@cwayne18: all plugins based on our OAuth code already add "unconfined" to the ACL. So the problem is probably different, in that case.
As @jdstrand suggested in the ML, your scopes are not running under the "unconfined" profile (even though they are practically unconfined), so we need to figure out why they are not in the ACL, and how to add them. As suggested by Rodney, I'll also hack "unconfined" into the signon- apparmor plugin to let processes carrying that profile to access any account. But please remember that this is a temporary hack which I'd eventually like to remove, so please update the U1 plugin anyway. ** Also affects: signon-apparmor-extension Importance: Undecided Status: New ** Changed in: signon-apparmor-extension Assignee: (unassigned) => Alberto Mardegan (mardy) ** Changed in: signon-apparmor-extension Importance: Undecided => High ** Changed in: signon-apparmor-extension Status: New => In Progress -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to ubuntuone-credentials in Ubuntu. https://bugs.launchpad.net/bugs/1376445 Title: Addition of signon-apparmor-extension causes token lookup problems Status in The Savilerow project: New Status in ACL for signond, AppArmor backend: In Progress Status in “ubuntuone-credentials” package in Ubuntu: Triaged Status in “ubuntuone-credentials” package in Ubuntu RTM: Triaged Bug description: As of image ~264 of ubuntu-touch, the signon-apparmor-extension package is included. As a result, apps like pay-ui cannot find the token any longer, and are not being notified that they are not allowed to access the token. The following error appears in the payui log file: 2014-10-01 19:15:51,550 - DEBUG - ../../../../lib/SignOn/authsessionimpl.cpp 184 errorSlot QDBusError("com.google.code.AccountsSSO.SingleSignOn.Error.PermissionDenied", "Client has insuficient permissions to access the service.Method:getAuthSessionObjectPath") To manage notifications about this bug go to: https://bugs.launchpad.net/savilerow/+bug/1376445/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp