Page MenuHomePhabricator

EXCEPTION: PhabricatorPolicyException [Access Denied: Restricted Application] (Can View)
Closed, ResolvedPublic

Asked by kyoshiro on Jan 18 2017, 1:41 PM.

Details

Hello,

Today, I noticed that I'm not able to access any page after logging out. Other users are also affected. When I'm using old browser where I'm still logged-in everything is working fine.

Error:
PhabricatorPolicyException
[Access Denied: Restricted Application] (Can View) You do not have permission to view this object. // Logged in users can take this action.

Restarting Apache and Phabricator daemons doesn't help. I've even set up nginx to be sure if it's not related to Apache but on nginx I'm getting the same error message.

Versions:
phabricator 2d4eb460abb2ba34a944962c7cfea5741e099ff9 (Wed, Jan 18)
arcanist ade25facfdf22aed1c1e20fed3e58e60c0be3c2b (Thu, Jan 5)
phutil 9d85dfab0f532d50c2343719e92d574a4827341b (Fri, Jan 13)
Apache: Server version: Apache/2.4.7 (Ubuntu) Server built: Jul 15 2016 15:34:04
nginx version: nginx/1.4.6 (Ubuntu)
Linux stisrv03 3.13.0-93-generic #140-Ubuntu SMP Mon Jul 18 21:21:05 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux

apache_vhost.conf
<VirtualHost *:80>
  # Change this to the domain which points to your host.
  ServerName *
  ServerAdmin  *
  ServerAlias  *

  # Change this to the path where you put 'phabricator' when you checked it
  # out from GitHub when following the Installation Guide.
  #
  # Make sure you include "/webroot" at the end!
  DocumentRoot /opt/phabricator/webroot/

  RewriteEngine On

  RewriteRule ^/rsrc/(.*)     -                       [L,QSA]
  RewriteRule ^/favicon.ico   -                       [L,QSA]
  RewriteRule ^(.*)$          /index.php?__path__=$1  [B,L,QSA]

  <Directory /opt/phabricator_new/webroot>
    # Apache Older Than 2.4
    # Options +ExecCGI
    # Order allow,deny
    # Allow from all

    # Apache 2.4 and Newer
    Require all granted
  </Directory>

  ErrorLog ${APACHE_LOG_DIR}/error-git.log
  # Possible values include: debug, info, notice, warn, error, crit,
  # alert, emerg.
  LogLevel debug
  CustomLog ${APACHE_LOG_DIR}/phabricator.log combined

</VirtualHost>
apache_error.log
[Wed Jan 18 13:02:23.291152 2017] [authz_core:debug] [pid 4640] mod_authz_core.c(828): [client 172.16.19.191:60678] AH01628: authorization result: granted (no directives)
[Wed Jan 18 13:02:23.400990 2017] [:error] [pid 4640] [client 172.16.19.191:60678] [2017-01-18 13:02:23] EXCEPTION: (PhabricatorPolicyException) [Access Denied: Restricted Application] (Can View) You do not have permission to view this object. // Logged in users can take this action. at [<phabricator>/src/applications/policy/filter/PhabricatorPolicyFilter.php:610]
[Wed Jan 18 13:02:23.401770 2017] [:error] [pid 4640] [client 172.16.19.191:60678] arcanist(head=master, ref.master=ade25facfdf2), phabricator(head=master, ref.master=2d4eb460abb2), phutil(head=master, ref.master=9d85dfab0f53)
[Wed Jan 18 13:02:23.401793 2017] [:error] [pid 4640] [client 172.16.19.191:60678]   #0 <#2> PhabricatorPolicyFilter::rejectObject(PhabricatorFavoritesApplication, string, string) called at [<phabricator>/src/applications/policy/filter/PhabricatorPolicyFilter.php:502]
[Wed Jan 18 13:02:23.401800 2017] [:error] [pid 4640] [client 172.16.19.191:60678]   #1 <#2> PhabricatorPolicyFilter::checkCapability(PhabricatorFavoritesApplication, string) called at [<phabricator>/src/applications/policy/filter/PhabricatorPolicyFilter.php:220]
[Wed Jan 18 13:02:23.401805 2017] [:error] [pid 4640] [client 172.16.19.191:60678]   #2 <#2> PhabricatorPolicyFilter::apply(array) called at [<phabricator>/src/infrastructure/query/policy/PhabricatorPolicyAwareQuery.php:258]
[Wed Jan 18 13:02:23.401810 2017] [:error] [pid 4640] [client 172.16.19.191:60678]   #3 <#2> PhabricatorPolicyAwareQuery::execute() called at [<phabricator>/src/infrastructure/query/policy/PhabricatorPolicyAwareQuery.php:168]
[Wed Jan 18 13:02:23.401814 2017] [:error] [pid 4640] [client 172.16.19.191:60678]   #4 <#2> PhabricatorPolicyAwareQuery::executeOne() called at [<phabricator>/src/applications/favorites/application/PhabricatorFavoritesApplication.php:56]
[Wed Jan 18 13:02:23.401818 2017] [:error] [pid 4640] [client 172.16.19.191:60678]   #5 <#2> PhabricatorFavoritesApplication::renderFavoritesDropdown(PhabricatorUser) called at [<phabricator>/src/applications/favorites/application/PhabricatorFavoritesApplication.php:46]
[Wed Jan 18 13:02:23.401823 2017] [:error] [pid 4640] [client 172.16.19.191:60678]   #6 <#2> PhabricatorFavoritesApplication::buildMainMenuExtraNodes(PhabricatorUser, PhabricatorAuthStartController) called at [<phabricator>/src/view/page/menu/PhabricatorMainMenuView.php:93]
[Wed Jan 18 13:02:23.401828 2017] [:error] [pid 4640] [client 172.16.19.191:60678]   #7 <#2> PhabricatorMainMenuView::render() called at [<phabricator>/src/view/page/PhabricatorStandardPageView.php:381]
[Wed Jan 18 13:02:23.401858 2017] [:error] [pid 4640] [client 172.16.19.191:60678]   #8 <#2> PhabricatorStandardPageView::willRenderPage() called at [<phabricator>/src/view/page/AphrontPageView.php:46]
[Wed Jan 18 13:02:23.401867 2017] [:error] [pid 4640] [client 172.16.19.191:60678]   #9 <#2> AphrontPageView::render() called at [<phabricator>/src/view/page/PhabricatorStandardPageView.php:884]
[Wed Jan 18 13:02:23.401875 2017] [:error] [pid 4640] [client 172.16.19.191:60678]   #10 <#2> PhabricatorStandardPageView::produceAphrontResponse() called at [<phabricator>/src/aphront/configuration/AphrontApplicationConfiguration.php:649]
[Wed Jan 18 13:02:23.401882 2017] [:error] [pid 4640] [client 172.16.19.191:60678]   #11 <#2> AphrontApplicationConfiguration::produceResponse(AphrontRequest, PhabricatorStandardPageView) called at [<phabricator>/src/aphront/configuration/AphrontApplicationConfiguration.php:278]
[Wed Jan 18 13:02:23.401890 2017] [:error] [pid 4640] [client 172.16.19.191:60678]   #12 <#2> AphrontApplicationConfiguration::processRequest(AphrontRequest, PhutilDeferredLog, AphrontPHPHTTPSink, MultimeterControl) called at [<phabricator>/src/aphront/configuration/AphrontApplicationConfiguration.php:181]
[Wed Jan 18 13:02:23.401898 2017] [:error] [pid 4640] [client 172.16.19.191:60678]   #13 <#2> AphrontApplicationConfiguration::runHTTPRequest(AphrontPHPHTTPSink) called at [<phabricator>/webroot/index.php:17]
[Wed Jan 18 13:02:23.401904 2017] [:error] [pid 4640] [client 172.16.19.191:60678]   #14 phlog(PhabricatorPolicyException) called at [<phabricator>/src/aphront/response/AphrontUnhandledExceptionResponse.php:20]
[Wed Jan 18 13:02:23.401911 2017] [:error] [pid 4640] [client 172.16.19.191:60678]   #15 AphrontUnhandledExceptionResponse::setException(PhabricatorPolicyException) called at [<phabricator>/webroot/index.php:21]
nginx_vhost.conf
server {
  server_name *;
  root        /opt/phabricator/webroot;

  location / {
    index index.php;
    rewrite ^/(.*)$ /index.php?__path__=/$1 last;
  }

  location /index.php {
    fastcgi_pass unix:/var/run/php5-fpm.sock;

    #fastcgi_pass   localhost:9000;
    fastcgi_index   index.php;

    #required if PHP was built with --enable-force-cgi-redirect
    fastcgi_param  REDIRECT_STATUS    200;

    #variables to make the $_SERVER populate in PHP
    fastcgi_param  SCRIPT_FILENAME    $document_root$fastcgi_script_name;
    fastcgi_param  QUERY_STRING       $query_string;
    fastcgi_param  REQUEST_METHOD     $request_method;
    fastcgi_param  CONTENT_TYPE       $content_type;
    fastcgi_param  CONTENT_LENGTH     $content_length;
    fastcgi_param SERVER_ADDR $server_addr;
    fastcgi_param  SCRIPT_NAME        $fastcgi_script_name;
    fastcgi_param  GATEWAY_INTERFACE  CGI/1.1;
    fastcgi_param  SERVER_SOFTWARE    nginx/$nginx_version;
    fastcgi_param  REMOTE_ADDR        $remote_addr;
  }
}
nginx_error.log
PHP message:   #0 <#2> PhabricatorPolicyFilter::rejectObject(PhabricatorFavoritesApplication, string, string) called at [<phabricator>/src/applications/policy/filter/PhabricatorPolicyFilter.php:502]
PHP message:   #1 <#2> PhabricatorPolicyFilter::checkCapability(PhabricatorFavoritesApplication, string) called at [<phabricator>/src/applications/policy/filter/PhabricatorPolicyFilter.php:220]
PHP message:   #2 <#2> PhabricatorPolicyFilter::apply(array) called at [<phabricator>/src/infrastructure/query/policy/PhabricatorPolicyAwareQuery.php:258]
PHP message:   #3 <#2> PhabricatorPolicyAwareQuery::execute() called at [<phabricator>/src/infrastructure/query/policy/PhabricatorPolicyAwareQuery.php:168]
PHP message:   #4 <#2> PhabricatorPolicyAwareQuery::executeOne() called at [<phabricator>/src/applications/favorites/application/PhabricatorFavoritesApplication.php:56]
PHP message:   #5 <#2> PhabricatorFavoritesApplication::renderFavoritesDropdown(PhabricatorUser) called at [<phabricator>/src/applications/favorites/application/PhabricatorFavoritesApplication.php:46]
PHP message:   #6 <#2> PhabricatorFavoritesApplication::buildMainMenuExtraNodes(PhabricatorUser, PhabricatorAuthStartController) called at [<phabricator>/src/view/page/menu/PhabricatorMainMenuView.php:93]
PHP message:   #7 <#2> PhabricatorMainMenuView::render() called at [<phabricator>/src/view/page/PhabricatorStandardPageView.php:381]
PHP message:   #8 <#2> PhabricatorStandardPageView::willRenderPage() called at [<phabricator>/src/view/page/AphrontP

Every midnight I'm updating phabricator using this script (in crontab ofc):

phabricator_update_sript.sh
#!/bin/sh

set -e
set -x

# This is an example script for updating Phabricator, similar to the one used to
# update <https://secure.phabricator.com/>. It might not work perfectly on your
# system, but hopefully it should be easy to adapt. This script is not intended
# to work without modifications.

# NOTE: This script assumes you are running it from a directory which contains
# arcanist/, libphutil/, and phabricator/.

# ROOT=`pwd` # You can hard-code the path here instead.

### UPDATE WORKING COPIES ######################################################

cd /opt/libphutil
git pull

cd /opt/arcanist
git pull

cd /opt/phabricator
git pull


### CYCLE WEB SERVER AND DAEMONS ###############################################

# Stop daemons.
/opt/phabricator/bin/phd stop

# Stop the webserver (apache, nginx, lighttpd, etc). This command will differ
# depending on which system and webserver you are running: replace it with an
# appropriate command for your system.
# NOTE: If you're running php-fpm, you should stop it here too.

sudo /etc/init.d/apache2 stop


# Upgrade the database schema. You may want to add the "--force" flag to allow
# this script to run noninteractively.
/opt/phabricator/bin/storage upgrade --force

# Restart the webserver. As above, this depends on your system and webserver.
# NOTE: If you're running php-fpm, restart it here too.
sudo /etc/init.d/apache2 start

# Restart daemons.
/opt/phabricator/bin/phd start

I would appreciate any help.

Answers

john.snow
Updated 1,412 Days Ago

I have the same problem. I've created a bug report here: T12122: Cannot login to Phabricator

chad
Updated 1,411 Days Ago

This is a bug that has been resolved in the upstream, please update to HEAD.

New Answer

Answer

This question has been marked as closed, but you can still leave a new answer.