public inbox for gnats-devel@sourceware.org
 help / color / mirror / Atom feed
From: Evan Lavelle <anti.spam1@dsl.pipex.com>
To: help-gnats@gnu.org
Cc: Hans-Albert Schneider <Hans-Albert@HA-Schneider.de>,
	Mel Hatzis <hatzis@juniper.net>
Subject: Re: Access level problem on gnats 4.0
Date: Wed, 11 Feb 2004 10:29:00 -0000	[thread overview]
Message-ID: <402A0387.9050403@dsl.pipex.com> (raw)
In-Reply-To: <200402110008.11154.Hans-Albert@HA-Schneider.de>

Thanks Mel/Hans-Albert - some more info below. I thought I had fixed the 
access problem with the extra ':' in my user_access, but this actually 
made no difference.

I've got one local test database, on the same machine as the server. 
'/usr/local/etc/gnats/databases' contains:

default:Bug database:/usr/local/com/gnatsdb
test:test database:/home/evan/work/test/gnatsdb

I've got one host_access file, and three user_access files, in these 
locations:

/usr/local/etc/gnats/defaults/gnatsd.user_access (this is empty)
/usr/local/etc/gnats/gnatsd.host_access
/usr/local/com/gnatsdb/gnats-adm/gnatsd.user_access
/home/evan/work/test/gnatsdb/gnats-adm/gnatsd.user_access

'host_access' contains:

[canonical-name]:admin:
*:none:

[canonical-name] is my machine's full name from /etc/hosts; using either 
the short name or 'localhost', or removing this line completely, makes 
no difference.

The two 'user_access' files currently contain:

evan:$0$evan:admin:
*::none:

I then set GNATSDB to 'test'. With this setup, I can use send-pr to 
create a problem report in the 'test' database, and I can use query-pr 
to view it, and edit-pr to edit it. I know that it's my local test 
database, because 'query-pr --database test 1' shows the PR, but 
'query-pr --database default 1' shows nothing.

PROBLEMS:
---------

1) If I restart xinetd, and then run 'gnatsd' to administer the test 
database, I can't get any permission above 'none':

evan 113 > gnatsd
200 [canonical-name] GNATS server 4.0 ready.
USER evan evan
210-Now accessing GNATS database 'test'
210 User access level set to 'none'

I've tried different passwords, including none, and it makes no difference.

2) If I now login as another user (gnats), I can *still* edit the test 
database using edit-pr. The permissions from the two access files appear 
to be ignored when using edit-pr, send-pr, etc.

Any ideas?

Many thanks

Evan



_______________________________________________
Help-gnats mailing list
Help-gnats@gnu.org
http://mail.gnu.org/mailman/listinfo/help-gnats

  reply	other threads:[~2004-02-11 10:29 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-02-10 16:53 Evan Lavelle
2004-02-10 18:18 ` Evan Lavelle
2004-02-10 18:31 ` Mel Hatzis
2004-02-10 23:18 ` Hans-Albert Schneider
2004-02-11 10:29   ` Evan Lavelle [this message]
2004-02-11 18:17     ` Mel Hatzis

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=402A0387.9050403@dsl.pipex.com \
    --to=anti.spam1@dsl.pipex.com \
    --cc=Hans-Albert@HA-Schneider.de \
    --cc=hatzis@juniper.net \
    --cc=help-gnats@gnu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).