[Openca-Users] Add right and delete right problem

[郑依华]

Hi,all

 

  Add new right,Error:

**************************************************************************

Error 690

Configuration Error. The access control configuration was not initialized..

**************************************************************************
How to initialize the "access control configuration"?

I check the file opencaDirectory/etc/access_control/ca.xml,it has below configuration

**************************************************************************

        <acl_config>
            <acl>yes</acl>
            <list>/usr/local/openca/ca/etc/rbac/acl.xml</list>
            <command_dir>/usr/local/openca/ca/etc/rbac/cmds</command_dir>
            <module_id>0</module_id>
            <map_role>yes</map_role>
            <map_operation>yes</map_operation>
        </acl_config>

**************************************************************************

also I check the opencaDirectory/etc/rbac/acl.xml,it has below configuration for access control configuration

**************************************************************************

      <permission>
        <module>0</module>
        <role>.*</role>
        <operation>access control configure</operation>
        <owner>.*</owner>
      </permission>
**************************************************************************

I check the opencaDirectory/etc/rbac/cmds/*,I found "add_right" "add_role" "delete_right" "delete_module" all belong to "access control configure",they have the content like belows

**************************************************************************

<openca>
    <command_config>
        <command>
            <name>delete_module</name>
            <operation>access control configure</operation>
            <owner_method></owner_method>
            <owner_argument></owner_argument>
        </command>
    </command_config>
</openca>

**************************************************************************

but in my system,I can delete Modules and add roles,but can't "add new right" and "delete right",when delete right has below error,

**************************************************************************

Error 700

General Error The compilation of the command cmdDelete_right failed. Can't call method "get_xpath" on an undefined value at (eval 143) line 20.

**************************************************************************

and add new right has below error

**************************************************************************

Error 690

Configuration Error. The access control configuration was not initialized..

**************************************************************************
but how to do the "initialize" operator for access control configuration?
 
thank you!

--
Yihua Zheng