Manager access required - SecurityException

maxw3ll7 years ago

After upgrading from 3.15 (don't remember if I saw it on 3.16 already) to master (d5db101a) I see the following error window pop up when logging in as normal user:

Invalid parameters or constraints violation
Manager access required - SecurityException (PermissionsManager:175 < *:305 < CommandResource:52 < ...)

Also my admin user seems to have limited access now. I saw that administrator column was renamed to admin so checked / changed that. Although the admin bit is set in the users table, I do not see any admin functionality when logging in as admin

Anton Tananaev7 years ago

I have found one issue with migration script, but everything else works fine. Make sure you use latest code for both web app and back-end.

maxw3ll7 years ago

didn't upgrade the web app code so far. that is most likely the problem.

maxw3ll7 years ago

Upgrading the web app code fixed the issue with the administrator.

But still keep getting the same error message when logging in as a normal user.
Also the same for a new user I just created using the web interface.

maxw3ll7 years ago

Still getting the SecurityException. Any idea?

Anton Tananaev7 years ago

I suspect that you haven't upgraded to master properly. Admin column in the database and API has been renamed.

maxw3ll7 years ago

Thanks for checking Anton. I found the issue:
I used a Apache rewrite rule to make Traccar >3.15 commands API backwards compatible for older instances of our app:

RewriteEngine On
RewriteRule "^/api/commands" "/api/commands/send" [PT]

After removing this the security exception was gone.