            chris.hyzer@at.internet2.edu Chris Hyzer (upenn.edu)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: