[jira] [Updated] (NIFI-5033) Cannot update variable referenced in restricted components
[ https://issues.apache.org/jira/browse/NIFI-5033?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Joseph Percivall updated NIFI-5033: --- Affects Version/s: (was: 1.6.0) > Cannot update variable referenced in restricted components > -- > > Key: NIFI-5033 > URL: https://issues.apache.org/jira/browse/NIFI-5033 > Project: Apache NiFi > Issue Type: Bug > Components: Core Framework >Reporter: Pierre Villard >Assignee: Matt Gilman >Priority: Blocker > Fix For: 1.6.0 > > > When updating a variable at pg level that references a restricted component > it will fail. It seems the code is the same for secured and unsecured > instance and it fails when NiFi is unsecured since the user is unknown. > It seems it has been introduced by NIFI-4885. > {noformat} > 2018-03-29 21:10:30,913 INFO [Variable Registry Update Thread] > o.a.nifi.web.api.ProcessGroupResource In order to update Variable Registry > for Process Group with ID 731bbdde-0162-1000-0f00-db6543c34b50, Stopping > Processors > 2018-03-29 21:10:30,913 INFO [Variable Registry Update Thread] > o.a.nifi.web.api.ProcessGroupResource In order to update Variable Registry > for Process Group with ID 731bbdde-0162-1000-0f00-db6543c34b50, Disabling > Controller Services > 2018-03-29 21:10:30,913 INFO [Variable Registry Update Thread] > o.a.nifi.web.api.ProcessGroupResource In order to update Variable Registry > for Process Group with ID 731bbdde-0162-1000-0f00-db6543c34b50, Applying > updates to Variable Registry > 2018-03-29 21:10:30,915 ERROR [Variable Registry Update Thread] > o.a.nifi.web.api.ProcessGroupResource Failed to update variable registry for > Process Group with ID 731bbdde-0162-1000-0f00-db6543c34b50 > org.apache.nifi.authorization.AccessDeniedException: Unknown user. > at > org.apache.nifi.authorization.resource.RestrictedComponentsAuthorizableFactory$2.checkAuthorization(RestrictedComponentsAuthorizableFactory.java:68) > at > org.apache.nifi.controller.ConfiguredComponent.checkAuthorization(ConfiguredComponent.java:129) > at > org.apache.nifi.authorization.resource.Authorizable.checkAuthorization(Authorizable.java:183) > at > org.apache.nifi.authorization.resource.Authorizable.isAuthorized(Authorizable.java:70) > at > org.apache.nifi.web.api.dto.DtoFactory.createPermissionsDto(DtoFactory.java:1798) > at > org.apache.nifi.web.api.dto.DtoFactory.createPermissionsDto(DtoFactory.java:1785) > at > org.apache.nifi.web.api.dto.DtoFactory.lambda$createAffectedComponentEntities$73(DtoFactory.java:2485) > at > java.util.stream.ReferencePipeline$3$1.accept(ReferencePipeline.java:193) > at > java.util.HashMap$KeySpliterator.forEachRemaining(HashMap.java:1540) > at > java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:481) > at > java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:471) > at > java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:708) > at > java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) > at > java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:499) > at > org.apache.nifi.web.api.dto.DtoFactory.createAffectedComponentEntities(DtoFactory.java:2489) > at > org.apache.nifi.web.api.dto.DtoFactory.createVariableRegistryDto(DtoFactory.java:2507) > at > org.apache.nifi.web.StandardNiFiServiceFacade.lambda$updateVariableRegistry$36(StandardNiFiServiceFacade.java:950) > at > org.apache.nifi.web.StandardNiFiServiceFacade$1.update(StandardNiFiServiceFacade.java:721) > at > org.apache.nifi.web.revision.NaiveRevisionManager.updateRevision(NaiveRevisionManager.java:120) > at > org.apache.nifi.web.StandardNiFiServiceFacade.updateComponent(StandardNiFiServiceFacade.java:712) > at > org.apache.nifi.web.StandardNiFiServiceFacade.updateVariableRegistry(StandardNiFiServiceFacade.java:947) > at > org.apache.nifi.web.StandardNiFiServiceFacade$$FastClassBySpringCGLIB$$358780e0.invoke() > at > org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204) > at > org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:738) > at > org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157) > at > org.springframework.aop.aspectj.MethodInvocationProceedingJoinPoint.proceed(MethodInvocationProceedingJoinPoint.java:85) > at > org.apache.nifi.web.NiFiServiceFacadeLock.proceedWithWriteLock(NiFiServiceFacadeLock.java:173) > at > org.apache.nifi.web.NiFiServiceFacadeLock.updateLock(NiFiServiceFacadeLock.ja
[jira] [Updated] (NIFI-5033) Cannot update variable referenced in restricted components
[ https://issues.apache.org/jira/browse/NIFI-5033?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Mark Payne updated NIFI-5033: - Resolution: Fixed Fix Version/s: 1.6.0 Status: Resolved (was: Patch Available) > Cannot update variable referenced in restricted components > -- > > Key: NIFI-5033 > URL: https://issues.apache.org/jira/browse/NIFI-5033 > Project: Apache NiFi > Issue Type: Bug > Components: Core Framework >Affects Versions: 1.6.0 >Reporter: Pierre Villard >Assignee: Matt Gilman >Priority: Blocker > Fix For: 1.6.0 > > > When updating a variable at pg level that references a restricted component > it will fail. It seems the code is the same for secured and unsecured > instance and it fails when NiFi is unsecured since the user is unknown. > It seems it has been introduced by NIFI-4885. > {noformat} > 2018-03-29 21:10:30,913 INFO [Variable Registry Update Thread] > o.a.nifi.web.api.ProcessGroupResource In order to update Variable Registry > for Process Group with ID 731bbdde-0162-1000-0f00-db6543c34b50, Stopping > Processors > 2018-03-29 21:10:30,913 INFO [Variable Registry Update Thread] > o.a.nifi.web.api.ProcessGroupResource In order to update Variable Registry > for Process Group with ID 731bbdde-0162-1000-0f00-db6543c34b50, Disabling > Controller Services > 2018-03-29 21:10:30,913 INFO [Variable Registry Update Thread] > o.a.nifi.web.api.ProcessGroupResource In order to update Variable Registry > for Process Group with ID 731bbdde-0162-1000-0f00-db6543c34b50, Applying > updates to Variable Registry > 2018-03-29 21:10:30,915 ERROR [Variable Registry Update Thread] > o.a.nifi.web.api.ProcessGroupResource Failed to update variable registry for > Process Group with ID 731bbdde-0162-1000-0f00-db6543c34b50 > org.apache.nifi.authorization.AccessDeniedException: Unknown user. > at > org.apache.nifi.authorization.resource.RestrictedComponentsAuthorizableFactory$2.checkAuthorization(RestrictedComponentsAuthorizableFactory.java:68) > at > org.apache.nifi.controller.ConfiguredComponent.checkAuthorization(ConfiguredComponent.java:129) > at > org.apache.nifi.authorization.resource.Authorizable.checkAuthorization(Authorizable.java:183) > at > org.apache.nifi.authorization.resource.Authorizable.isAuthorized(Authorizable.java:70) > at > org.apache.nifi.web.api.dto.DtoFactory.createPermissionsDto(DtoFactory.java:1798) > at > org.apache.nifi.web.api.dto.DtoFactory.createPermissionsDto(DtoFactory.java:1785) > at > org.apache.nifi.web.api.dto.DtoFactory.lambda$createAffectedComponentEntities$73(DtoFactory.java:2485) > at > java.util.stream.ReferencePipeline$3$1.accept(ReferencePipeline.java:193) > at > java.util.HashMap$KeySpliterator.forEachRemaining(HashMap.java:1540) > at > java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:481) > at > java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:471) > at > java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:708) > at > java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) > at > java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:499) > at > org.apache.nifi.web.api.dto.DtoFactory.createAffectedComponentEntities(DtoFactory.java:2489) > at > org.apache.nifi.web.api.dto.DtoFactory.createVariableRegistryDto(DtoFactory.java:2507) > at > org.apache.nifi.web.StandardNiFiServiceFacade.lambda$updateVariableRegistry$36(StandardNiFiServiceFacade.java:950) > at > org.apache.nifi.web.StandardNiFiServiceFacade$1.update(StandardNiFiServiceFacade.java:721) > at > org.apache.nifi.web.revision.NaiveRevisionManager.updateRevision(NaiveRevisionManager.java:120) > at > org.apache.nifi.web.StandardNiFiServiceFacade.updateComponent(StandardNiFiServiceFacade.java:712) > at > org.apache.nifi.web.StandardNiFiServiceFacade.updateVariableRegistry(StandardNiFiServiceFacade.java:947) > at > org.apache.nifi.web.StandardNiFiServiceFacade$$FastClassBySpringCGLIB$$358780e0.invoke() > at > org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204) > at > org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:738) > at > org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157) > at > org.springframework.aop.aspectj.MethodInvocationProceedingJoinPoint.proceed(MethodInvocationProceedingJoinPoint.java:85) > at > org.apache.nifi.web.NiFiServiceFacadeLock.proceedWithWriteLock(NiFiServiceFacadeLock.java:173) > at
[jira] [Updated] (NIFI-5033) Cannot update variable referenced in restricted components
[ https://issues.apache.org/jira/browse/NIFI-5033?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Matt Gilman updated NIFI-5033: -- Status: Patch Available (was: In Progress) > Cannot update variable referenced in restricted components > -- > > Key: NIFI-5033 > URL: https://issues.apache.org/jira/browse/NIFI-5033 > Project: Apache NiFi > Issue Type: Bug > Components: Core Framework >Affects Versions: 1.6.0 >Reporter: Pierre Villard >Assignee: Matt Gilman >Priority: Blocker > > When updating a variable at pg level that references a restricted component > it will fail. It seems the code is the same for secured and unsecured > instance and it fails when NiFi is unsecured since the user is unknown. > It seems it has been introduced by NIFI-4885. > {noformat} > 2018-03-29 21:10:30,913 INFO [Variable Registry Update Thread] > o.a.nifi.web.api.ProcessGroupResource In order to update Variable Registry > for Process Group with ID 731bbdde-0162-1000-0f00-db6543c34b50, Stopping > Processors > 2018-03-29 21:10:30,913 INFO [Variable Registry Update Thread] > o.a.nifi.web.api.ProcessGroupResource In order to update Variable Registry > for Process Group with ID 731bbdde-0162-1000-0f00-db6543c34b50, Disabling > Controller Services > 2018-03-29 21:10:30,913 INFO [Variable Registry Update Thread] > o.a.nifi.web.api.ProcessGroupResource In order to update Variable Registry > for Process Group with ID 731bbdde-0162-1000-0f00-db6543c34b50, Applying > updates to Variable Registry > 2018-03-29 21:10:30,915 ERROR [Variable Registry Update Thread] > o.a.nifi.web.api.ProcessGroupResource Failed to update variable registry for > Process Group with ID 731bbdde-0162-1000-0f00-db6543c34b50 > org.apache.nifi.authorization.AccessDeniedException: Unknown user. > at > org.apache.nifi.authorization.resource.RestrictedComponentsAuthorizableFactory$2.checkAuthorization(RestrictedComponentsAuthorizableFactory.java:68) > at > org.apache.nifi.controller.ConfiguredComponent.checkAuthorization(ConfiguredComponent.java:129) > at > org.apache.nifi.authorization.resource.Authorizable.checkAuthorization(Authorizable.java:183) > at > org.apache.nifi.authorization.resource.Authorizable.isAuthorized(Authorizable.java:70) > at > org.apache.nifi.web.api.dto.DtoFactory.createPermissionsDto(DtoFactory.java:1798) > at > org.apache.nifi.web.api.dto.DtoFactory.createPermissionsDto(DtoFactory.java:1785) > at > org.apache.nifi.web.api.dto.DtoFactory.lambda$createAffectedComponentEntities$73(DtoFactory.java:2485) > at > java.util.stream.ReferencePipeline$3$1.accept(ReferencePipeline.java:193) > at > java.util.HashMap$KeySpliterator.forEachRemaining(HashMap.java:1540) > at > java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:481) > at > java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:471) > at > java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:708) > at > java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) > at > java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:499) > at > org.apache.nifi.web.api.dto.DtoFactory.createAffectedComponentEntities(DtoFactory.java:2489) > at > org.apache.nifi.web.api.dto.DtoFactory.createVariableRegistryDto(DtoFactory.java:2507) > at > org.apache.nifi.web.StandardNiFiServiceFacade.lambda$updateVariableRegistry$36(StandardNiFiServiceFacade.java:950) > at > org.apache.nifi.web.StandardNiFiServiceFacade$1.update(StandardNiFiServiceFacade.java:721) > at > org.apache.nifi.web.revision.NaiveRevisionManager.updateRevision(NaiveRevisionManager.java:120) > at > org.apache.nifi.web.StandardNiFiServiceFacade.updateComponent(StandardNiFiServiceFacade.java:712) > at > org.apache.nifi.web.StandardNiFiServiceFacade.updateVariableRegistry(StandardNiFiServiceFacade.java:947) > at > org.apache.nifi.web.StandardNiFiServiceFacade$$FastClassBySpringCGLIB$$358780e0.invoke() > at > org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204) > at > org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:738) > at > org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157) > at > org.springframework.aop.aspectj.MethodInvocationProceedingJoinPoint.proceed(MethodInvocationProceedingJoinPoint.java:85) > at > org.apache.nifi.web.NiFiServiceFacadeLock.proceedWithWriteLock(NiFiServiceFacadeLock.java:173) > at > org.apache.nifi.web.NiFiServiceFacadeLock.updateLock(NiFiServiceFacadeLock.java:6