Yes, and I've tested it on multiple machines, all calls to findObjects match 'NotApplicable' policies. Here is the log for several other api-a calls from the same location, with the failing one at the end. They all share the warning about not finding the subject:role attribute, but it only seems to affect the findObjects call. (if that even has anything to do with it...)
Please let me know if I can supply any other info. http://localhost:8088/fedora/objects/fedora-system:FedoraObject-3.0/datastreams/DC/content -> <Decision>Permit</Decision> n:fedora:names:fedora:2.1:environment:httpRequest:sessionEncoding DEBUG 2012-10-09 12:23:12.876 [http-8088-6] (AttributeFinderModule) exiting parmsOk normally org.fcrepo.server.security.ContextAttributeFinderModule DEBUG 2012-10-09 12:23:12.876 [http-8088-6] (AttributeFinderModule) willService() org.fcrepo.server.security.ContextAttributeFinderModule deny this known adhoc attribute urn:fedora:names:fedora:2.1:action:contextId DEBUG 2012-10-09 12:23:12.876 [http-8088-6] (AttributeFinderModule) AttributeFinder:willService() org.fcrepo.server.security.ContextAttributeFinderModule returns false DEBUG 2012-10-09 12:23:12.876 [http-8088-6] (AttributeFinderModule) AttributeFinder:getAttributeFromEvaluationCtxorg.fcrepo.server.security.ContextAttributeFinderModule exit on couldn't get resource attribute from xacml request wrong bag n=0 DEBUG 2012-10-09 12:23:12.876 [http-8088-6] (ContextAttributeFinderModule) ContextAttributeFinder:getContextId exit on can't get contextId on request callback DEBUG 2012-10-09 12:23:12.876 [http-8088-6] (ContextAttributeFinderModule) contextId=null attributeId=urn:fedora:names:fedora:2.1:subject:role DEBUG 2012-10-09 12:23:12.876 [http-8088-6] (AttributeFinderModule) org.fcrepo.server.security.ContextAttributeFinderModule got temp=null DEBUG 2012-10-09 12:23:12.876 [http-8088-6] (AttributeFinderModule) AttributeFinder:findAttribute exit on attribute value not foundorg.fcrepo.server.security.ContextAttributeFinderModule DEBUG 2012-10-09 12:23:12.876 [http-8088-6] (PolicyManager) Matched policies and created abstract policy. DEBUG 2012-10-09 12:23:12.877 [http-8088-6] (MelcoePDPImpl) response is: <Response> <Result ResourceId="/fedora-system:FedoraObject-3.0/DC"> <Decision>Permit</Decision> <Status> <StatusCode Value="urn:oasis:names:tc:xacml:1.0:status:ok"/> </Status> </Result> </Response> http://localhost:8088/fedora/objects/fedora-system:FedoraObject-3.0/methods/fedora-system:3/viewObjectProfile -> <Decision>Permit</Decision> DEBUG 2012-10-09 12:25:20.130 [http-8088-6] (AttributeFinderModule) exiting parmsOk normally org.fcrepo.server.security.ContextAttributeFinderModule DEBUG 2012-10-09 12:25:20.130 [http-8088-6] (AttributeFinderModule) willService() org.fcrepo.server.security.ContextAttributeFinderModule deny this known adhoc attribute urn:fedora:names:fedora:2.1:action:contextId DEBUG 2012-10-09 12:25:20.130 [http-8088-6] (AttributeFinderModule) AttributeFinder:willService() org.fcrepo.server.security.ContextAttributeFinderModule returns false DEBUG 2012-10-09 12:25:20.130 [http-8088-6] (AttributeFinderModule) AttributeFinder:getAttributeFromEvaluationCtxorg.fcrepo.server.security.ContextAttributeFinderModule exit on couldn't get resource attribute from xacml request wrong bag n=0 DEBUG 2012-10-09 12:25:20.130 [http-8088-6] (ContextAttributeFinderModule) ContextAttributeFinder:getContextId exit on can't get contextId on request callback DEBUG 2012-10-09 12:25:20.130 [http-8088-6] (ContextAttributeFinderModule) contextId=null attributeId=urn:fedora:names:fedora:2.1:subject:role DEBUG 2012-10-09 12:25:20.130 [http-8088-6] (AttributeFinderModule) org.fcrepo.server.security.ContextAttributeFinderModule got temp=null DEBUG 2012-10-09 12:25:20.130 [http-8088-6] (AttributeFinderModule) AttributeFinder:findAttribute exit on attribute value not foundorg.fcrepo.server.security.ContextAttributeFinderModule DEBUG 2012-10-09 12:25:20.130 [http-8088-6] (PolicyManager) Matched policies and created abstract policy. DEBUG 2012-10-09 12:25:20.130 [http-8088-6] (MelcoePDPImpl) response is: <Response> <Result ResourceId="/fedora-system:FedoraObject-3.0"> <Decision>Permit</Decision> <Status> <StatusCode Value="urn:oasis:names:tc:xacml:1.0:status:ok"/> </Status> </Result> </Response> http://localhost:8088/fedora/objects/fedora-system:FedoraObject-3.0/versions?format=xml -> <Decision>Permit</Decision> DEBUG 2012-10-09 12:25:57.392 [http-8088-6] (AttributeFinderModule) another registered attribute = org.fcrepo.server.security.ContextAttributeFinderModule urn:fedora:names:fedora:2.1:environment:httpRequest:scheme DEBUG 2012-10-09 12:25:57.392 [http-8088-6] (AttributeFinderModule) another registered attribute = org.fcrepo.server.security.ContextAttributeFinderModule urn:fedora:names:fedora:2.1:environment:httpRequest:sessionEncoding DEBUG 2012-10-09 12:25:57.392 [http-8088-6] (AttributeFinderModule) exiting parmsOk normally org.fcrepo.server.security.ContextAttributeFinderModule DEBUG 2012-10-09 12:25:57.392 [http-8088-6] (AttributeFinderModule) willService() org.fcrepo.server.security.ContextAttributeFinderModule deny this known adhoc attribute urn:fedora:names:fedora:2.1:action:contextId DEBUG 2012-10-09 12:25:57.392 [http-8088-6] (AttributeFinderModule) AttributeFinder:willService() org.fcrepo.server.security.ContextAttributeFinderModule returns false DEBUG 2012-10-09 12:25:57.392 [http-8088-6] (AttributeFinderModule) AttributeFinder:getAttributeFromEvaluationCtxorg.fcrepo.server.security.ContextAttributeFinderModule exit on couldn't get resource attribute from xacml request wrong bag n=0 DEBUG 2012-10-09 12:25:57.392 [http-8088-6] (ContextAttributeFinderModule) ContextAttributeFinder:getContextId exit on can't get contextId on request callback DEBUG 2012-10-09 12:25:57.392 [http-8088-6] (ContextAttributeFinderModule) contextId=null attributeId=urn:fedora:names:fedora:2.1:subject:role DEBUG 2012-10-09 12:25:57.392 [http-8088-6] (AttributeFinderModule) org.fcrepo.server.security.ContextAttributeFinderModule got temp=null DEBUG 2012-10-09 12:25:57.392 [http-8088-6] (AttributeFinderModule) AttributeFinder:findAttribute exit on attribute value not foundorg.fcrepo.server.security.ContextAttributeFinderModule DEBUG 2012-10-09 12:25:57.392 [http-8088-6] (PolicyManager) Matched policies and created abstract policy. DEBUG 2012-10-09 12:25:57.392 [http-8088-6] (MelcoePDPImpl) response is: <Response> <Result ResourceId="/fedora-system:FedoraObject-3.0"> <Decision>Permit</Decision> <Status> <StatusCode Value="urn:oasis:names:tc:xacml:1.0:status:ok"/> </Status> </Result> </Response> http://localhost:8088/fedora/objects/fedora-system:FedoraObject-3.0?format=xml -> <Decision>Permit</Decision> DEBUG 2012-10-09 12:27:05.147 [http-8088-6] (AttributeFinderModule) another registered attribute = org.fcrepo.server.security.ContextAttributeFinderModule urn:fedora:names:fedora:2.1:environment:httpRequest:sessionEncoding DEBUG 2012-10-09 12:27:05.147 [http-8088-6] (AttributeFinderModule) exiting parmsOk normally org.fcrepo.server.security.ContextAttributeFinderModule DEBUG 2012-10-09 12:27:05.147 [http-8088-6] (AttributeFinderModule) willService() org.fcrepo.server.security.ContextAttributeFinderModule deny this known adhoc attribute urn:fedora:names:fedora:2.1:action:contextId DEBUG 2012-10-09 12:27:05.147 [http-8088-6] (AttributeFinderModule) AttributeFinder:willService() org.fcrepo.server.security.ContextAttributeFinderModule returns false DEBUG 2012-10-09 12:27:05.147 [http-8088-6] (AttributeFinderModule) AttributeFinder:getAttributeFromEvaluationCtxorg.fcrepo.server.security.ContextAttributeFinderModule exit on couldn't get resource attribute from xacml request wrong bag n=0 DEBUG 2012-10-09 12:27:05.147 [http-8088-6] (ContextAttributeFinderModule) ContextAttributeFinder:getContextId exit on can't get contextId on request callback DEBUG 2012-10-09 12:27:05.147 [http-8088-6] (ContextAttributeFinderModule) contextId=null attributeId=urn:fedora:names:fedora:2.1:subject:role DEBUG 2012-10-09 12:27:05.147 [http-8088-6] (AttributeFinderModule) org.fcrepo.server.security.ContextAttributeFinderModule got temp=null DEBUG 2012-10-09 12:27:05.147 [http-8088-6] (AttributeFinderModule) AttributeFinder:findAttribute exit on attribute value not foundorg.fcrepo.server.security.ContextAttributeFinderModule DEBUG 2012-10-09 12:27:05.147 [http-8088-6] (PolicyManager) Matched policies and created abstract policy. DEBUG 2012-10-09 12:27:05.148 [http-8088-6] (MelcoePDPImpl) response is: <Response> <Result ResourceId="/fedora-system:FedoraObject-3.0"> <Decision>Permit</Decision> <Status> <StatusCode Value="urn:oasis:names:tc:xacml:1.0:status:ok"/> </Status> </Result> </Response> http://localhost:8088/fedora/objects?pid=true&title=true&terms=fedora-system%3AFedoraObject-3.0&query=&maxResults=20&resultFormat=xml -> <Decision>NotApplicable</Decision> DEBUG 2012-10-09 12:29:05.397 [http-8088-6] (AttributeFinderModule) exiting parmsOk normally org.fcrepo.server.security.ContextAttributeFinderModule DEBUG 2012-10-09 12:29:05.397 [http-8088-6] (AttributeFinderModule) willService() org.fcrepo.server.security.ContextAttributeFinderModule deny this known adhoc attribute urn:fedora:names:fedora:2.1:action:contextId DEBUG 2012-10-09 12:29:05.397 [http-8088-6] (AttributeFinderModule) AttributeFinder:willService() org.fcrepo.server.security.ContextAttributeFinderModule returns false DEBUG 2012-10-09 12:29:05.397 [http-8088-6] (AttributeFinderModule) AttributeFinder:getAttributeFromEvaluationCtxorg.fcrepo.server.security.ContextAttributeFinderModule exit on couldn't get resource attribute from xacml request wrong bag n=0 DEBUG 2012-10-09 12:29:05.397 [http-8088-6] (ContextAttributeFinderModule) ContextAttributeFinder:getContextId exit on can't get contextId on request callback DEBUG 2012-10-09 12:29:05.397 [http-8088-6] (ContextAttributeFinderModule) contextId=null attributeId=urn:fedora:names:fedora:2.1:subject:role DEBUG 2012-10-09 12:29:05.397 [http-8088-6] (AttributeFinderModule) org.fcrepo.server.security.ContextAttributeFinderModule got temp=null DEBUG 2012-10-09 12:29:05.397 [http-8088-6] (AttributeFinderModule) AttributeFinder:findAttribute exit on attribute value not foundorg.fcrepo.server.security.ContextAttributeFinderModule DEBUG 2012-10-09 12:29:05.397 [http-8088-6] (PolicyManager) Matched policies and created abstract policy. DEBUG 2012-10-09 12:29:05.397 [http-8088-6] (MelcoePDPImpl) response is: <Response> <Result ResourceId="/fedora-system:FedoraObject-3.0"> <Decision>NotApplicable</Decision> <Status> <StatusCode Value="urn:oasis:names:tc:xacml:1.0:status:ok"/> </Status> </Result> </Response> DEBUG 2012-10-09 12:29:05.397 [http-8088-6] (EvaluationEngineImpl) Adding PDP evaluation results to cache DEBUG 2012-10-09 12:29:05.398 [http-8088-6] (ResponseCacheImpl) Adding Cache Item (14/14/14): b63a28344cfc08ac43ca1d1665853d4a DEBUG 2012-10-09 12:29:05.398 [http-8088-6] (EvaluationEngineImpl) Time taken for XACML Evaluation: 9ms DEBUG 2012-10-09 12:29:05.398 [http-8088-6] (FindObjects) Response: <Response> <Result ResourceId="/fedora-system:FedoraObject-3.0"> <Decision>NotApplicable</Decision> <Status> <StatusCode Value="urn:oasis:names:tc:xacml:1.0:status:ok"/> </Status> </Result> </Response> DEBUG 2012-10-09 12:29:05.399 [http-8088-6] (FindObjects) Checking: /fedora-system:FedoraObject-3.0 DEBUG 2012-10-09 12:29:05.399 [http-8088-6] (FindObjects) Removing: /fedora-system:FedoraObject-3.0 [fedora-system:FedoraObject-3.0] David Lacy Falvey Library Technology Services Villanova University library.villanova.edu > -----Original Message----- > From: Benjamin Armintor [mailto:[email protected]] > Sent: Tuesday, October 09, 2012 12:10 PM > To: Support and info exchange list for Fedora users. > Subject: Re: [fcrepo-user] findObjects REST API and 3.6 problem > > Is this action running from the same client ip as all of the > correctly-functioning actions? > ------------------------------------------------------------------------------ Don't let slow site performance ruin your business. Deploy New Relic APM Deploy New Relic app performance management and know exactly what is happening inside your Ruby, Python, PHP, Java, and .NET app Try New Relic at no cost today and get our sweet Data Nerd shirt too! http://p.sf.net/sfu/newrelic-dev2dev _______________________________________________ Fedora-commons-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
