You are viewing a plain text version of this content. The canonical link for it is here.
Posted to oak-dev@jackrabbit.apache.org by Travis CI <no...@travis-ci.org> on 2013/04/22 17:11:05 UTC
[Broken] apache/jackrabbit-oak#1340 (trunk - d395f64)
Build Update for apache/jackrabbit-oak
-------------------------------------
Build: #1340
Status: Broken
Duration: 23 minutes and 13 seconds
Commit: d395f64 (trunk)
Author: Angela Schreiber
Message: OAK-527: permissions (wip)
git-svn-id: https://svn.apache.org/repos/asf/jackrabbit/oak/trunk@1470553 13f79535-47bb-0310-9956-ffa450edef68
View the changeset: https://github.com/apache/jackrabbit-oak/compare/1a87d655a51b...d395f64ad8ac
View the full build log and details: https://travis-ci.org/apache/jackrabbit-oak/builds/6537803
--
You can configure recipients for build notifications in your .travis.yml file. See http://about.travis-ci.org/docs/user/build-configuration
Re: [Broken] apache/jackrabbit-oak#1340 (trunk - d395f64)
Posted by Jukka Zitting <ju...@gmail.com>.
Hi,
On Tue, Apr 23, 2013 at 11:42 AM, Alex Parvulescu
<al...@gmail.com> wrote:
> The actual error is OakAccess0000: Access denied [1]
>
> Does anybody have an idea what config is missing from the lucene repository
> init code [0]?
I was looking at that and my initial assumption there was the same,
that some initial configuration is missing. Instead it looks like the
access control error is coming from the indexer updating content below
a hidden :data node. That's most likely related to changes in revision
1470553, though I didn't yet figure out why it's affecting oak-lucene
but not oak-jcr.
BR,
Jukka Zitting
Re: [Broken] apache/jackrabbit-oak#1340 (trunk - d395f64)
Posted by Alex Parvulescu <al...@gmail.com>.
thanks Angela and Jukka for looking into this!
On Tue, Apr 23, 2013 at 12:09 PM, Jukka Zitting <ju...@gmail.com>wrote:
> Hi,
>
> Beyond the handling of hidden content, this problem actually
> highlights a deeper issue in the ordering of commit processing.
> There's no reason why the permission validator should have to validate
> changes made by a query indexer or other commit hooks for that matter.
> Instead the permission checks should ideally be performed as a part of
> initial validation before other commit hooks get a chance to trigger
> extra modifications. I'll see what we can do about that.
>
> BR,
>
> Jukka Zitting
>
Re: [Broken] apache/jackrabbit-oak#1340 (trunk - d395f64)
Posted by Jukka Zitting <ju...@gmail.com>.
Hi,
Beyond the handling of hidden content, this problem actually
highlights a deeper issue in the ordering of commit processing.
There's no reason why the permission validator should have to validate
changes made by a query indexer or other commit hooks for that matter.
Instead the permission checks should ideally be performed as a part of
initial validation before other commit hooks get a chance to trigger
extra modifications. I'll see what we can do about that.
BR,
Jukka Zitting
Re: [Broken] apache/jackrabbit-oak#1340 (trunk - d395f64)
Posted by Angela Schreiber <an...@adobe.com>.
the basic problem was that the test for #isHidden was
plain wrong and we didn't notice the problem as hidden
items would be treated like regular once :)
since we have an open issue for the hidden items anyway
(OAK-753) i decided to just omit permission evaluation
for the hidden items...
sorry for the trouble
angela
On 4/23/13 10:46 AM, Angela Schreiber wrote:
> hi alex
>
> i will take a look... could be that this is related to a
> change of mine and the mess we are having with the hidden
> items.
>
> angela
>
> On 4/23/13 10:42 AM, Alex Parvulescu wrote:
>> The actual error is OakAccess0000: Access denied [1]
>>
>> Does anybody have an idea what config is missing from the lucene repository
>> init code [0]?
>>
>> thanks,
>> alex
>>
>> [0]
>> http://svn.apache.org/viewvc/jackrabbit/oak/trunk/oak-lucene/src/test/java/org/apache/jackrabbit/oak/jcr/LuceneOakRepositoryStub.java?view=markup
>>
>>
>> [1]
>> testSimpleQuery1(org.apache.jackrabbit.core.query.SQLTest) Time elapsed:
>> 6.43 sec<<< ERROR!
>> javax.jcr.AccessDeniedException: Failed to register namespace mapping from
>> test to http://www.apache.org/jackrabbit/test
>> at
>> org.apache.jackrabbit.oak.plugins.name.ReadWriteNamespaceRegistry.registerNamespace(ReadWriteNamespaceRegistry.java:108)
>> at
>> org.apache.jackrabbit.test.AbstractJCRTest.setUp(AbstractJCRTest.java:389)
>> at
>> org.apache.jackrabbit.core.query.AbstractQueryTest.setUp(AbstractQueryTest.java:53)
>> at junit.framework.TestCase.runBare(TestCase.java:132)
>> at junit.framework.TestResult$1.protect(TestResult.java:110)
>> at junit.framework.TestResult.runProtected(TestResult.java:128)
>> at junit.framework.TestResult.run(TestResult.java:113)
>> at junit.framework.TestCase.run(TestCase.java:124)
>> at org.apache.jackrabbit.test.AbstractJCRTest.run(AbstractJCRTest.java:456)
>> at junit.framework.TestSuite.runTest(TestSuite.java:243)
>> at junit.framework.TestSuite.run(TestSuite.java:238)
>> at junit.framework.TestSuite.runTest(TestSuite.java:243)
>> at
>> org.apache.jackrabbit.test.ConcurrentTestSuite.access$001(ConcurrentTestSuite.java:29)
>> at
>> org.apache.jackrabbit.test.ConcurrentTestSuite$2.run(ConcurrentTestSuite.java:67)
>> at EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(Unknown
>> Source)
>> at java.lang.Thread.run(Thread.java:722)
>> Caused by: org.apache.jackrabbit.oak.api.CommitFailedException:
>> OakAccess0000: Access denied
>> at
>> org.apache.jackrabbit.oak.security.authorization.permission.PermissionValidator.checkPermissions(PermissionValidator.java:188)
>> at
>> org.apache.jackrabbit.oak.security.authorization.permission.PermissionValidator.propertyChanged(PermissionValidator.java:97)
>>
>>
>>
>>
>> On Mon, Apr 22, 2013 at 5:11 PM, Travis CI<no...@travis-ci.org>wrote:
>>
>>> Build Update for apache/jackrabbit-oak
>>> -------------------------------------
>>>
>>> Build: #1340
>>> Status: Broken
>>>
>>> Duration: 23 minutes and 13 seconds
>>> Commit: d395f64 (trunk)
>>> Author: Angela Schreiber
>>> Message: OAK-527: permissions (wip)
>>>
>>> git-svn-id: https://svn.apache.org/repos/asf/jackrabbit/oak/trunk@147055313f79535-47bb-0310-9956-ffa450edef68
>>>
>>> View the changeset:
>>> https://github.com/apache/jackrabbit-oak/compare/1a87d655a51b...d395f64ad8ac
>>>
>>> View the full build log and details:
>>> https://travis-ci.org/apache/jackrabbit-oak/builds/6537803
>>>
>>> --
>>>
>>> You can configure recipients for build notifications in your .travis.yml
>>> file. See http://about.travis-ci.org/docs/user/build-configuration
>>>
>>>
>>>
>>>
Re: [Broken] apache/jackrabbit-oak#1340 (trunk - d395f64)
Posted by Angela Schreiber <an...@adobe.com>.
hi alex
i will take a look... could be that this is related to a
change of mine and the mess we are having with the hidden
items.
angela
On 4/23/13 10:42 AM, Alex Parvulescu wrote:
> The actual error is OakAccess0000: Access denied [1]
>
> Does anybody have an idea what config is missing from the lucene repository
> init code [0]?
>
> thanks,
> alex
>
> [0]
> http://svn.apache.org/viewvc/jackrabbit/oak/trunk/oak-lucene/src/test/java/org/apache/jackrabbit/oak/jcr/LuceneOakRepositoryStub.java?view=markup
>
>
> [1]
> testSimpleQuery1(org.apache.jackrabbit.core.query.SQLTest) Time elapsed:
> 6.43 sec<<< ERROR!
> javax.jcr.AccessDeniedException: Failed to register namespace mapping from
> test to http://www.apache.org/jackrabbit/test
> at
> org.apache.jackrabbit.oak.plugins.name.ReadWriteNamespaceRegistry.registerNamespace(ReadWriteNamespaceRegistry.java:108)
> at
> org.apache.jackrabbit.test.AbstractJCRTest.setUp(AbstractJCRTest.java:389)
> at
> org.apache.jackrabbit.core.query.AbstractQueryTest.setUp(AbstractQueryTest.java:53)
> at junit.framework.TestCase.runBare(TestCase.java:132)
> at junit.framework.TestResult$1.protect(TestResult.java:110)
> at junit.framework.TestResult.runProtected(TestResult.java:128)
> at junit.framework.TestResult.run(TestResult.java:113)
> at junit.framework.TestCase.run(TestCase.java:124)
> at org.apache.jackrabbit.test.AbstractJCRTest.run(AbstractJCRTest.java:456)
> at junit.framework.TestSuite.runTest(TestSuite.java:243)
> at junit.framework.TestSuite.run(TestSuite.java:238)
> at junit.framework.TestSuite.runTest(TestSuite.java:243)
> at
> org.apache.jackrabbit.test.ConcurrentTestSuite.access$001(ConcurrentTestSuite.java:29)
> at
> org.apache.jackrabbit.test.ConcurrentTestSuite$2.run(ConcurrentTestSuite.java:67)
> at EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(Unknown
> Source)
> at java.lang.Thread.run(Thread.java:722)
> Caused by: org.apache.jackrabbit.oak.api.CommitFailedException:
> OakAccess0000: Access denied
> at
> org.apache.jackrabbit.oak.security.authorization.permission.PermissionValidator.checkPermissions(PermissionValidator.java:188)
> at
> org.apache.jackrabbit.oak.security.authorization.permission.PermissionValidator.propertyChanged(PermissionValidator.java:97)
>
>
>
>
> On Mon, Apr 22, 2013 at 5:11 PM, Travis CI<no...@travis-ci.org>wrote:
>
>> Build Update for apache/jackrabbit-oak
>> -------------------------------------
>>
>> Build: #1340
>> Status: Broken
>>
>> Duration: 23 minutes and 13 seconds
>> Commit: d395f64 (trunk)
>> Author: Angela Schreiber
>> Message: OAK-527: permissions (wip)
>>
>> git-svn-id: https://svn.apache.org/repos/asf/jackrabbit/oak/trunk@147055313f79535-47bb-0310-9956-ffa450edef68
>>
>> View the changeset:
>> https://github.com/apache/jackrabbit-oak/compare/1a87d655a51b...d395f64ad8ac
>>
>> View the full build log and details:
>> https://travis-ci.org/apache/jackrabbit-oak/builds/6537803
>>
>> --
>>
>> You can configure recipients for build notifications in your .travis.yml
>> file. See http://about.travis-ci.org/docs/user/build-configuration
>>
>>
>>
>>
Re: [Broken] apache/jackrabbit-oak#1340 (trunk - d395f64)
Posted by Alex Parvulescu <al...@gmail.com>.
The actual error is OakAccess0000: Access denied [1]
Does anybody have an idea what config is missing from the lucene repository
init code [0]?
thanks,
alex
[0]
http://svn.apache.org/viewvc/jackrabbit/oak/trunk/oak-lucene/src/test/java/org/apache/jackrabbit/oak/jcr/LuceneOakRepositoryStub.java?view=markup
[1]
testSimpleQuery1(org.apache.jackrabbit.core.query.SQLTest) Time elapsed:
6.43 sec <<< ERROR!
javax.jcr.AccessDeniedException: Failed to register namespace mapping from
test to http://www.apache.org/jackrabbit/test
at
org.apache.jackrabbit.oak.plugins.name.ReadWriteNamespaceRegistry.registerNamespace(ReadWriteNamespaceRegistry.java:108)
at
org.apache.jackrabbit.test.AbstractJCRTest.setUp(AbstractJCRTest.java:389)
at
org.apache.jackrabbit.core.query.AbstractQueryTest.setUp(AbstractQueryTest.java:53)
at junit.framework.TestCase.runBare(TestCase.java:132)
at junit.framework.TestResult$1.protect(TestResult.java:110)
at junit.framework.TestResult.runProtected(TestResult.java:128)
at junit.framework.TestResult.run(TestResult.java:113)
at junit.framework.TestCase.run(TestCase.java:124)
at org.apache.jackrabbit.test.AbstractJCRTest.run(AbstractJCRTest.java:456)
at junit.framework.TestSuite.runTest(TestSuite.java:243)
at junit.framework.TestSuite.run(TestSuite.java:238)
at junit.framework.TestSuite.runTest(TestSuite.java:243)
at
org.apache.jackrabbit.test.ConcurrentTestSuite.access$001(ConcurrentTestSuite.java:29)
at
org.apache.jackrabbit.test.ConcurrentTestSuite$2.run(ConcurrentTestSuite.java:67)
at EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(Unknown
Source)
at java.lang.Thread.run(Thread.java:722)
Caused by: org.apache.jackrabbit.oak.api.CommitFailedException:
OakAccess0000: Access denied
at
org.apache.jackrabbit.oak.security.authorization.permission.PermissionValidator.checkPermissions(PermissionValidator.java:188)
at
org.apache.jackrabbit.oak.security.authorization.permission.PermissionValidator.propertyChanged(PermissionValidator.java:97)
On Mon, Apr 22, 2013 at 5:11 PM, Travis CI <no...@travis-ci.org>wrote:
> Build Update for apache/jackrabbit-oak
> -------------------------------------
>
> Build: #1340
> Status: Broken
>
> Duration: 23 minutes and 13 seconds
> Commit: d395f64 (trunk)
> Author: Angela Schreiber
> Message: OAK-527: permissions (wip)
>
> git-svn-id: https://svn.apache.org/repos/asf/jackrabbit/oak/trunk@147055313f79535-47bb-0310-9956-ffa450edef68
>
> View the changeset:
> https://github.com/apache/jackrabbit-oak/compare/1a87d655a51b...d395f64ad8ac
>
> View the full build log and details:
> https://travis-ci.org/apache/jackrabbit-oak/builds/6537803
>
> --
>
> You can configure recipients for build notifications in your .travis.yml
> file. See http://about.travis-ci.org/docs/user/build-configuration
>
>
>
>