And that was it, but shouldn’t the error message have listed the node as not having permission instead of saying my user didn’t have permission?
This right here is totally a lie because my user did have the permission it was the node itself that didn’t and that’s not mentioned anywhere in the error. AccessDeniedExceptionMapper identity[sweeks], groups[admin] does not have permission to access the requested resource. Thanks Shawn From: Chris Sampson <[email protected]> Sent: Wednesday, April 28, 2021 9:08 AM To: [email protected] Subject: Re: Insufficient Permission to Clear Queue Do all of the NiFi instances themselves have the same permissions? Both the operating user (i.e. you) and the Node Identities within the cluster need to have permissions for viewing and modifying data (had this issue myself earlier today until I remembered what was needed). --- Chris Sampson IT Consultant [email protected]<mailto:[email protected]> [https://docs.google.com/uc?export=download&id=1oPtzd0P7DqtuzpjiTRAa6h6coFitpqom&revid=0B9aXwC5rMc6lVlZ2OWpUaVlFVmUwTlZBdjQ0KzAxb1dZS2hJPQ]<https://www.naimuri.com/> On Wed, 28 Apr 2021 at 14:06, Shawn Weeks <[email protected]<mailto:[email protected]>> wrote: On a new NiFi 1.13.2 installation I’m receiving an Insufficient Permission error when I try and clear a queue on the root canvas. My user is a member of a local group called “admin” that has been assigned every permission on the root canvas include “view the data”, “modify the data”, etc, as well as everything under the system policies. I can’t figure out what permission I’m missing. I also can’t view the queue either. 2021-04-28 13:01:44,874 INFO [NiFi Web Server-324] o.a.n.w.s.NiFiAuthenticationFilter Authentication success for sweeks 2021-04-28 13:01:44,875 INFO [NiFi Web Server-324] o.a.n.w.a.c.AccessDeniedExceptionMapper identity[sweeks], groups[admin] does not have permission to access the requested resource. Unable to modify the data for Processor with ID 1887dab4-0179-1000-ffff-ffff99018b60. Returning Forbidden response. 2021-04-28 13:01:44,876 INFO [NiFi Web Server-312] o.a.n.w.s.NiFiAuthenticationFilter Attempting request for (<sweeks><node1.example.org<http://node1.example.org>><node2.example.orgl>) POST https://node1.example.org:8443/nifi-api/flowfile-queues/18882d1e-0179-1000-0000-000004f46c76/drop-requests (source ip: 10.208.126.182) 2021-04-28 13:01:44,876 INFO [NiFi Web Server-312] o.a.n.w.s.NiFiAuthenticationFilter Authentication success for sweeks Thanks Shawn
