Hello,
Today, I noticed that I'm not able to access any page after logging out. Other users are also affected. When I'm using old browser where I'm still logged-in everything is working fine.
Error:
PhabricatorPolicyException
[Access Denied: Restricted Application] (Can View) You do not have permission to view this object. // Logged in users can take this action.
Restarting Apache and Phabricator daemons doesn't help. I've even set up nginx to be sure if it's not related to Apache but on nginx I'm getting the same error message.
Versions:
phabricator 2d4eb460abb2ba34a944962c7cfea5741e099ff9 (Wed, Jan 18)
arcanist ade25facfdf22aed1c1e20fed3e58e60c0be3c2b (Thu, Jan 5)
phutil 9d85dfab0f532d50c2343719e92d574a4827341b (Fri, Jan 13)
Apache: Server version: Apache/2.4.7 (Ubuntu) Server built: Jul 15 2016 15:34:04
nginx version: nginx/1.4.6 (Ubuntu)
Linux stisrv03 3.13.0-93-generic #140-Ubuntu SMP Mon Jul 18 21:21:05 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
```name=apache_vhost.conf, lines=10
<VirtualHost *:80>
# Change this to the domain which points to your host.
ServerName *
ServerAdmin *
ServerAlias *
# Change this to the path where you put 'phabricator' when you checked it
# out from GitHub when following the Installation Guide.
#
# Make sure you include "/webroot" at the end!
DocumentRoot /opt/phabricator/webroot/
RewriteEngine On
RewriteRule ^/rsrc/(.*) - [L,QSA]
RewriteRule ^/favicon.ico - [L,QSA]
RewriteRule ^(.*)$ /index.php?__path__=$1 [B,L,QSA]
<Directory /opt/phabricator_new/webroot>
# Apache Older Than 2.4
# Options +ExecCGI
# Order allow,deny
# Allow from all
# Apache 2.4 and Newer
Require all granted
</Directory>
ErrorLog ${APACHE_LOG_DIR}/error-git.log
# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel debug
CustomLog ${APACHE_LOG_DIR}/phabricator.log combined
</VirtualHost>
```
``` name=apache_error.log, lines=10
[Wed Jan 18 13:02:23.291152 2017] [authz_core:debug] [pid 4640] mod_authz_core.c(828): [client 172.16.19.191:60678] AH01628: authorization result: granted (no directives)
[Wed Jan 18 13:02:23.400990 2017] [:error] [pid 4640] [client 172.16.19.191:60678] [2017-01-18 13:02:23] EXCEPTION: (PhabricatorPolicyException) [Access Denied: Restricted Application] (Can View) You do not have permission to view this object. // Logged in users can take this action. at [<phabricator>/src/applications/policy/filter/PhabricatorPolicyFilter.php:610]
[Wed Jan 18 13:02:23.401770 2017] [:error] [pid 4640] [client 172.16.19.191:60678] arcanist(head=master, ref.master=ade25facfdf2), phabricator(head=master, ref.master=2d4eb460abb2), phutil(head=master, ref.master=9d85dfab0f53)
[Wed Jan 18 13:02:23.401793 2017] [:error] [pid 4640] [client 172.16.19.191:60678] #0 <#2> PhabricatorPolicyFilter::rejectObject(PhabricatorFavoritesApplication, string, string) called at [<phabricator>/src/applications/policy/filter/PhabricatorPolicyFilter.php:502]
[Wed Jan 18 13:02:23.401800 2017] [:error] [pid 4640] [client 172.16.19.191:60678] #1 <#2> PhabricatorPolicyFilter::checkCapability(PhabricatorFavoritesApplication, string) called at [<phabricator>/src/applications/policy/filter/PhabricatorPolicyFilter.php:220]
[Wed Jan 18 13:02:23.401805 2017] [:error] [pid 4640] [client 172.16.19.191:60678] #2 <#2> PhabricatorPolicyFilter::apply(array) called at [<phabricator>/src/infrastructure/query/policy/PhabricatorPolicyAwareQuery.php:258]
[Wed Jan 18 13:02:23.401810 2017] [:error] [pid 4640] [client 172.16.19.191:60678] #3 <#2> PhabricatorPolicyAwareQuery::execute() called at [<phabricator>/src/infrastructure/query/policy/PhabricatorPolicyAwareQuery.php:168]
[Wed Jan 18 13:02:23.401814 2017] [:error] [pid 4640] [client 172.16.19.191:60678] #4 <#2> PhabricatorPolicyAwareQuery::executeOne() called at [<phabricator>/src/applications/favorites/application/PhabricatorFavoritesApplication.php:56]
[Wed Jan 18 13:02:23.401818 2017] [:error] [pid 4640] [client 172.16.19.191:60678] #5 <#2> PhabricatorFavoritesApplication::renderFavoritesDropdown(PhabricatorUser) called at [<phabricator>/src/applications/favorites/application/PhabricatorFavoritesApplication.php:46]
[Wed Jan 18 13:02:23.401823 2017] [:error] [pid 4640] [client 172.16.19.191:60678] #6 <#2> PhabricatorFavoritesApplication::buildMainMenuExtraNodes(PhabricatorUser, PhabricatorAuthStartController) called at [<phabricator>/src/view/page/menu/PhabricatorMainMenuView.php:93]
[Wed Jan 18 13:02:23.401828 2017] [:error] [pid 4640] [client 172.16.19.191:60678] #7 <#2> PhabricatorMainMenuView::render() called at [<phabricator>/src/view/page/PhabricatorStandardPageView.php:381]
[Wed Jan 18 13:02:23.401858 2017] [:error] [pid 4640] [client 172.16.19.191:60678] #8 <#2> PhabricatorStandardPageView::willRenderPage() called at [<phabricator>/src/view/page/AphrontPageView.php:46]
[Wed Jan 18 13:02:23.401867 2017] [:error] [pid 4640] [client 172.16.19.191:60678] #9 <#2> AphrontPageView::render() called at [<phabricator>/src/view/page/PhabricatorStandardPageView.php:884]
[Wed Jan 18 13:02:23.401875 2017] [:error] [pid 4640] [client 172.16.19.191:60678] #10 <#2> PhabricatorStandardPageView::produceAphrontResponse() called at [<phabricator>/src/aphront/configuration/AphrontApplicationConfiguration.php:649]
[Wed Jan 18 13:02:23.401882 2017] [:error] [pid 4640] [client 172.16.19.191:60678] #11 <#2> AphrontApplicationConfiguration::produceResponse(AphrontRequest, PhabricatorStandardPageView) called at [<phabricator>/src/aphront/configuration/AphrontApplicationConfiguration.php:278]
[Wed Jan 18 13:02:23.401890 2017] [:error] [pid 4640] [client 172.16.19.191:60678] #12 <#2> AphrontApplicationConfiguration::processRequest(AphrontRequest, PhutilDeferredLog, AphrontPHPHTTPSink, MultimeterControl) called at [<phabricator>/src/aphront/configuration/AphrontApplicationConfiguration.php:181]
[Wed Jan 18 13:02:23.401898 2017] [:error] [pid 4640] [client 172.16.19.191:60678] #13 <#2> AphrontApplicationConfiguration::runHTTPRequest(AphrontPHPHTTPSink) called at [<phabricator>/webroot/index.php:17]
[Wed Jan 18 13:02:23.401904 2017] [:error] [pid 4640] [client 172.16.19.191:60678] #14 phlog(PhabricatorPolicyException) called at [<phabricator>/src/aphront/response/AphrontUnhandledExceptionResponse.php:20]
[Wed Jan 18 13:02:23.401911 2017] [:error] [pid 4640] [client 172.16.19.191:60678] #15 AphrontUnhandledExceptionResponse::setException(PhabricatorPolicyException) called at [<phabricator>/webroot/index.php:21]
```
``` name=nginx_vhost.conf, lines=10
server {
server_name *;
root /opt/phabricator/webroot;
location / {
index index.php;
rewrite ^/(.*)$ /index.php?__path__=/$1 last;
}
location /index.php {
fastcgi_pass unix:/var/run/php5-fpm.sock;
#fastcgi_pass localhost:9000;
fastcgi_index index.php;
#required if PHP was built with --enable-force-cgi-redirect
fastcgi_param REDIRECT_STATUS 200;
#variables to make the $_SERVER populate in PHP
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param QUERY_STRING $query_string;
fastcgi_param REQUEST_METHOD $request_method;
fastcgi_param CONTENT_TYPE $content_type;
fastcgi_param CONTENT_LENGTH $content_length;
fastcgi_param SERVER_ADDR $server_addr;
fastcgi_param SCRIPT_NAME $fastcgi_script_name;
fastcgi_param GATEWAY_INTERFACE CGI/1.1;
fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;
fastcgi_param REMOTE_ADDR $remote_addr;
}
}
```
``` name=nginx_error.log, lines=10
PHP message: #0 <#2> PhabricatorPolicyFilter::rejectObject(PhabricatorFavoritesApplication, string, string) called at [<phabricator>/src/applications/policy/filter/PhabricatorPolicyFilter.php:502]
PHP message: #1 <#2> PhabricatorPolicyFilter::checkCapability(PhabricatorFavoritesApplication, string) called at [<phabricator>/src/applications/policy/filter/PhabricatorPolicyFilter.php:220]
PHP message: #2 <#2> PhabricatorPolicyFilter::apply(array) called at [<phabricator>/src/infrastructure/query/policy/PhabricatorPolicyAwareQuery.php:258]
PHP message: #3 <#2> PhabricatorPolicyAwareQuery::execute() called at [<phabricator>/src/infrastructure/query/policy/PhabricatorPolicyAwareQuery.php:168]
PHP message: #4 <#2> PhabricatorPolicyAwareQuery::executeOne() called at [<phabricator>/src/applications/favorites/application/PhabricatorFavoritesApplication.php:56]
PHP message: #5 <#2> PhabricatorFavoritesApplication::renderFavoritesDropdown(PhabricatorUser) called at [<phabricator>/src/applications/favorites/application/PhabricatorFavoritesApplication.php:46]
PHP message: #6 <#2> PhabricatorFavoritesApplication::buildMainMenuExtraNodes(PhabricatorUser, PhabricatorAuthStartController) called at [<phabricator>/src/view/page/menu/PhabricatorMainMenuView.php:93]
PHP message: #7 <#2> PhabricatorMainMenuView::render() called at [<phabricator>/src/view/page/PhabricatorStandardPageView.php:381]
PHP message: #8 <#2> PhabricatorStandardPageView::willRenderPage() called at [<phabricator>/src/view/page/AphrontP
```
Every midnight I'm updating phabricator using this script (in crontab ofc):
```name=phabricator_update_sript.sh, lines=10
#!/bin/sh
set -e
set -x
# This is an example script for updating Phabricator, similar to the one used to
# update <https://secure.phabricator.com/>. It might not work perfectly on your
# system, but hopefully it should be easy to adapt. This script is not intended
# to work without modifications.
# NOTE: This script assumes you are running it from a directory which contains
# arcanist/, libphutil/, and phabricator/.
# ROOT=`pwd` # You can hard-code the path here instead.
### UPDATE WORKING COPIES ######################################################
cd /opt/libphutil
git pull
cd /opt/arcanist
git pull
cd /opt/phabricator
git pull
### CYCLE WEB SERVER AND DAEMONS ###############################################
# Stop daemons.
/opt/phabricator/bin/phd stop
# Stop the webserver (apache, nginx, lighttpd, etc). This command will differ
# depending on which system and webserver you are running: replace it with an
# appropriate command for your system.
# NOTE: If you're running php-fpm, you should stop it here too.
sudo /etc/init.d/apache2 stop
# Upgrade the database schema. You may want to add the "--force" flag to allow
# this script to run noninteractively.
/opt/phabricator/bin/storage upgrade --force
# Restart the webserver. As above, this depends on your system and webserver.
# NOTE: If you're running php-fpm, restart it here too.
sudo /etc/init.d/apache2 start
# Restart daemons.
/opt/phabricator/bin/phd start
```
I would appreciate any help.