YouTrack 6, Permissions Issue

Hello,

We have a local installed instance of YouTrack 6. It has been updated from version 5 few days ago.

When I'm trying to Grant Role in Project for User or Group I'm getting this error:

"CREATE JetPassProjectRole [null] is forbidden"

I would appreciate for any help in this matter.

Thanks.
22 comments
Comment actions Permalink
Hello,

Did you manage permissions in YouTrack after upgrade? Was it for root user?

Thank you.
0
Comment actions Permalink
This is happening to me in 6. No it's not with root. I am simply trying to make someone an admin.

The new permissions is a disaster sadly.
0
Comment actions Permalink
Same deal for me.  Get the error when trying to make someone an admin.
0
Comment actions Permalink
I Upgraded our youtrack 5.2 to the lastest version over the weekend using 5.2.5 as an interum step and I too am now experiancing this issue while trying to change group permissions.

Please can you give an update on when this issue is likely to be resolved or if you need futher information to investigate please ask.
0
Comment actions Permalink
update: as we had only keyed in a few tickets so far I've restored our system back to our pre-upgrade 5.2 as the inability to permission users into new projects was to much of a deal breaker at this time.
0
Comment actions Permalink
Hi All,

Thank you for your patience!
I kindly ask you to try the latest build (jetbrains.com/youtrack), the problem should be fixed.

Let me know if still remains.
0
Comment actions Permalink
Thanks for the update, I've scheduled an upgrade attempt for the weekend, I'll let you know how it goes and if I experiance any issues.
0
Comment actions Permalink
Thanks for nothing. Total waste of time. New error: 'Selected permission cannot be added to this project.'
0
Comment actions Permalink
Rob,

Did you grant roles under root user? May it be the case, you've disabled some permissions for your root account? Could you please restart YouTrack with 'jetbrains.charisma.restoreRootPassword' http://confluence.jetbrains.com/display/YTD6/YouTrack+Start+Java+Parameters ?

Thank you.
0
Comment actions Permalink
I am an admin. I can't grant the admin role to another user? I guess I have to read the docs and see how to login as the root user. Ugh.
0
Comment actions Permalink
Rob,

Just restart YouTrack with mentioned parameter and log in as root with:
login:root
pswd:root
0
Comment actions Permalink
And I will have to do that each time I want to grant the admin role???
0
Comment actions Permalink
Rob,

No. That's one-time reproducible issue.
0
Comment actions Permalink
What a disaster. Restarted and would not let me login as root/root. Added it to the plist for launchctl.

       <string>-Ddatabase.location=/usr/local/youtrack/data</string>
        <string>-Djetbrains.charisma.restoreRootPassword</string>


I am trying to make it so that I can say 'User X should see Project Y.' Never guessed that would take hours spread out over a week plus. The User management really is totally nuts.
0
Comment actions Permalink
I had the same issue (CREATE JetPassProjectRole [null] is forbidden) before update to latest version.
I have other error in the same place at now (Selected permissions cannot be granted in this project) and this is true if I shall try to create new projects with new groups and users.

Screen Shot 2014-11-25 at 09.40.23.png


YouTrack version youtrack-6.0.12223.
Installed on local server with ubuntu 12.04.
0
Comment actions Permalink
Similar issue again. Trying to add Developer role to a new group in a specific project.

Got the original "CREATE JetPassProjectRole [null] is forbidden" error, upgraded to the latest version and now have the error "Selected permission cannot be granted in this project", Also tried developer role in the Global project and get the same error.

Tried to log in with root instead of my login (which has Global Admin role), but when i log in with root it says "User is banned", I go on to the root profile, it said "User is banned" I pressed the unban user button. Now it says "User is not banned" in the profile. However when I try to log in with root it still says "User is banned".

Regardless, i have the same issue as the above about granting access to a group or user.

Any help would be appreciated.
0
Comment actions Permalink
Will be answer from youtrack team about this issue? We can't work on new projects, because we can't add developers or any other roles to them.

I can send you database dump to help reproduce this issue. This problem as I understand near database migration, because on clean db it's work fine.
0
Comment actions Permalink
I've solved problem.
You can grant access under the Global Admin (root), but you can't do it with a normal Admin.

Not root admin In youtrack 5 could do this,  as I understood.

You have to add again global admin rights to not root admin (do it under root admin), if you don't want to login under root admin all the time.

I suspect that not all rights were granted in migration form 5 to 6.
0
Comment actions Permalink
Thanks for this.

I've managed to get in under root and noticed that root has a "System Admin", that my old admin account does not have, i've added myself as a "System Admin" under all projects and now I can assign roles correctly.
0
Comment actions Permalink
This is not fixed. I am not able to login as root/root. I get 'Can't authorize with given credentials.'

Meanwhile the launchd log has a bunch of exceptions in it:

12:16:07,987 DEBUG [RingLifecycleListener         ] [init servlet   ] [] Syncing roles...
12:16:07,993 DEBUG [RingLifecycleListener         ] [init servlet   ] [] Syncing user groups...
12:16:08,115 INFO  [security       ] [qtp186276003-58] [] [YouTrack[...]] Collected changes
Update by YouTrack[...] @2014-12-04T12:16:08.110-0800
    Updated: JPUserGroup[56ce68c8-c998-410a-8d25-54e996e13ead](New Users)
        autoJoin[boolean]: true -> false
12:16:08,149 INFO  [security       ] [sSaverProcessor] [] [internal] Change collection suspended
12:16:08,218 DEBUG [RingLifecycleListener         ] [init servlet   ] [] Syncing user accounts...
12:16:08,233 WARN  [BaseExceptionMapper           ] [qtp186276003-58] [] REST exception for URL: /hub/api/rest/users/byname/default_admin_name
jetbrains.mps.webr.rpc.rest.provider.exception.RESTNotFoundException: User [default_admin_name] wasn't found
jetbrains.mps.webr.rpc.rest.provider.exception.RESTNotFoundException: User [default_admin_name] wasn't found
 at jetbrains.jetpass.rest.api.authority.UserSubresource.checkEntityExists(UserSubresource.java:122)
 at jetbrains.jetpass.rest.api.authority.UserSubresource.get(UserSubresource.java:67)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
 at java.lang.reflect.Method.invoke(Method.java:483)

I have been using a broken, crippled system now since the 6 upgrade. Is there any way to fix this??? I am sick of wasting time on known bugs...
0
Comment actions Permalink
I finally got this resolved. What a nightmare. The suggestion of adding the param about restoring the password did NOT work. You have to set it to true. Which the documentation does not mention.

Thanks!!
0

Please sign in to leave a comment.