dhis2-devs team mailing list archive

Thread
Date

[Bug 1558244] [NEW] Adding Program to Superuser role remove all authorities from Role

To: dhis2-devs@xxxxxxxxxxxxxxxxxxx
From: Elmarie Claasen <elmarie@xxxxxxxx>
Date: Wed, 16 Mar 2016 19:44:17 -0000
Reply-to: Bug 1558244 <1558244@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

Public bug reported:

Affects:  2.22
Chrome and Firefox

Adding a tracker program to the Superuser role removes all
permissions/authorities from the Superuser role resulting in all
Superusers being unable to log in to the Instance.


To replicate: 
Allocate a tracker program to Superuser role
Move to anywhere else
Message will be: You are not permitted to view this page. 
Login to the instance again and you will not be able to log in getting same message that you cant access Dashboard landing page. 
Affects all Superusers including admin - effectively locked out of instance
Look in the UserRole table - there are no permissions for the Superuser role

* Temp fix: add in the ALL permission with SQL into the UserRole table for UserRole Superuser. 
Create a blank Role for the Program and add it to that role and add that role to the User. 

Expected behaviour from the system: The system should not automatically
remove authorities from a role

** Affects: dhis2
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of DHIS 2
developers, which is subscribed to DHIS.
https://bugs.launchpad.net/bugs/1558244

Title:
  Adding Program to Superuser role remove all authorities from Role

Status in DHIS:
  New

Bug description:
  Affects:  2.22
  Chrome and Firefox

  Adding a tracker program to the Superuser role removes all
  permissions/authorities from the Superuser role resulting in all
  Superusers being unable to log in to the Instance.

  
  To replicate: 
  Allocate a tracker program to Superuser role
  Move to anywhere else
  Message will be: You are not permitted to view this page. 
  Login to the instance again and you will not be able to log in getting same message that you cant access Dashboard landing page. 
  Affects all Superusers including admin - effectively locked out of instance
  Look in the UserRole table - there are no permissions for the Superuser role

  * Temp fix: add in the ALL permission with SQL into the UserRole table for UserRole Superuser. 
  Create a blank Role for the Program and add it to that role and add that role to the User. 

  Expected behaviour from the system: The system should not
  automatically remove authorities from a role

To manage notifications about this bug go to:
https://bugs.launchpad.net/dhis2/+bug/1558244/+subscriptions