[gold-users] root is not authorized (AccountProject Create)

gold-users at calcua.ua.ac.be gold-users at calcua.ua.ac.be
Mon Jul 18 02:07:00 MDT 2011


Hello,

We used to have SystemAdmin gold, now we have SystemAdmin root.
But while trying to create a new user and associate the user with a 
project, we now get the following problem:

Request:(Query, root, [(Project, , )], [], [],
   [(Name, default_project, , , , , )], [], [], 0, 0, 0, )
   --> responsecode 000 count 1
Request:(Query, root, [(User, , )], [], [],
   [(Name, new_user, , , , , )], [], [], 0, 0, 0, )
   --> responsecode 000 count 0
Request:(Create, root, [(User, , )], [], [(Name, new_user, ),
   (Active, True, ), (CommonName, New_User, ),
   (DefaultProject, default_project, )], [], [], [], 0, 0, 0, )
   --> Successfully created 1 User
Request:(Create, root, [(Password, , )], [], [(User, new_user, ),
   (Password, new_passwd, )], [], [], [], 0, 0, 0, )
   --> Successfully created 1 Password
Request:(Query, root, [(User, , )], [], [],
   [(Name, new_user, , , , , )], [], [], 0, 0, 0, )
   --> responsecode 000 count 1
Request:(Query, root, [(Project, , )], [], [],
   [(Name, default_project, , , , , )], [], [], 0, 0, 0, )
   --> responsecode 000 count 1
Request:(Query, root, [(ProjectUser, , )], [], [],
   [(Project, default_project, , , , , )], [], [], 0, 0, 0, )
   --> responsecode 000 count xyz
Request:(Create, root, [(ProjectUser, , )], [],
   [(Project, default_project, ), (Name, new_user, )],
   [], [], [], 0, 0, 0, )
   --> responsecode 000 count 1
Request:(Query, root, [(Account, , )], [], [],
   [(Machine, ANY, , , , , ), (User, new_user, , , , , ),
   (Project, default_project, , , , , )], [], [], 0, 0, 0, )
   --> ERROR Gold::Proxy::prepareConditions [lib/Gold/Proxy.pm:923]
   Machine is not a valid attribute for the Account object
   --> ERROR Gold::Exception::new [lib/Gold/Exception.pm:119]
   Machine is not a valid attribute for the Account object at
   lib/Gold/Proxy.pm line 925
   --> ERROR main::__ANON__ [sbin/goldd:350]  Gold server error
  (318): Machine is not a valid attribute for the Account object.
   --> responsecode 318 count -1
   --> ERROR Gold::Exception::new [lib/Gold/Exception.pm:119]
   root is not authorized to perform this function
   (AccountProject Create) at lib/Gold/Proxy.pm line 1385
   --> exit with code 444

Normally, the last Request should be

Request:(Query, root, [(Account, , )], [], [],
   [(Machine, ANY, , , , , ), (User, new_user, , , , , ),
   (Project, default_project, , , , , )], [], [], 0, 0, 0, )
   --> responsecode 318 count -1
   --> Successfulyy created 1 Account and 3 members and
   auto-generated Allocation XYZ

But how can this be for SystemAdmin root?
FYI, here are the relevant Queries:

# goldsh User Query
ANY      False 
NONE     False 
SELF     False 
MEMBERS  False 
root     True

# goldsh Role Query
SystemAdmin  Can update or view any object

# goldsh RoleAction Query
SystemAdmin  ANY            ANY     ANY
Anonymous    Password       ANY     SELF
ProjectAdmin Project        ANY     ADMIN
UserServices Job            Refund  ANY
UserServices User           ANY     ANY
UserServices Machine        ANY     ANY
UserServices Project        ANY     ANY
UserServices ProjectUser    ANY     ANY
UserServices ProjectMachine ANY     ANY
Scheduler    Job            Charge  ANY
Scheduler    Job            Quote   ANY
Scheduler    Job            Reserve ANY
OVERRIDE     Account        Balance ANY

What can I do to resolve this problem?

-- Regards,

Franky Backeljauw


More information about the gold-users mailing list