[ome-users] public users loses access after 5.3.0 upgrade

Wed Apr 12 10:49:35 BST 2017

Hi Peter

thanks for looking into this. 

Here is my config (ldap stuff removed):

omero.data.dir=/mnt/LMF/OMERO
omero.db.name=omero_database
omero.db.pass=********
omero.db.user=omero
omero.jvmcfg.percent.blitz=30
omero.jvmcfg.percent.indexer=20
omero.jvmcfg.percent.pixeldata=30
omero.security.password_provider=chainedPasswordProvider
omero.security.trustStore=/usr/lib/jvm/java-7-openjdk-amd64/jre/lib/security/cacerts
omero.security.trustStorePassword=********
omero.web.application_host=http://svx-uo7640omero2.unifr.ch:80/
omero.web.application_server=wsgi-tcp
omero.web.apps=["figure"]
omero.web.debug=False
omero.web.login_logo=https://bioimage-db.unifr.ch/media/UNF_Signet_100pr_pos_100px.png
omero.web.public.enabled=True
omero.web.public.password=********
omero.web.public.url_filter=^/(webclient/(?!(action|logout|annotate_(file|tags|comment|rating|map)|script_ui|ome_tiff|figure_script))|webgateway/(?!(archived_files|download_as)))
omero.web.public.user=Anybody
omero.web.server_email=felix.meyenhofer at unifr.ch
omero.web.ui.top_links=[["Data", "webindex", {"title": "Browse Data via Projects, Tags etc"}], ["History", "history", {"title": "History"}], ["Help", "http://help.openmicroscopy.org/", {"target": "new", "title": "Open OMERO user guide in a new tab"}], ["Figure", "figure_index", {"target": "figure", "title": "Open Figure in new tab"}]]

Best regards, 

Felix

> On 12 Apr 2017, at 11:02, Petr Walczysko (Staff) <p.walczysko at dundee.ac.uk> wrote:
> 
> Dear Felix
> I am just trying to test a fix for your public user problem described below.
> Would you please give me the output of
> 
> bin/omero config get --hide-password
> 
> so that I can be as close as possible to your setup ?
> 
> Thank you, very much
> All the best
> 
> Petr Walczysko
> OME Team
> 
> 
> On 10/04/2017 12:46, "ome-users on behalf of MEYENHOFER Felix" <ome-users-bounces at lists.openmicroscopy.org.uk on behalf of felix.meyenhofer at unifr.ch> wrote:
> 
>    Hi
> 
>    last week I run the upgrade form 5.2.5 to 5.3.0.
>    In the requirements-py27-all.txt the omero-marshal package was missing. Once I found that, the upgrade went as expected. (this is just a side note)
> 
>    Otherwise the upgrade went well, except that it seems to have broken my public user. It was working well before. But now the full viewer displays a 404 error. When checking the web content I found the more detailed error message bellow
> 
> 
>    could not execute query; SQL [select renderingd0_.id as id123_0_, experiment1_.id as id34_1_, quantumdef2_.id as id120_2_, renderingm3_.id as id124_3_, waverender4_.id as id11_4_, family5_.id as id39_5_, spatialdom6_.id as id13_6_, projection7_.id as id117_7_, projection8_.id as id116_8_, projection9_.id as id118_9_, renderingd0_.compression as compress2_123_0_, renderingd0_.defaultT as defaultT123_0_, renderingd0_.defaultZ as defaultZ123_0_, renderingd0_.creation_id as creation8_123_0_, renderingd0_.external_id as external9_123_0_, renderingd0_.group_id as group10_123_0_, renderingd0_.owner_id as owner11_123_0_, renderingd0_.permissions as permissi5_123_0_, renderingd0_.update_id as update12_123_0_, renderingd0_.model as model123_0_, renderingd0_.name as name123_0_, renderingd0_.pixels as pixels123_0_, renderingd0_.quantization as quantiz15_123_0_, renderingd0_.version as version123_0_, experiment1_.external_id as external11_34_1_, experiment1_.permissions as permissi2_34_1_, ex
> peri
>     ment1_.email as email34_1_, experiment1_.firstName as firstName34_1_, experiment1_.institution as institut5_34_1_, experiment1_.lastName as lastName34_1_, experiment1_.ldap as ldap34_1_, experiment1_.middleName as middleName34_1_, experiment1_.omeName as omeName34_1_, experiment1_.version as version34_1_, quantumdef2_.bitResolution as bitResol2_120_2_, quantumdef2_.cdEnd as cdEnd120_2_, quantumdef2_.cdStart as cdStart120_2_, quantumdef2_.creation_id as creation7_120_2_, quantumdef2_.external_id as external8_120_2_, quantumdef2_.group_id as group9_120_2_, quantumdef2_.owner_id as owner10_120_2_, quantumdef2_.permissions as permissi5_120_2_, quantumdef2_.update_id as update11_120_2_, quantumdef2_.version as version120_2_, renderingm3_.external_id as external4_124_3_, renderingm3_.permissions as permissi2_124_3_, renderingm3_.value as value124_3_, waverender4_.active as active11_4_, waverender4_.alpha as alpha11_4_, waverender4_.blue as blue11_4_, waverender4_.coefficient as coeffi
> ci5_
>     11_4_, waverender4_.creation_id as creation14_11_4_, waverender4_.external_id as external15_11_4_, waverender4_.group_id as group16_11_4_, waverender4_.owner_id as owner17_11_4_, waverender4_.permissions as permissi6_11_4_, waverender4_.update_id as update18_11_4_, waverender4_.family as family11_4_, waverender4_.green as green11_4_, waverender4_.inputEnd as inputEnd11_4_, waverender4_.inputStart as inputStart11_4_, waverender4_.lookupTable as lookupT10_11_4_, waverender4_.noiseReduction as noiseRe11_11_4_, waverender4_.red as red11_4_, waverender4_.renderingDef as renderi20_11_4_, waverender4_.version as version11_4_, waverender4_.renderingDef as renderi20_123_0__, waverender4_.id as id0__, waverender4_.renderingDef_index as renderi21_0__, family5_.external_id as external4_39_5_, family5_.permissions as permissi2_39_5_, family5_.value as value39_5_, spatialdom6_.channelBinding as channelB4_13_6_, spatialdom6_.creation_id as creation5_13_6_, spatialdom6_.external_id as external6
> _13_
>     6_, spatialdom6_.group_id as group7_13_6_, spatialdom6_.owner_id as owner8_13_6_, spatialdom6_.permissions as permissi2_13_6_, spatialdom6_.update_id as update9_13_6_, spatialdom6_.version as version13_6_, spatialdom6_1_.xend as xend15_6_, spatialdom6_1_.xstart as xstart15_6_, spatialdom6_1_.yend as yend15_6_, spatialdom6_1_.ystart as ystart15_6_, spatialdom6_2_."constant" as constant1_108_6_, spatialdom6_2_.lowerLimit as lowerLimit108_6_, spatialdom6_2_.planePrevious as planePre3_108_6_, spatialdom6_2_.planeSelected as planeSel4_108_6_, spatialdom6_2_.upperLimit as upperLimit108_6_, spatialdom6_3_."reverse" as reverse1_125_6_, case when spatialdom6_1_.codomainmapcontext_id is not null then 1 when spatialdom6_2_.codomainmapcontext_id is not null then 2 when spatialdom6_3_.codomainmapcontext_id is not null then 3 when spatialdom6_.id is not null then 0 end as clazz_6_, spatialdom6_.channelBinding as channelB4_11_1__, spatialdom6_.id as id1__, spatialdom6_.channelBinding_index as 
> chan
>     nel10_1__, projection7_.active as active117_7_, projection7_.axis as axis117_7_, projection7_.creation_id as creation9_117_7_, projection7_.external_id as external10_117_7_, projection7_.group_id as group11_117_7_, projection7_.owner_id as owner12_117_7_, projection7_.permissions as permissi3_117_7_, projection7_.update_id as update13_117_7_, projection7_.endPlane as endPlane117_7_, projection7_.renderingDef as renderi14_117_7_, projection7_.startPlane as startPlane117_7_, projection7_.stepping as stepping117_7_, projection7_.type as type117_7_, projection7_.version as version117_7_, projection7_.renderingDef as renderi14_123_2__, projection7_.id as id2__, projection7_.renderingDef_index as renderi16_2__, projection8_.external_id as external4_116_8_, projection8_.permissions as permissi2_116_8_, projection8_.value as value116_8_, projection9_.external_id as external4_118_9_, projection9_.permissions as permissi2_118_9_, projection9_.value as value118_9_ from renderingdef renderi
> ngd0
>     _ left outer join experimenter experiment1_ on renderingd0_.owner_id=experiment1_.id left outer join quantumdef quantumdef2_ on renderingd0_.quantization=quantumdef2_.id left outer join renderingmodel renderingm3_ on renderingd0_.model=renderingm3_.id left outer join channelbinding waverender4_ on renderingd0_.id=waverender4_.renderingDef and (? = 1 OR ? = 0 OR waverender4_.id IN (SELECT channelbinding.id FROM channelbinding*, renderingdef*, pixels* WHERE channelbinding.renderingdef = renderingdef.id AND renderingdef.pixels = pixels.id AND pixels.image IN (?))) left outer join family family5_ on waverender4_.family=family5_.id left outer join codomainmapcontext spatialdom6_ on waverender4_.id=spatialdom6_.channelBinding and (? = 1 OR ? = 0 OR spatialdom6_.id IN (SELECT codomainmapcontext.id FROM codomainmapcontext*, renderingdef*, pixels* WHERE codomainmapcontext.renderingdef = renderingdef.id AND renderingdef.pixels = pixels.id AND pixels.image IN (?))) left outer join contrast
> stre
>     tchingcontext spatialdom6_1_ on spatialdom6_.id=spatialdom6_1_.codomainmapcontext_id left outer join planeslicingcontext spatialdom6_2_ on spatialdom6_.id=spatialdom6_2_.codomainmapcontext_id left outer join reverseintensitycontext spatialdom6_3_ on spatialdom6_.id=spatialdom6_3_.codomainmapcontext_id left outer join projectiondef projection7_ on renderingd0_.id=projection7_.renderingDef and (? = 1 OR ? = 0 OR projection7_.id IN (SELECT projectiondef.id FROM projectiondef*, renderingdef*, pixels* WHERE projectiondef.renderingdef = renderingdef.id AND renderingdef.pixels = pixels.id AND pixels.image IN (?))) left outer join projectionaxis projection8_ on projection7_.axis=projection8_.id left outer join projectiontype projection9_ on projection7_.type=projection9_.id cross join event event10_ where (? = 1 OR ? = 0 OR renderingd0_.id IN (SELECT renderingdef.id FROM renderingdef*, pixels* WHERE renderingdef.pixels = pixels.id AND pixels.image IN (?))) and renderingd0_.update_id=eve
> nt10
>     _.id and renderingd0_.pixels=? and renderingd0_.owner_id=? order by event10_.time desc]; nested exception is org.hibernate.exception.SQLGrammarException: could not execute query
> 
>    I saw that if I have a session with my username the embedded viewer still works. So I logged in with the public users. I am able to see the shared stuff, but when clicking on the viewer the same error happens. So it was not as I expected the failure of the automatic login.
> 
>    Did somebody experience the same problem? Any idea what the cause could be?
> 
>    Best regards,
> 
>    Felix Meyenhofer
> 
>    University of Fribourg
>    Department of Biology/Medicine
>    1, Rte. Albert Gockel
>    1700 Fribourg, Switzerland
> 
>    mobile:+41 26 300 8545
>    web:www.unifr.ch/bioimage
> 
>    _______________________________________________
>    ome-users mailing list
>    ome-users at lists.openmicroscopy.org.uk
>    http://lists.openmicroscopy.org.uk/mailman/listinfo/ome-users
> 
> 
> 
> The University of Dundee is a registered Scottish Charity, No: SC015096
> _______________________________________________
> ome-users mailing list
> ome-users at lists.openmicroscopy.org.uk
> http://lists.openmicroscopy.org.uk/mailman/listinfo/ome-users