[Using Sakai] content.* permissions "went away"?

[will trillich]

Hi Dave --

Yes, they exist in sakai_realm_function, and sakai_realm_rl_fn has lots of
references too:

select * from sakai_realm_rl_fn where function_key in (select function_key
from sakai_realm_function where function_name like 'content.%');
[snip]
16817 rows in set (0.27 sec)

And

select distinct realm_key from sakai_realm_rl_fn where function_key in
(select function_key from sakai_realm_function where function_name like
'content.%')
brings up 1399 records.

So I started thinking maybe there are some sites that don't match matching
realms... but, there are NO sakai_site records that don't have matching
sakai_realm records:

mysql> select site_id,title from sakai_site where not site_id in (
    -> select substr(realm_id,7,999) from sakai_realm where realm_key in
    -> (select distinct realm_key from sakai_realm_rl_fn where function_key
in
    -> (select function_key from sakai_realm_function where function_name
like 'content.%')
    -> ) and realm_id like '/site/%'
    -> )
    -> ;
+-----------+--------------------------+
| site_id   | title                    |
+-----------+--------------------------+
| !admin    | Administration Workspace |
| !error    | Site Unavailable         |
| !gateway  | Gateway                  |
| !urlError | Invalid URL              |
| !user     | My Workspace             |
| !worksite | worksite                 |
+-----------+--------------------------+
6 rows in set (16.17 sec)

We just updated to 2.6.x r82225 over the weekend, so there must be something
glitchy that's happened inside the data (it used to be okay, but now we
can't specify permissions in resources). But how can this happen, and how do
we fix it?



On Fri, Sep 10, 2010 at 12:30 PM, Dave Ross <dave.ross at gmail.com> wrote:

> Check db table sakai_realm_function
>
> Are they in there?
>
> If so, then check sakai_realm_rl_fn to see if those function keys from
> sakai_realm_function are present...
>
> Truly odd though...
>
> On Fri, Sep 10, 2010 at 12:05 PM, will trillich <will at serensoft.com>wrote:
>
>> This is an interesting puzzle for Sakai 2.6.x: what would make the *
>> content.** permissions *disappear*?
>>
>>
>> When we visit any resources tool and try checking permissions there, we
>> see a column labelled "Role" with all the roles in it... but there are no
>> columns with checkboxes? There should be columns as below, but they're
>> missing. (The below cut-and-paste is from a different server.)
>>
>>  new read revise.any revise.own delete.any delete.own all.groups hidden
>>
>> Similarly, visiting !admin > realms > [site-id] > [any-role] shows that
>> there are no content.* permissions available there either. They should look
>> like this:
>>
>>
>>  content.all.groups
>>
>>  content.delete.any
>>
>>  content.delete.own
>>
>>  content.hidden
>>
>>  content.new
>>
>>  content.read
>>
>>  content.revise.any
>>
>>  content.revise.own
>>
>> But in this instance of 2.6.x, they're not there. How can that happen, and
>> how can we fix it?
>>
>>
>> --
>> will trillich -- http://faq.serensoft.com/
>> "The truth is that many people set rules to keep
>> from making decisions." -- Mike Krzyzewski
>>
>> _______________________________________________
>> sakai-user mailing list
>> sakai-user at collab.sakaiproject.org
>> http://collab.sakaiproject.org/mailman/listinfo/sakai-user
>>
>> TO UNSUBSCRIBE: send email to
>> sakai-user-unsubscribe at collab.sakaiproject.org with a subject of
>> "unsubscribe"
>>
>
>


-- 
-- 
will trillich -- http://faq.serensoft.com/
"The truth is that many people set rules to keep
from making decisions." -- Mike Krzyzewski
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-user/attachments/20100914/a0b1e4ac/attachment-0001.html