TranslationBranchApprover: permission error on TranslationMessage

Bug #487447 reported by Jeroen T. Vermeulen
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
High
Jeroen T. Vermeulen

Bug Description

We've had some errors in the translations branch approver:

ProgrammingError: permission denied for relation translationmessage

OOPS-1421RSBR1, OOPS-1421RSBR2, OOPS-1421RSBR3

Related branches

summary: - Job system error: permission denied for relation TranslationMessage
+ TranslationBranchApprover: permission error on TranslationMessage
description: updated
Revision history for this message
Jeroen T. Vermeulen (jtv) wrote :

It goes wrong when the translations branch scanner needs to create a new POFile. I'm probably missing something, but ISTM this would also require INSERT rights on POFile, and possibly more.

Revision history for this message
Jeroen T. Vermeulen (jtv) wrote :

Going for zero oopses.

Changed in rosetta:
assignee: nobody → Jeroen T. Vermeulen (jtv)
importance: Undecided → High
milestone: none → 3.1.11
status: New → In Progress
Revision history for this message
Jeroen T. Vermeulen (jtv) wrote :

In addition, we're now also hitting these permissions errors in the regular approver: https://pastebin.canonical.com/24998/

Revision history for this message
Jeroen T. Vermeulen (jtv) wrote :

The regular approver failure is bug 487590.

Revision history for this message
Jeroen T. Vermeulen (jtv) wrote :

We're going to cowboy a GRANT onto production for now. That does mean that this fix *must* roll out or we'll just regress.

Revision history for this message
Ursula Junque (ursinha) wrote : A commit mentioned this bug
Changed in rosetta:
status: In Progress → Fix Committed
tags: added: qa-needstesting
tags: added: qa-ok
removed: qa-needstesting
Changed in rosetta:
status: Fix Committed → Fix Released
Revision history for this message
Aaron Bentley (abentley) wrote :

This is still happening: OOPS-1450RSBR3

Changed in rosetta:
status: Fix Released → Triaged
Revision history for this message
Jeroen T. Vermeulen (jtv) wrote :

Argh. Looks like this line is missing from the translations_approval group in security.cfg:

public.translationmessage = SELECT

The fact that this was missing was probably hidden to an extent by the fact that the import queue gardener (one of the two members of this group) also gets full rights on this table directly.

Changed in rosetta:
milestone: 3.1.11 → 3.1.13
status: Triaged → In Progress
Revision history for this message
Ursula Junque (ursinha) wrote :
Changed in rosetta:
status: In Progress → Fix Committed
Changed in rosetta:
status: Fix Committed → Fix Released
Curtis Hovey (sinzui)
Changed in rosetta:
milestone: 3.1.13 → 10.01
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.