Bug : is not authorized to browse on collection workStudyDashboardUsers

Help me!
1

Observed behavior

I can’t browse workStudyDashboardUsers in input.

image
image1098×324 20.7 KB

Failure Logs

image
image2984×738 410 KB

Context

  • Project name: lereacteur-admin

  • Team name: Operations

  • Database type: Mongo

  • Agent technology: node

The user has all authorization on all collections, that’s why it’s a problem.

2

Hello @XavierColombel,

I would suspect that this is due to permission cache not refreshed on your agent.
You can restart your agent to refresh the cache, if the user is then permitted to browse we can safely assume that was the case.

The out of date cache is probably caused by the strategy of SSE coupled with reverse proxies that will buffer those events.You can find out more about it on this troubleshooting page.

3

I’ve restarted all dyno yet, clear the cache, but no change.

The strange thing is that it’s working on dev mode (local).

Any hint ?

4

Dev environments do not use permissions so sadly it’s not a lead.
I have refreshed the cached permission of your agent on our server, could you please retry ?

I’m failing to see a potential lead, for now. If that doesn’t work either could you update your agent version as I see a few patches concerning permissions.

5

It doesn’t work any better. I’ve update the agent.

I saw I couldn’t even delete certain documents (even in dev mode).

image
image485×118 6.64 KB

I don’t understand because I didn’t change anything.

6

Hello @XavierColombel,

Does this happen on any other collection or user ?
Do you have a date/time when you first encountered this error ?

7

Could you provide a jam.dev with a reproduction of your issues, you can send it to me privately if you do not wish for it to be publicly accessible :folded_hands:

8

I’ve just sent you the Jam.

1 Like
9

From the jam.dev you have shared at least for the deletion that pops out an error, it seems that the error is not due to Forest Admin permission but one of your custom Forbidden errors:

  "errors": [
    {
      "detail": "Vous devez supprimer un contrat d'alternance depuis sa fiche uniquement, et non depuis la liste."
    }
  ]
}

It seems that your custom error is being swallowed by the error handling in the Frontend and displaying a generic error popup.
I’ll create a bug ticket for this one.

I’m still looking for a cause of the ForbiddenError on the browse action on the WorkStudyDashboardUsers collection, do you happen to have any custom code on the route definition of the agent or its PermissionMiddlewareCreator ?

10

Wow yes, well done, you’re right, the original error was swallowed!

I send you the new Jam in private.