[rt-users] privilege corruption problem

Bob Goldstein bobg at uic.edu
Fri Dec 10 10:23:32 EST 2004 

I have several RT instances, all running the same code
(with possible minor tweaks), but with separate configs
and databases.

Everything is fine.  But last night I added a new email
address and queue to one instance.  Somehow I am unable
now to create a new ticket by email in any queue in
that instance.  I get:
No permission to create tickets in the queue 'oaradmit'

If I give createTicket privs to an individual
account, no problem. But if I give global createTicket privs to
"everyone", even if I make global "everyone" a superuser, no dice. It
just seems that the global "everyone" privs are ignored.

Because the code is the same for the other instances
in which this works just fine, I assume there is something
screwed up in the database.  But I'm not quite sure what
to look for.  If anyone can send me a tiny clue, I'd
sure appreciate it.   I've tried comparing the raw data
in the ACL table with other RT instances that work,
but they seem fine to my eye.  Maybe there is some cacheing
issue?  I've restarted apache, no help.

   bobg

The particulars:  RT 3.2.0, RH 7.3, apache 1.3.33, fastcgi, mysql 4.0.17

Perl v5.8.3 under linux 
  Apache::Session v1.54;
  Apache::Session::Generate::MD5 v2.1;
  Apache::Session::Lock::MySQL v1.00;
  Apache::Session::MySQL v1.01;
  Apache::Session::Serialize::Storable v1.00;
  Apache::Session::Store::DBI v1.01;
  Apache::Session::Store::MySQL v1.03;
  AutoLoader v5.60;
  base v2.04;
  Benchmark v1.052;
  bytes v1.01;
  Cache::Simple::TimedExpiry v0.21;
  Carp v1.01;
  CGI v3.01;
  CGI::Cookie v1.24;
  CGI::Fast v1.05;
  CGI::Util v1.4;
  Class::Container v0.11;
  Class::Data::Inheritable v0.02;
  Class::ReturnValue v0.52;
  constant v1.04;
  Cwd v2.12;
  Data::Dumper v2.121;
  Date::Format v2.22;
  Date::Parse v2.27;
  DBD::mysql v2.9003;
  DBI v1.45;
  DBIx::SearchBuilder v1.12_01;
  Devel::StackTrace v1.11;
  Devel::StackTraceFrame v0.6;
  Digest::base v1.00;
  Digest::MD5 v2.33;
  DynaLoader v1.04;
  Encode v1.99;
  Encode::Alias v1.38;
  Encode::Config v1.07;
  Encode::Encoding v1.33;
  Encode::Guess v1.09;
  Encode::Unicode v1.40;
  Errno v1.09;
  Exception::Class v1.19;
  Exception::Class::Base v1.2;
  Exporter v5.57;
  Exporter::Heavy v5.57;
  FCGI v0.67;
  Fcntl v1.05;
  fields v2.03;
  File::Basename v2.72;
  File::Glob v1.02;
  File::Path v1.06;
  File::Spec v0.87;
  File::Spec::Unix v1.5;
  File::Temp v0.14;
  FileHandle v2.01;
  HTML::Entities v1.27;
  HTML::Mason v1.26;
  HTML::Mason::CGIHandler v1.00;
  HTML::Mason::Exception v1.1;
  HTML::Mason::Exception::Abort v1.1;
  HTML::Mason::Exception::Compilation v1.1;
  HTML::Mason::Exception::Compilation::IncompatibleCompiler v1.1;
  HTML::Mason::Exception::Compiler v1.1;
  HTML::Mason::Exception::Decline v1.1;
  HTML::Mason::Exception::Params v1.1;
  HTML::Mason::Exception::Syntax v1.1;
  HTML::Mason::Exception::System v1.1;
  HTML::Mason::Exception::TopLevelNotFound v1.1;
  HTML::Mason::Exception::VirtualMethod v1.1;
  HTML::Mason::Exceptions v1.43;
  HTML::Parser v3.35;
  HTML::Scrubber v0.08;
  I18N::LangTags v0.29;
  integer v1.00;
  IO v1.21;
  IO::File v1.10;
  IO::Handle v1.23;
  IO::InnerFile v2.102 ;
  IO::Lines v2.103 ;
  IO::Scalar v2.105 ;
  IO::ScalarArray v2.103 ;
  IO::Seekable v1.09;
  IO::Wrap v2.102 ;
  IO::WrapTie v2.102 ;
  IPC::Open2 v1.01;
  IPC::Open3 v1.0105;
  lib v0.5565;
  List::Util v1.13;
  locale v1.00;
  Locale::Maketext v1.06;
  Locale::Maketext::Fuzzy v0.02;
  Locale::Maketext::Lexicon v0.34;
  Locale::Maketext::Lexicon::Gettext v0.11;
  Log::Dispatch v2.08;
  Log::Dispatch::Base v1.09;
  Log::Dispatch::Output v1.26;
  Log::Dispatch::Screen v1.17;
  Log::Dispatch::Syslog v1.18;
  Mail::Address v1.64;
  Mail::Field v1.64;
  Mail::Field::AddrList v1.64;
  Mail::Field::Date v1.64;
  Mail::Header v1.64;
  Mail::Internet v1.64;
  MIME::Base64 v3.05;
  MIME::Body v5.415;
  MIME::Decoder v5.415;
  MIME::Decoder::Binary v5.415;
  MIME::Decoder::NBit v5.415;
  MIME::Entity v5.415;
  MIME::Field::ContDisp v5.415;
  MIME::Field::ConTraEnc v5.415;
  MIME::Field::ContType v5.415;
  MIME::Field::ParamVal v5.415;
  MIME::Head v5.415;
  MIME::Parser v5.415;
  MIME::QuotedPrint v3.03;
  MIME::Tools v5.415;
  MIME::Words v5.415;
  Module::Versions::Report v1.02;
  overload v1.01;
  Params::Validate v0.74;
  POSIX v1.07;
  re v0.04;
  Regexp::Common v2.113;
  Regexp::Common::delimited v1;
  RT v3.2.0;
  RT::Interface::Email v1.02;
  Scalar::Util v1.13;
  SelectSaver v1.00;
  Socket v1.76;
  Storable v2.09;
  strict v1.03;
  Symbol v1.05;
  Sys::Hostname v1.11;
  Sys::Syslog v0.04;
  Text::Autoformat v1.12;
  Text::Quoted v1.3;
  Text::Reform v1.11;
  Text::Tabs v98.112801;
  Text::Template v1.44;
  Text::Wrapper v1.000;
  Time::HiRes v1.52;
  Time::JulianDay v99.061501;
  Time::Local v1.07;
  Time::ParseDate v100.010301;
  Time::Timezone v99.062401;
  Time::Zone v2.22;
  Tree::Simple v1.05;
  utf8 v1.02;
  vars v1.01;
  warnings v1.03;
  warnings::register v1.00;
  XSLoader v0.02;



RT Variables
RT::AmbiguousDayInPast  1
RT::BasePath    /usr/local/rt/3.2.0
RT::CORE_CONFIG_FILE    /usr/local/rt/3.2.0/etc/RT_Config.pm
RT::CanonicalizeEmailAddressMatch       (tigger|icarus|mailserv)\.(cc\.)?uic\.edu$
RT::CanonicalizeEmailAddressReplace     uic.edu
RT::CanonicalizeOnCreate        1
RT::CommentAddress      uicadmit-comment at helpdesk.uic.edu
RT::CorrespondAddress   uicadmit at helpdesk.uic.edu
RT::DatabaseHost        rt-mysql.cc.uic.edu
RT::DatabaseName        rt_oar
RT::DatabasePassword    Password not printed
RT::DatabasePort        3306
RT::DatabaseRTHost      helpdesk.uic.edu
RT::DatabaseType        mysql
RT::DatabaseUser        rt_user_oar
RT::DefaultSearchResultFormat   '<B><A HREF="/oar/Ticket/Display.html?id=__id__">__id__</a></B>/TITLE:#', '<B><A HREF="/oar/Ticket/Display.html?id=__id__">__Subject__</a></B>/TITLE:Subject', Status, QueueName, OwnerName, Priority, '__NEWLINE__', '', '<small>__Requestors__</small>', '<small>__LastUpdatedBy__</small>', '<small>__ToldRelative__</small>', '<small>__LastUpdatedRelative__</small>', '<small>__TimeLeft__</small>'
RT::EmailOutputEncoding         utf-8
RT::EtcPath     /usr/local/rt/3.2.0/etc
RT::FriendlyFromLineFormat      "%s via RT" <%s>
RT::FriendlyToLineFormat        "%s of rt-oar.cc.uic.edu Ticket #%s":;
RT::LocalEtcPath        /usr/local/rt/oar/local/etc
RT::LocalLexiconPath    /usr/local/rt/oar/local/po
RT::LocalPath   /usr/local/rt/oar/local
RT::LogDir      /var/log/rt/oar
RT::LogToFileNamed      oar.rt.log
RT::LogToScreen         error
RT::LogToSyslog         debug
RT::LogoURL     https://helpdesk.uic.edu/oar/NoAuth/images/rt.jpg
RT::LoopsToRTOwner      1
RT::MailCommand         sendmailpipe
RT::MasonComponentRoot  /usr/local/rt/3.2.0/share/html
RT::MasonDataDir        /usr/local/rt/oar/var/mason_data
RT::MasonLocalComponentRoot     /usr/local/rt/oar/local/html
RT::MasonSessionDir     /usr/local/rt/oar/var/session_data
RT::MaxAttachmentSize   10000000
RT::MaxInlineBody       13456
RT::MessageBoxWidth     72
RT::MessageBoxWrap      HARD
RT::MinimumPasswordLength       Password not printed
RT::MyRequestsLength    10
RT::MyTicketsLength     10
RT::Organization        cc.uic.edu
RT::OwnerEmail  kshalla at uic.edu
RT::ParseNewMessageForTicketCcs         1
RT::RTAddressRegexp     (\@helpdesk[^.]*\.uic\.edu)|(\@LISTSERV\.UIC\.EDU)|(\@helpdesk\.uillinois\.edu)|(eclerk\@helpdesk\.admin\.uillinois\.edu)
RT::SITE_CONFIG_FILE    /usr/local/rt/oar/etc/RT_SiteConfig.pm
RT::SendmailArguments   -oi -t
RT::SendmailPath        /var/qmail/bin/sendmail
RT::Timezone    US/Central
RT::VERSION     3.2.0
RT::VarPath     /usr/local/rt/3.2.0/var
RT::WebBaseURL  https://helpdesk.uic.edu
RT::WebExternalAuth     1
RT::WebExternalAuto     1
RT::WebFallbackToInternalAuth   1
RT::WebImagesURL        https://helpdesk.uic.edu/oar/NoAuth/images/
RT::WebPath     /oar
RT::WebURL      https://helpdesk.uic.edu/oar/
RT::rtname      rt-oar.cc.uic.edu
Perl configuration

Summary of my perl5 (revision 5.0 version 8 subversion 3) configuration:
  Platform:
    osname=linux, osvers=2.4.18-27.7.xsmp, archname=i686-linux
    uname='linux development-3.priv.cc.uic.edu 2.4.18-27.7.xsmp #1 smp fri mar 14 05:52:30 est 2003 i686 unknown '
    config_args=''
    hint=recommended, useposix=true, d_sigaction=define
    usethreads=undef use5005threads=undef useithreads=undef usemultiplicity=undef
    useperlio=define d_sfio=undef uselargefiles=define usesocks=undef
    use64bitint=undef use64bitall=undef uselongdouble=undef
    usemymalloc=n, bincompat5005=undef
  Compiler:
    cc='cc', ccflags ='-fno-strict-aliasing -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm',
    optimize='-O2',
    cppflags='-fno-strict-aliasing -I/usr/local/include -I/usr/include/gdbm'
    ccversion='', gccversion='2.96 20000731 (Red Hat Linux 7.3 2.96-110)', gccosandvers=''
    intsize=4, longsize=4, ptrsize=4, doublesize=8, byteorder=1234
    d_longlong=define, longlongsize=8, d_longdbl=define, longdblsize=12
    ivtype='long', ivsize=4, nvtype='double', nvsize=8, Off_t='off_t', lseeksize=8
    alignbytes=4, prototype=define
  Linker and Libraries:
    ld='cc', ldflags =' -L/usr/local/lib'
    libpth=/usr/local/lib /lib /usr/lib
    libs=-lnsl -lndbm -lgdbm -ldl -lm -lcrypt -lutil -lc
    perllibs=-lnsl -ldl -lm -lcrypt -lutil -lc
    libc=/lib/libc-2.2.5.so, so=so, useshrplib=false, libperl=libperl.a
    gnulibc_version='2.2.5'
  Dynamic Linking:
    dlsrc=dl_dlopen.xs, dlext=so, d_dlsymun=undef, ccdlflags='-rdynamic'
    cccdlflags='-fpic', lddlflags='-shared -L/usr/local/lib'

More information about the rt-users mailing list