Custom Query (2152 matches)
Results (1555 - 1557 of 2152)
| Ticket | Resolution | Summary | Owner | Reporter |
|---|---|---|---|---|
| #435 | wontfix | Switching between ckan instances causes orphaned postgres processes | thejimmyg | dread |
| Description |
Analysis using pg_top reveals orphaed processes: https://trac.dataco.coi.gov.uk/projects/datagov/ticket/460#comment:6 This followed switching ckan instances on the dgu machine. Do these hang around forever clogging up a db server? Can switching between instances be smoothed to avoid this? |
|||
| #727 | fixed | Sysadmin can approve a publisher | pudo | pudo |
| #1044 | fixed | Sysadmins locked-out of API without Right: (visitor, SITE_READ, System) | pudo | dread |
| Description |
The problem is that in ckan/controllers/rest.py the BaseApiController? has this method: def __before__(self, action, **env):
BaseController.__before__(self, action, **env)
if not self.authorizer.am_authorized(c, model.Action.SITE_READ, model.System):
abort(401, _('Not authorized to see this page'))
which works on the basis of your c.user, rather than your apikey. All API users are treated as visitors (since API users don't get a login cookie) and even a sysadmin's apikey is blocked unless there is a right for a Visitor to SITE_READ. Also needs tests. (Also, why is this restriction only on the API, package search, group index and tags and agroup index? I'm guessing SITE_READ is only for places where other authz don't apply, but maybe it should not be called 'SITE_READ' but 'OTHER_READ' or something?) |
|||
