Warning: Can't synchronize with repository "(default)" (/home/git/ome.git does not appear to be a Git repository.). Look in the Trac log for more information.
Notice: In order to edit this ticket you need to be either: a Product Owner, The owner or the reporter of the ticket, or, in case of a Task not yet assigned, a team_member"

Task #10049 (closed)

Opened 11 years ago

Closed 11 years ago

Bug: openTable not handling SecViolation

Reported by: jamoore Owned by: spli
Priority: minor Milestone: OMERO-4.4.7
Component: API Version: n.a.
Keywords: LHF Cc: spli
Resources: n.a. Referenced By: n.a.
References: n.a. Remaining Time: 0.0d
Sprint: 2013-02-12 (5)

Description

Currently a ome.conditions security violation caused by passing an OriginalFile instance which is not readable in the current context to SharedResourcesPrx.openTable prints the following in master.err. This should be converted to an omero.SecurityViolation

Change History (6)

comment:1 Changed 11 years ago by jmoore

12/18/12 08:24:08:965 warning: Blitz-0-Ice.ThreadPool.Server-8: dispatch exception:
identity: 9e21efc1-655c-46d8-ad03-e7f54b02c65d/8b0ded0b-dac0-40a1-8fcf-719595ad48baomero.grid.SharedResources
facet: 
operation: openTable
ome.conditions.SecurityViolation: Cannot read ome.model.core.OriginalFile:Id_13047
	at ome.security.basic.BasicACLVoter.throwLoadViolation(BasicACLVoter.java:163)
	at ome.security.CompositeACLVoter.throwLoadViolation(CompositeACLVoter.java:88)
        ...
	at omero.cmd.CallContext.invoke(CallContext.java:59)
	at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
	at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
	at $Proxy74.openTable(Unknown Source)
	at omero.grid._SharedResourcesTie.openTable(_SharedResourcesTie.java:99)
	at omero.grid._SharedResourcesDisp.___openTable(_SharedResourcesDisp.java:293)
	at omero.grid._SharedResourcesDisp.__dispatch(_SharedResourcesDisp.java:369)
	at IceInternal.Incoming.invoke(Incoming.java:159)
	at Ice.ConnectionI.invokeAll(ConnectionI.java:2037)
	at Ice.ConnectionI.message(ConnectionI.java:972)
	at IceInternal.ThreadPool.run(ThreadPool.java:577)
	at IceInternal.ThreadPool.access$100(ThreadPool.java:12)
	at IceInternal.ThreadPool$EventHandlerThread.run(ThreadPool.java:971)

12/18/12 08:24:08.972 OMERO.Glacier2: warning: dispatch exception: OutgoingAsync.cpp:352: Ice::UnknownException:
unknown exception:
ome.conditions.SecurityViolation: Cannot read ome.model.core.OriginalFile:Id_13047
	at ome.security.basic.BasicACLVoter.throwLoadViolation(BasicACLVoter.java:163)
	at ome.security.CompositeACLVoter.throwLoadViolation(CompositeACLVoter.java:88)
        ...
	at omero.cmd.CallContext.invoke(CallContext.java:59)
	at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
	at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
	at $Proxy74.openTable(Unknown Source)
	at omero.grid._SharedResourcesTie.openTable(_SharedResourcesTie.java:99)
	at omero.grid._SharedResourcesDisp.___openTable(_SharedResourcesDisp.java:293)
	at omero.grid._SharedResourcesDisp.__dispatch(_SharedResourcesDisp.java:369)
	at IceInternal.Incoming.invoke(Incoming.java:159)
	at Ice.ConnectionI.invokeAll(ConnectionI.java:2037)
	at Ice.ConnectionI.message(ConnectionI.java:972)
	at IceInternal.ThreadPool.run(ThreadPool.java:577)
	at IceInternal.ThreadPool.access$100(ThreadPool.java:12)
	at IceInternal.ThreadPool$EventHandlerThread.run(ThreadPool.java:971)

identity: 9e21efc1-655c-46d8-ad03-e7f54b02c65d/8b0ded0b-dac0-40a1-8fcf-719595ad48baomero.grid.SharedResources
facet: 
operation: openTable

comment:2 Changed 11 years ago by spli

  • Owner set to spli
  • Sprint set to 2013-01-15 (4)

comment:3 Changed 11 years ago by spli

  • Remaining Time set to 1

comment:4 Changed 11 years ago by jburel

  • Sprint changed from 2013-01-15 (4) to 2013-02-12 (5)

Moved from sprint 2013-01-15 (4)

comment:6 Changed 11 years ago by spli

  • Remaining Time changed from 1 to 0
  • Resolution set to fixed
  • Status changed from accepted to closed
Note: See TracTickets for help on using tickets. You may also have a look at Agilo extensions to the ticket.

1.3.13-PRO © 2008-2011 Agilo Software all rights reserved (this page was served in: 0.71328 sec.)

We're Hiring!