Trac: REPORT_VIEW privileges are required to perform this operation error for anonymous user, when anonymous user has REPORT_VIEW privilege set

[HardyPottinger]

Hi, I asked this in IRC but didn't get a response, thought I'd try on the mail list instead. I've got a Trac 0.12.2 instance, running on RHEL 6, installed from packages on EPEL. I'm attempting to allow unprivileged access to RSS feeds. I've got http://oursite/project/report reverse proxied to https://oursite/project/report, but Trac is throwing the following error: REPORT_VIEW privileges are required to perform this operation. I've confirmed that anonymous has the REPORT_VIEW privilege set... scratching my head... I've confirmed that the same error is thrown on the https version of the site, if you're not logged in. So, the reverse proxy isn't an issue here. Anonymous users *should* be able to view reports on our site, bur are not able to.

Any ideas?

--Hardy

[HardyPottinger]

Alas, it's been a month and no response... I'm wondering if I might try the latest version of Trac, cross my fingers and hope?

[Jason Miller]

Hardy,

From my experience, it takes more then one kind of permission to gain access to a specific resource. Example: I created a python script that returns a dictionary of all builds on a giving web site... (Success, failed and pending). I thought I would only need to give this user BUILD_VIEW.

In the end, to make my script work, I found a user needs BROWSER_VIEW and BUILD_VIEW. Two seemingly unrelated permissions. Not an answer to your question, but I hope it helps. For you, I would turn on logging to a file, and set your logging to debug mode. Then, using a tool like 'tail' watch what happens when you try to read your RSS feeds... The log should spit back failed permissions (hopefully) and the like... That's how I find my permission issues anyways...

Good luck!

Jason Miller

Sent from my iPad

--
You received this message because you are subscribed to the Google Groups "Trac Users" group.
To view this discussion on the web visit https://groups.google.com/d/msg/trac-users/-/aHKCoyiQKnwJ.
To post to this group, send email to trac-...@googlegroups.com.
To unsubscribe from this group, send email to trac-users+...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/trac-users?hl=en.

[RjOllos]

You are able to access reports and the only problem is with the RSS feed access? Could you also confirm that you don't have any plugins installed?

[Pottinger, Hardy J.]

Hi, thanks for the hint, I looked at the log file while viewing a report (not logged in) and discovered that fine-grained permissions (authZ policy file) was denying access... Which jogged my memory, that I was even using fine-grained permissions, and that this policy file overrides permissions set in any other way. So, a small tweak to the authZ policy file, and presto! Anonymous users can reach a report link. Yay! The reverse proxy works, too.

--Hardy

Sent from my iPad