[ckan-dev] problem with members / organizations (2.4.0)

Koebrick, Andrew (MNIT) andrew.koebrick at state.mn.us
Tue Dec 8 20:56:31 UTC 2015


We are bumping into problems which I hope are just configuration issues rather than bugs.  We have a number of organizations, each of which have users.  These users are not able to update resources, and their session gets terminated.  Here is a list of users in an organization.  I am attempting to do the changes with the "Andrew- non sysadmin" test account:

[cid:image004.jpg at 01D131C8.9F63C0B0]

The organization has a few test resources:

[cid:image005.jpg at 01D131C8.9F63C0B0]

If a non sysadmin user goes in and attempts to edit the description(or any other metadata for a datasets, they get booted out. Here is the attempt to change the resource:

[cid:image006.jpg at 01D131C8.9F63C0B0]

And here is what happens which "Update Resource" is clicked:

[cid:image007.jpg at 01D131C8.9F63C0B0]

In case it is a problem with our .ini file, here are our settings:


## Authorization Settings

ckan.auth.anon_create_dataset = false
ckan.auth.create_unowned_dataset = false
ckan.auth.create_dataset_if_not_in_organization = false
ckan.auth.user_create_groups = false
ckan.auth.user_create_organizations = false
ckan.auth.user_delete_groups = true
ckan.auth.user_delete_organizations = true
ckan.auth.create_user_via_api = false
ckan.auth.create_user_via_web = true
ckan.auth.roles_that_cascade_to_sub_groups = admin
ckan.site_url = https://devel.ng911.gisdata.mn.gov


Shouldn't all Admin users of an organization have rights to edit all resources owned by the organization?  Are there any other diagnostics (paster commands for example) that might shed more light on what is going wrong?

Many thinks for any help you can supply.




Andrew Koebrick  |  MINNESOTA GEOSPATIAL INFORMATION OFFICE
Web Coordinator / Systems administrator / Librarian
MN.IT Services @ MNGEO
651-201-2465 (w)  |   651-296-6398 (f) |  andrew.koebrick at state.mn.us<mailto:andrew.koebrick at state.mn.us>
658 Cedar St., Room 300, St. Paul, MN 55155, www.mngeo.state.mn.us<http://www.mngeo.state.mn.us/>

[cid:image002.jpg at 01CE61F8.52552AE0]<http://www.mn.gov/oet>

Information Technology for Minnesota Government   |   mn.gov/mnit<http://www.mn.gov/oet>



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.okfn.org/pipermail/ckan-dev/attachments/20151208/dd84ffb9/attachment-0002.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 1624 bytes
Desc: image003.jpg
URL: <http://lists.okfn.org/pipermail/ckan-dev/attachments/20151208/dd84ffb9/attachment-0010.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.jpg
Type: image/jpeg
Size: 36038 bytes
Desc: image004.jpg
URL: <http://lists.okfn.org/pipermail/ckan-dev/attachments/20151208/dd84ffb9/attachment-0011.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.jpg
Type: image/jpeg
Size: 20679 bytes
Desc: image005.jpg
URL: <http://lists.okfn.org/pipermail/ckan-dev/attachments/20151208/dd84ffb9/attachment-0012.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image006.jpg
Type: image/jpeg
Size: 24120 bytes
Desc: image006.jpg
URL: <http://lists.okfn.org/pipermail/ckan-dev/attachments/20151208/dd84ffb9/attachment-0013.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image007.jpg
Type: image/jpeg
Size: 23966 bytes
Desc: image007.jpg
URL: <http://lists.okfn.org/pipermail/ckan-dev/attachments/20151208/dd84ffb9/attachment-0014.jpg>


More information about the ckan-dev mailing list