Uploaded image for project: 'Help-Desk'
  1. Help-Desk
  2. HELP-8671

[fiware-stackoverflow] KeyRock failing to update policies on AuthzForce

    Details

      Description

      Created question in FIWARE Q/A platform on 07-05-2017 at 22:05
      Please, ANSWER this question AT http://stackoverflow.com/questions/43836571/authzforce-failed-update-policies

      Question:
      AuthzForce failed update policies

      Description:
      I'm assigning permission (only access to /resource1) to a role.
      However Keyrock said 'Failed to update policies in Access Control GE'.

      So, even I request the resource2 (not resource1) with an access token that has the permission that can access resource1 only, AuthzForce permit the access because policies are not updated (it might be other problem).

      The question is why authzforce cannot update policy?

      Now, I successfully linked permission to the role (except failing policy update), and I assigned the role to the user. Then I double checked configurations of Keyrock and AuthzForce. They are connected well I think.

      Error msg of Keyrock

      What makes I think AuthzForce working well (this is the Wilma's successful log when I send a access request to Wilma with the access token)

      Please refer above images and below configuretion of Keyrock.

      // 'local_settings.py' in Keyrock
      ACCESS_CONTROL_URL = 'http://127.0.0.1:8080'
      ACCESS_CONTROL_MAGIC_KEY = 'abcdefghijkmn'

        Activity

        Hide
        backlogmanager Backlog Manager added a comment -

        2017-05-08 00:05|CREATED monitor | # answers= 0, accepted answer= False

        Show
        backlogmanager Backlog Manager added a comment - 2017-05-08 00:05|CREATED monitor | # answers= 0, accepted answer= False
        Hide
        cdangerville Cyril Dangerville added a comment -

        Asking for more info. A priori an issue with KeyRock-Authzforce incompatibility. May re-assign to KeyRock owner.

        Show
        cdangerville Cyril Dangerville added a comment - Asking for more info. A priori an issue with KeyRock-Authzforce incompatibility. May re-assign to KeyRock owner.
        Hide
        backlogmanager Backlog Manager added a comment -

        2017-05-11 12:05|UPDATED status: transition Finish| # answers= 1, accepted answer= True

        Show
        backlogmanager Backlog Manager added a comment - 2017-05-11 12:05|UPDATED status: transition Finish| # answers= 1, accepted answer= True

          People

          • Assignee:
            aalonsog Alvaro Alonso
            Reporter:
            backlogmanager Backlog Manager
          • Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: