Never Mind -- was Re: [rt-users] privilege corruption problem
Bob Goldstein
bobg at uic.edu
Fri Dec 10 12:26:15 EST 2004
Sorry to have bothered people. The issue has to do
with a particular RT account (and possible email parsing)
rather than with generic privs like I thought.
So I'm still debugging, but my analysis is now very different.
bobg
>
>I have several RT instances, all running the same code
>(with possible minor tweaks), but with separate configs
>and databases.
>
>Everything is fine. But last night I added a new email
>address and queue to one instance. Somehow I am unable
>now to create a new ticket by email in any queue in
>that instance. I get:
>No permission to create tickets in the queue 'oaradmit'
>
>If I give createTicket privs to an individual
>account, no problem. But if I give global createTicket privs to
>"everyone", even if I make global "everyone" a superuser, no dice. It
>just seems that the global "everyone" privs are ignored.
>
>Because the code is the same for the other instances
>in which this works just fine, I assume there is something
>screwed up in the database. But I'm not quite sure what
>to look for. If anyone can send me a tiny clue, I'd
>sure appreciate it. I've tried comparing the raw data
>in the ACL table with other RT instances that work,
>but they seem fine to my eye. Maybe there is some cacheing
>issue? I've restarted apache, no help.
>
> bobg
>
>The particulars: RT 3.2.0, RH 7.3, apache 1.3.33, fastcgi, mysql 4.0.17
>
>Perl v5.8.3 under linux
> Apache::Session v1.54;
> Apache::Session::Generate::MD5 v2.1;
> Apache::Session::Lock::MySQL v1.00;
> Apache::Session::MySQL v1.01;
> Apache::Session::Serialize::Storable v1.00;
> Apache::Session::Store::DBI v1.01;
> Apache::Session::Store::MySQL v1.03;
> AutoLoader v5.60;
> base v2.04;
> Benchmark v1.052;
> bytes v1.01;
> Cache::Simple::TimedExpiry v0.21;
> Carp v1.01;
> CGI v3.01;
> CGI::Cookie v1.24;
> CGI::Fast v1.05;
> CGI::Util v1.4;
> Class::Container v0.11;
> Class::Data::Inheritable v0.02;
> Class::ReturnValue v0.52;
> constant v1.04;
> Cwd v2.12;
> Data::Dumper v2.121;
> Date::Format v2.22;
> Date::Parse v2.27;
> DBD::mysql v2.9003;
> DBI v1.45;
> DBIx::SearchBuilder v1.12_01;
> Devel::StackTrace v1.11;
> Devel::StackTraceFrame v0.6;
> Digest::base v1.00;
> Digest::MD5 v2.33;
> DynaLoader v1.04;
> Encode v1.99;
> Encode::Alias v1.38;
> Encode::Config v1.07;
> Encode::Encoding v1.33;
> Encode::Guess v1.09;
> Encode::Unicode v1.40;
> Errno v1.09;
> Exception::Class v1.19;
> Exception::Class::Base v1.2;
> Exporter v5.57;
> Exporter::Heavy v5.57;
> FCGI v0.67;
> Fcntl v1.05;
> fields v2.03;
> File::Basename v2.72;
> File::Glob v1.02;
> File::Path v1.06;
> File::Spec v0.87;
> File::Spec::Unix v1.5;
> File::Temp v0.14;
> FileHandle v2.01;
> HTML::Entities v1.27;
> HTML::Mason v1.26;
> HTML::Mason::CGIHandler v1.00;
> HTML::Mason::Exception v1.1;
> HTML::Mason::Exception::Abort v1.1;
> HTML::Mason::Exception::Compilation v1.1;
> HTML::Mason::Exception::Compilation::IncompatibleCompiler v1.1;
> HTML::Mason::Exception::Compiler v1.1;
> HTML::Mason::Exception::Decline v1.1;
> HTML::Mason::Exception::Params v1.1;
> HTML::Mason::Exception::Syntax v1.1;
> HTML::Mason::Exception::System v1.1;
> HTML::Mason::Exception::TopLevelNotFound v1.1;
> HTML::Mason::Exception::VirtualMethod v1.1;
> HTML::Mason::Exceptions v1.43;
> HTML::Parser v3.35;
> HTML::Scrubber v0.08;
> I18N::LangTags v0.29;
> integer v1.00;
> IO v1.21;
> IO::File v1.10;
> IO::Handle v1.23;
> IO::InnerFile v2.102 ;
> IO::Lines v2.103 ;
> IO::Scalar v2.105 ;
> IO::ScalarArray v2.103 ;
> IO::Seekable v1.09;
> IO::Wrap v2.102 ;
> IO::WrapTie v2.102 ;
> IPC::Open2 v1.01;
> IPC::Open3 v1.0105;
> lib v0.5565;
> List::Util v1.13;
> locale v1.00;
> Locale::Maketext v1.06;
> Locale::Maketext::Fuzzy v0.02;
> Locale::Maketext::Lexicon v0.34;
> Locale::Maketext::Lexicon::Gettext v0.11;
> Log::Dispatch v2.08;
> Log::Dispatch::Base v1.09;
> Log::Dispatch::Output v1.26;
> Log::Dispatch::Screen v1.17;
> Log::Dispatch::Syslog v1.18;
> Mail::Address v1.64;
> Mail::Field v1.64;
> Mail::Field::AddrList v1.64;
> Mail::Field::Date v1.64;
> Mail::Header v1.64;
> Mail::Internet v1.64;
> MIME::Base64 v3.05;
> MIME::Body v5.415;
> MIME::Decoder v5.415;
> MIME::Decoder::Binary v5.415;
> MIME::Decoder::NBit v5.415;
> MIME::Entity v5.415;
> MIME::Field::ContDisp v5.415;
> MIME::Field::ConTraEnc v5.415;
> MIME::Field::ContType v5.415;
> MIME::Field::ParamVal v5.415;
> MIME::Head v5.415;
> MIME::Parser v5.415;
> MIME::QuotedPrint v3.03;
> MIME::Tools v5.415;
> MIME::Words v5.415;
> Module::Versions::Report v1.02;
> overload v1.01;
> Params::Validate v0.74;
> POSIX v1.07;
> re v0.04;
> Regexp::Common v2.113;
> Regexp::Common::delimited v1;
> RT v3.2.0;
> RT::Interface::Email v1.02;
> Scalar::Util v1.13;
> SelectSaver v1.00;
> Socket v1.76;
> Storable v2.09;
> strict v1.03;
> Symbol v1.05;
> Sys::Hostname v1.11;
> Sys::Syslog v0.04;
> Text::Autoformat v1.12;
> Text::Quoted v1.3;
> Text::Reform v1.11;
> Text::Tabs v98.112801;
> Text::Template v1.44;
> Text::Wrapper v1.000;
> Time::HiRes v1.52;
> Time::JulianDay v99.061501;
> Time::Local v1.07;
> Time::ParseDate v100.010301;
> Time::Timezone v99.062401;
> Time::Zone v2.22;
> Tree::Simple v1.05;
> utf8 v1.02;
> vars v1.01;
> warnings v1.03;
> warnings::register v1.00;
> XSLoader v0.02;
>
>
>
>RT Variables
>RT::AmbiguousDayInPast 1
>RT::BasePath /usr/local/rt/3.2.0
>RT::CORE_CONFIG_FILE /usr/local/rt/3.2.0/etc/RT_Config.pm
>RT::CanonicalizeEmailAddressMatch (tigger|icarus|mailserv)\.(cc\.)?uic\.
>edu$
>RT::CanonicalizeEmailAddressReplace uic.edu
>RT::CanonicalizeOnCreate 1
>RT::CommentAddress uicadmit-comment at helpdesk.uic.edu
>RT::CorrespondAddress uicadmit at helpdesk.uic.edu
>RT::DatabaseHost rt-mysql.cc.uic.edu
>RT::DatabaseName rt_oar
>RT::DatabasePassword Password not printed
>RT::DatabasePort 3306
>RT::DatabaseRTHost helpdesk.uic.edu
>RT::DatabaseType mysql
>RT::DatabaseUser rt_user_oar
>RT::DefaultSearchResultFormat '<B><A HREF="/oar/Ticket/Display.html?id=__id_
>_">__id__</a></B>/TITLE:#', '<B><A HREF="/oar/Ticket/Display.html?id=__id__">_
>_Subject__</a></B>/TITLE:Subject', Status, QueueName, OwnerName, Priority, '__
>NEWLINE__', '', '<small>__Requestors__</small>', '<small>__LastUpdatedBy__</sm
>all>', '<small>__ToldRelative__</small>', '<small>__LastUpdatedRelative__</sma
>ll>', '<small>__TimeLeft__</small>'
>RT::EmailOutputEncoding utf-8
>RT::EtcPath /usr/local/rt/3.2.0/etc
>RT::FriendlyFromLineFormat "%s via RT" <%s>
>RT::FriendlyToLineFormat "%s of rt-oar.cc.uic.edu Ticket #%s":;
>RT::LocalEtcPath /usr/local/rt/oar/local/etc
>RT::LocalLexiconPath /usr/local/rt/oar/local/po
>RT::LocalPath /usr/local/rt/oar/local
>RT::LogDir /var/log/rt/oar
>RT::LogToFileNamed oar.rt.log
>RT::LogToScreen error
>RT::LogToSyslog debug
>RT::LogoURL https://helpdesk.uic.edu/oar/NoAuth/images/rt.jpg
>RT::LoopsToRTOwner 1
>RT::MailCommand sendmailpipe
>RT::MasonComponentRoot /usr/local/rt/3.2.0/share/html
>RT::MasonDataDir /usr/local/rt/oar/var/mason_data
>RT::MasonLocalComponentRoot /usr/local/rt/oar/local/html
>RT::MasonSessionDir /usr/local/rt/oar/var/session_data
>RT::MaxAttachmentSize 10000000
>RT::MaxInlineBody 13456
>RT::MessageBoxWidth 72
>RT::MessageBoxWrap HARD
>RT::MinimumPasswordLength Password not printed
>RT::MyRequestsLength 10
>RT::MyTicketsLength 10
>RT::Organization cc.uic.edu
>RT::OwnerEmail kshalla at uic.edu
>RT::ParseNewMessageForTicketCcs 1
>RT::RTAddressRegexp (\@helpdesk[^.]*\.uic\.edu)|(\@LISTSERV\.UIC\.EDU)|(\@
>helpdesk\.uillinois\.edu)|(eclerk\@helpdesk\.admin\.uillinois\.edu)
>RT::SITE_CONFIG_FILE /usr/local/rt/oar/etc/RT_SiteConfig.pm
>RT::SendmailArguments -oi -t
>RT::SendmailPath /var/qmail/bin/sendmail
>RT::Timezone US/Central
>RT::VERSION 3.2.0
>RT::VarPath /usr/local/rt/3.2.0/var
>RT::WebBaseURL https://helpdesk.uic.edu
>RT::WebExternalAuth 1
>RT::WebExternalAuto 1
>RT::WebFallbackToInternalAuth 1
>RT::WebImagesURL https://helpdesk.uic.edu/oar/NoAuth/images/
>RT::WebPath /oar
>RT::WebURL https://helpdesk.uic.edu/oar/
>RT::rtname rt-oar.cc.uic.edu
>Perl configuration
>
>Summary of my perl5 (revision 5.0 version 8 subversion 3) configuration:
> Platform:
> osname=linux, osvers=2.4.18-27.7.xsmp, archname=i686-linux
> uname='linux development-3.priv.cc.uic.edu 2.4.18-27.7.xsmp #1 smp fri mar
> 14 05:52:30 est 2003 i686 unknown '
> config_args=''
> hint=recommended, useposix=true, d_sigaction=define
> usethreads=undef use5005threads=undef useithreads=undef usemultiplicity=un
>def
> useperlio=define d_sfio=undef uselargefiles=define usesocks=undef
> use64bitint=undef use64bitall=undef uselongdouble=undef
> usemymalloc=n, bincompat5005=undef
> Compiler:
> cc='cc', ccflags ='-fno-strict-aliasing -I/usr/local/include -D_LARGEFILE_
>SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm',
> optimize='-O2',
> cppflags='-fno-strict-aliasing -I/usr/local/include -I/usr/include/gdbm'
> ccversion='', gccversion='2.96 20000731 (Red Hat Linux 7.3 2.96-110)', gcc
>osandvers=''
> intsize=4, longsize=4, ptrsize=4, doublesize=8, byteorder=1234
> d_longlong=define, longlongsize=8, d_longdbl=define, longdblsize=12
> ivtype='long', ivsize=4, nvtype='double', nvsize=8, Off_t='off_t', lseeksi
>ze=8
> alignbytes=4, prototype=define
> Linker and Libraries:
> ld='cc', ldflags =' -L/usr/local/lib'
> libpth=/usr/local/lib /lib /usr/lib
> libs=-lnsl -lndbm -lgdbm -ldl -lm -lcrypt -lutil -lc
> perllibs=-lnsl -ldl -lm -lcrypt -lutil -lc
> libc=/lib/libc-2.2.5.so, so=so, useshrplib=false, libperl=libperl.a
> gnulibc_version='2.2.5'
> Dynamic Linking:
> dlsrc=dl_dlopen.xs, dlext=so, d_dlsymun=undef, ccdlflags='-rdynamic'
> cccdlflags='-fpic', lddlflags='-shared -L/usr/local/lib'
>_______________________________________________
>http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
>
>Be sure to check out the RT wiki at http://wiki.bestpractical.com
>
More information about the rt-users
mailing list