Hi Tibor,

Thanks for the detailed email with suggestions,
- running:

webaccessadmin -u admin -a -c

corrected the issue.

Gary


Gary Holman
NPL/CENPA, University of Washington

On 05/20/2015 04:20 AM, Tibor Simko wrote:
On Tue, 19 May 2015, Gary Holman wrote:
Thanks for the reply.  Toggling active/inactive status via the web is
indeed updating database.  user.note is toggling between 0,1 when I
set via web or direct using dbexec.
Good then.

However, it appears to be a different issue (error displayed is wrong)

1. If user has no role (default for most users) or is assigned role
'submitter' then user gets error

"Authorization failure Account 'xxxxx' is not yet activated. Try to
login with another account.
If you think this is not correct, please contact..."

2. If user has Librarian role, then user doesn't get above error.
Are you trying to set up submission access rights, by any chance?  Which
URL gives the error Account xxx is not yet activated?  Knowing the exact
URL would help in debugging the problem faster.

E.g. one thing to check could be to logout and login again as the given
user.  This refreshes authorisation cache.

E.g. another thing to check may be the general role-based authorisation
settings.  Perhaps some roles/actions haven't not been added during
migration.  E.g. you could try:

   $ webaccessadmin -u admin -a -c

which would add default authorisations for you.  Similarly `-r -D` would
reset the rights and set them to be like on an Invenio demo site.  You
can check `webaccessadmin --help` to know more.  However, you may want
to experiment with these commands on a cloned sandbox, not on the live
production instance.

If you would rather like to inspect the live production system, you can
check the content of `acc*` tables in your production instance, and
compare them to a vanilla Invenio v1.2 demo instance for example.  It
may show some missing actions/arguments perhaps.

Best regards
--
Tibor Simko

Reply via email to