Manager access required - SecurityException

maxw3ll 8 years ago

After upgrading from 3.15 (don't remember if I saw it on 3.16 already) to master (d5db101a) I see the following error window pop up when logging in as normal user:

Invalid parameters or constraints violation
Manager access required - SecurityException (PermissionsManager:175 < *:305 < CommandResource:52 < ...)

Also my admin user seems to have limited access now. I saw that administrator column was renamed to admin so checked / changed that. Although the admin bit is set in the users table, I do not see any admin functionality when logging in as admin

Anton Tananaev 8 years ago

I have found one issue with migration script, but everything else works fine. Make sure you use latest code for both web app and back-end.

maxw3ll 8 years ago

didn't upgrade the web app code so far. that is most likely the problem.

maxw3ll 8 years ago

Upgrading the web app code fixed the issue with the administrator.

But still keep getting the same error message when logging in as a normal user.
Also the same for a new user I just created using the web interface.

maxw3ll 8 years ago

Still getting the SecurityException. Any idea?

Anton Tananaev 8 years ago

I suspect that you haven't upgraded to master properly. Admin column in the database and API has been renamed.

maxw3ll 8 years ago

Thanks for checking Anton. I found the issue:
I used a Apache rewrite rule to make Traccar >3.15 commands API backwards compatible for older instances of our app:

RewriteEngine On
RewriteRule "^/api/commands" "/api/commands/send" [PT]

After removing this the security exception was gone.