diff --git a/info.textgrid.middleware.tgauth.rbac/rbacSoap/TgAdministration.class.php b/info.textgrid.middleware.tgauth.rbac/rbacSoap/TgAdministration.class.php index cbdb13c22fbfd4424f51904f8d209bc9467c3f61..fe78b7be169aef849a3040c91633e97cacb6c581 100755 --- a/info.textgrid.middleware.tgauth.rbac/rbacSoap/TgAdministration.class.php +++ b/info.textgrid.middleware.tgauth.rbac/rbacSoap/TgAdministration.class.php @@ -95,9 +95,9 @@ class TgAdministration { $arrTree['objectclass'][] = "rbacresource"; $arrTree['ou'][] = $userDomain; - $file = fopen( "/tmp/debug.log", "a+" ); - fwrite( $file, $userTreeDn . "," . $this->config->getValue( "authentication", "base" ) ); - fclose( $file ); +// $file = fopen( "/tmp/debug.log", "a+" ); +// fwrite( $file, $userTreeDn . "," . $this->config->getValue( "authentication", "base" ) ); +// fclose( $file ); $this->connection['user']->add( $userTreeDn . "," . $this->config->getValue( "authentication", "base" ), $arrTree ); } diff --git a/info.textgrid.middleware.tgauth.rbac/rbacSoap/TgExtra.class.php b/info.textgrid.middleware.tgauth.rbac/rbacSoap/TgExtra.class.php index 7f6271983d9ce6e2d307b4fbceee960b88369de9..6b536c02b821a41840340c963a330de311e03fd8 100755 --- a/info.textgrid.middleware.tgauth.rbac/rbacSoap/TgExtra.class.php +++ b/info.textgrid.middleware.tgauth.rbac/rbacSoap/TgExtra.class.php @@ -3491,7 +3491,7 @@ class TgExtra { $strResult .= substr( $strRandom, 8, 4 ) . "-"; $strResult .= substr( $strRandom, 12, 4 ) . "-"; $strResult .= substr( $strRandom, 16, 4 ) . "-"; - $strResult .= substr( $strRandom, 20, 12 ); + $strResult .= substr( $strRandom, 32, 12 ); return $strResult; diff --git a/info.textgrid.middleware.tgauth.rbac/rbacSoap/TgExtraCrud.class.php b/info.textgrid.middleware.tgauth.rbac/rbacSoap/TgExtraCrud.class.php index b9db5c958b7ac86aed0bf8ba399c8962286b8658..1cd9384a27ee1a398a888d12c4b659c3149e0e1f 100755 --- a/info.textgrid.middleware.tgauth.rbac/rbacSoap/TgExtraCrud.class.php +++ b/info.textgrid.middleware.tgauth.rbac/rbacSoap/TgExtraCrud.class.php @@ -88,17 +88,17 @@ class TgExtraCrud { if( $this->rbac->checkAccess( $inRequest->auth, "publish", $inRequest->resource ) ) { - $file = fopen( "/tmp/debug.log", "a+" ); - fwrite( $file, "Resource: " . serialize( $arrResource ) . "\n" ); - fclose( $file ); +// $file = fopen( "/tmp/debug.log", "a+" ); +// fwrite( $file, "Resource: " . serialize( $arrResource ) . "\n" ); +// fclose( $file ); $arrModify['rbacpermission'] = Array(); for( $loPermission = 0; $loPermission < sizeof( $arrResource[0]['rbacpermission'] ); $loPermission++ ) { - $file = fopen( "/tmp/debug.log", "a+" ); - fwrite( $file, "Permission: " . serialize( $arrResource[0]['rbacpermission'][$loPermission] ) . "\n" ); - fclose( $file ); +// $file = fopen( "/tmp/debug.log", "a+" ); +// fwrite( $file, "Permission: " . serialize( $arrResource[0]['rbacpermission'][$loPermission] ) . "\n" ); +// fclose( $file ); if( preg_match( "/:-:publish$/i", $arrResource[0]['rbacpermission'][$loPermission] ) || preg_match( "/:-:delete$/i", $arrResource[0]['rbacpermission'][$loPermission] ) ) { @@ -114,6 +114,16 @@ class TgExtraCrud { } else { + // somehow checkAccess returned False. Debug it now. + $file = fopen ("/tmp/internal2error.debug", "a+"); + fwrite ($file, date(DATE_RFC822) . "\n"); + fwrite ($file, "This URI returned FALSE on 'publish' CheckAccess: " . $inRequest->resource ."\n"); + fwrite ($file, "The SID: " . $inRequest->auth ."\n"); + $secondtry = $this->rbac->checkAccess( $inRequest->auth, "publish", $inRequest->resource ); + fwrite ($file, "Second Try CheckAccess: ". serialize ($secondtry) ."\n"); + fwrite ($file, "--\n"); + fclose ($file); + $objFaultDetail->faultNo = $this->config->getValue( "errorCode", "INSUFFICIENT_ACCESS" ); $objFaultDetail->faultMessage = $this->config->getValue( "errorDescription", "INSUFFICIENT_ACCESS" );