We really need the U1 plugin to add "unconfined" to the ACL of all newly created accounts.
We recently landed some changes in signond which mitigate this problem, but they only solve the issue for accounts which are created after this fix landed. I guess I could add a session migration script to signond, to add "unconfined" to the ACL of the old U1 accounts, or maybe a hack to signond to treat "unconfined" specially and let it access any resource. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to ubuntu-system-settings- online-accounts in Ubuntu. https://bugs.launchpad.net/bugs/1376445 Title: Addition of signon-apparmor-extension causes token lookup problems Status in the base for Ubuntu mobile products: Confirmed Status in go-onlineaccounts: Incomplete Status in The Savilerow project: Invalid Status in ACL for signond, AppArmor backend: Fix Released Status in Online Accounts setup for Ubuntu Touch: In Progress Status in ubuntu-system-settings-online-accounts package in Ubuntu: In Progress Status in ubuntuone-credentials package in Ubuntu: Confirmed Status in signon-apparmor-extension package in Ubuntu RTM: Triaged Status in ubuntu-system-settings-online-accounts package in Ubuntu RTM: New Status in ubuntuone-credentials package in Ubuntu RTM: Confirmed Bug description: As of image ~264 of ubuntu-touch, the signon-apparmor-extension package is included. As a result, apps like pay-ui cannot find the token any longer, and are not being notified that they are not allowed to access the token. The following error appears in the payui log file: 2014-10-01 19:15:51,550 - DEBUG - ../../../../lib/SignOn/authsessionimpl.cpp 184 errorSlot QDBusError("com.google.code.AccountsSSO.SingleSignOn.Error.PermissionDenied", "Client has insuficient permissions to access the service.Method:getAuthSessionObjectPath") To manage notifications about this bug go to: https://bugs.launchpad.net/canonical-devices-system-image/+bug/1376445/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
