You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@nifi.apache.org by "Martin, Stanley L" <St...@hexagonusfederal.com> on 2022/04/18 16:34:33 UTC
RE: Insufficient Permissions for Expression Language
Is my instance of NiFi trying to reach out to a NiFi URL to validate the EL or something? If so, what would that URL be?
Thanks,
Stanley
-----Original Message-----
From: Mike Thomsen <mi...@gmail.com>
Sent: Wednesday, March 30, 2022 6:11 PM
To: users@nifi.apache.org
Subject: Re: Insufficient Permissions for Expression Language
This looks specifically like there is some sort of enterprise setup that is scanning for "malicious code" and not liking what it sees.
Talk to your IT folks about what sort of network security packages are installed that might be jumping in between you and NiFi here.
On Wed, Mar 30, 2022 at 3:54 PM Mark Payne <ma...@hotmail.com> wrote:
>
> Hi Stanley,
>
> That error message is not coming from NiFi. I would guess that you have some sort of load balancer, proxy, etc. between you and the NiFi instance? WOuld recommend looking at that to see if you can determine what’s happening there.
>
> Thanks
> -Mark
>
>
> On Mar 30, 2022, at 3:32 PM, Martin, Stanley L <St...@hexagonusfederal.com> wrote:
>
>
>
> I have an instance of NiFi (v. 1.15.3) running in Cloud Foundry, and several weeks ago I started getting a message that I have Insufficient Permissions when I try to add or modify a processor property that contains Expression Language. The message I get is:
>
> <html><head><title>Request Rejected</title></head><body>The requested
> URL was rejected. Please consult with your administrator.<br><br>Your
> support ID is: 14975944297778607952<br><br><a
> href='javascript:history.back();'>[Go Back]</a></body></html>
>
> Does anyone have an idea what this means and how I can fix it?
>
> Thanks,
> Stanley
>
>
This email message has been delivered safely and archived online by Mimecast. For more information please visit http://www.mimecast.com
Re: Insufficient Permissions for Expression Language
Posted by Chris Sampson <ch...@naimuri.com>.
I'm pretty sure NiFi doesn't do that.
Rather this looks like it will be something between your browser and the
NiFi instance to which you're connecting - when you try to update the
processor property with the EL value and send it to your NiFi server,
something (not NiFi but a proxy or such as previously suggested) is
intercepting your request and rejecting it, e.g. because it thinks you're
attempting some kind of XSS attack or such.
It might be worth asking your IT support team (whoever maintains your NiFi
instance) about whether there is a proxy or load balancer or any other
firewall that you're connecting through and, if so, what protections are
being employed therein.
On Mon, 18 Apr 2022, 17:34 Martin, Stanley L, <
Stanley.Martin@hexagonusfederal.com> wrote:
> Is my instance of NiFi trying to reach out to a NiFi URL to validate the
> EL or something? If so, what would that URL be?
>
> Thanks,
>
> Stanley
>
> -----Original Message-----
> From: Mike Thomsen <mi...@gmail.com>
> Sent: Wednesday, March 30, 2022 6:11 PM
> To: users@nifi.apache.org
> Subject: Re: Insufficient Permissions for Expression Language
>
> This looks specifically like there is some sort of enterprise setup that
> is scanning for "malicious code" and not liking what it sees.
> Talk to your IT folks about what sort of network security packages are
> installed that might be jumping in between you and NiFi here.
>
> On Wed, Mar 30, 2022 at 3:54 PM Mark Payne <ma...@hotmail.com> wrote:
> >
> > Hi Stanley,
> >
> > That error message is not coming from NiFi. I would guess that you have
> some sort of load balancer, proxy, etc. between you and the NiFi instance?
> WOuld recommend looking at that to see if you can determine what’s
> happening there.
> >
> > Thanks
> > -Mark
> >
> >
> > On Mar 30, 2022, at 3:32 PM, Martin, Stanley L <
> Stanley.Martin@hexagonusfederal.com> wrote:
> >
> >
> >
> > I have an instance of NiFi (v. 1.15.3) running in Cloud Foundry, and
> several weeks ago I started getting a message that I have Insufficient
> Permissions when I try to add or modify a processor property that contains
> Expression Language. The message I get is:
> >
> > <html><head><title>Request Rejected</title></head><body>The requested
> > URL was rejected. Please consult with your administrator.<br><br>Your
> > support ID is: 14975944297778607952<br><br><a
> > href='javascript:history.back();'>[Go Back]</a></body></html>
> >
> > Does anyone have an idea what this means and how I can fix it?
> >
> > Thanks,
> > Stanley
> >
> >
>
> This email message has been delivered safely and archived online by
> Mimecast. For more information please visit http://www.mimecast.com
>