Uploaded image for project: 'mod-permissions'
  1. mod-permissions
  2. MODPERMS-166

Permissions for system user cannot be created

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • P2
    • Resolution: Won't Do
    • None
    • None
    • None
    • CP: sprint 129
    • Core: Platform

    Description

      Overview:
      Steps to Reproduce:

      1. Run SearchAPI Karate tests on snapshot or testing environment
      2. Observe the error message in logs during tenant initialization
        POST request for mod-search-1.6.0-SNAPSHOT.167 /_/tenant failed with 500: {"errors":[{"message":"[403 Forbidden] during [POST] to [http://perms/users] [PermissionsClient#assignPermissionsToUser(Permissions)]: [Cannot update permissions: operating user d9d9582e-66ad-5bd0-b3cb-7db20e7539cc not found]","type":"Forbidden","code":"unknown_error"}],"total_records":1}
        

        Expected Results:
        API tests for mod-search are passed through
        Actual Results:
        Test preparation fails on the request

        POST https://folio-snapshot-okapi.dev.folio.org/_/proxy/tenants/testenant3918264315827287040/install?tenantParameters=loadSample%3Dfalse%2CloadReference%3Dtrue
        request body: [
          {
            "action": "enable",
            "id": "mod-login-7.6.0-SNAPSHOT.108"
          },
          {
            "action": "enable",
            "id": "mod-permissions-6.0.0-SNAPSHOT.127"
          },
          {
            "action": "enable",
            "id": "mod-users-18.2.0-SNAPSHOT.179"
          },
          {
            "action": "enable",
            "id": "mod-inventory-storage-22.1.0-SNAPSHOT.647"
          },
          {
            "action": "enable",
            "id": "mod-search-1.6.0-SNAPSHOT.167"
          }
        ]
        

        Additional Information:
        mod-search creates a system user with the following requests:

        1) Check if system user exists with
        GET {okapi}/users?query=username==mod-search
        
        2) create a system user
        POST {okapi}/users
        body : {"username": "mod-search", "active": true ,"personal": { "lastName": "mod-search" } }
        
        
        3) update user credentials
        POST {okapi}/authn/credentials
        body : {"username": "mod-search", "password": "{password}" }
        
        4) update user permission
        POST {okapi}/perms/users/{userId}/permissions?indexField=userId
        body: {"id": "{randomId}", "userId": "{userId}", "permissions": [{listOfPermissions}]}
        

        the last request (#4) fails with the error above

      TestRail: Results

        Attachments

          Issue Links

            Activity

              People

                mikhail.fokanov Mikhail Fokanov
                pavel_filippov Pavel Filippov
                Votes:
                0 Vote for this issue
                Watchers:
                7 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:

                  TestRail: Runs

                    TestRail: Cases