No permissions for superuser

Ned · September 17, 2018, 12:15pm

Hi all,
i installed fresh sentry, created user by “sentry createuser --superuser”, all work fine but i can not invite any other users from web interface:

log cut for member creation try:

Sep 17 19:59:26 sentry01 supervisord: sentry_web 11:59:26 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'https://sentry01.domain-replaced.com/api/0/broadcasts/' method=u'GET' ip_address=u'192.168.0.2')
Sep 17 19:59:26 sentry01 supervisord: sentry_web 127.0.0.1 - - [17/Sep/2018:11:59:26 +0000] "GET /api/0/broadcasts/ HTTP/1.0" 200 1013 "https://sentry01.domain-replaced.com/myorganization/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0"
Sep 17 19:59:27 sentry01 supervisord: sentry_web 11:59:27 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'https://sentry01.domain-replaced.com/api/0/organizations/myorganization/members/' method=u'POST' ip_address=u'192.168.0.2')
Sep 17 19:59:27 sentry01 supervisord: sentry_web 127.0.0.1 - - [17/Sep/2018:11:59:27 +0000] "POST /api/0/organizations/myorganization/members/ HTTP/1.0" 403 844 "https://sentry01.domain-replaced.com/settings/myorganization/members/new/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0"
Sep 17 19:59:27 sentry01 supervisord: sentry_web 11:59:27 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'https://sentry01.domain-replaced.com/api/0/organizations/myorganization/members/?query=' method=u'GET' ip_address=u'192.168.0.2')
Sep 17 19:59:27 sentry01 supervisord: sentry_web 11:59:27 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'https://sentry01.domain-replaced.com/api/0/organizations/myorganization/access-requests/' method=u'GET' ip_address=u'192.168.0.2')
Sep 17 19:59:28 sentry01 supervisord: sentry_web 11:59:28 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'https://sentry01.domain-replaced.com/api/0/organizations/myorganization/auth-provider/' method=u'GET' ip_address=u'192.168.0.2')
Sep 17 19:59:28 sentry01 supervisord: sentry_web 127.0.0.1 - - [17/Sep/2018:11:59:27 +0000] "GET /api/0/organizations/myorganization/access-requests/ HTTP/1.0" 200 767 "https://sentry01.domain-replaced.com/settings/myorganization/members/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0"
Sep 17 19:59:28 sentry01 supervisord: sentry_web 127.0.0.1 - - [17/Sep/2018:11:59:27 +0000] "GET /api/0/organizations/myorganization/auth-provider/ HTTP/1.0" 403 823 "https://sentry01.domain-replaced.com/settings/myorganization/members/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0"
Sep 17 19:59:28 sentry01 supervisord: sentry_web 127.0.0.1 - - [17/Sep/2018:11:59:27 +0000] "GET /api/0/organizations/myorganization/members/?query= HTTP/1.0" 200 2953 "https://sentry01.domain-replaced.com/settings/myorganization/members/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0"

Same issue with accessing Repositories area:

Sep 17 20:07:29 sentry01 supervisord: sentry_web 12:07:29 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'https://sentry01.domain-replaced.com/api/0/organizations/myorganization/repos/?status=' method=u'GET' ip_address=u'192.168.0.2')
Sep 17 20:07:29 sentry01 supervisord: sentry_web 12:07:29 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'https://sentry01.domain-replaced.com/api/0/organizations/myorganization/config/repos/' method=u'GET' ip_address=u'192.168.0.2')
Sep 17 20:07:29 sentry01 supervisord: sentry_web 127.0.0.1 - - [17/Sep/2018:12:07:29 +0000] "GET /api/0/organizations/myorganization/repos/?status= HTTP/1.0" 403 865 "https://sentry01.domain-replaced.com/settings/myorganization/repos/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0"
Sep 17 20:07:29 sentry01 supervisord: sentry_web 127.0.0.1 - - [17/Sep/2018:12:07:29 +0000] "GET /api/0/organizations/myorganization/config/repos/ HTTP/1.0" 200 780 "https://sentry01.domain-replaced.com/settings/myorganization/repos/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0"

Please advice what i should recheck, and why my permissions can not matching account role as declared in https://docs.sentry.io/learn/membership/ ?

Ned · September 20, 2018, 3:44pm

Invite issue fixed by set SENTRY_FEATURES["organizations:invite-members "] = True in sentry.conf.py

zeeg · September 21, 2018, 8:46pm

So looks like maybe we have (had?) a bug where we shouldn’t show the invite action when the feature flag is disabled.

Ned · September 23, 2018, 7:01am

Maybe, but at least this behavior not documented anywhere, i found it by parsing source code for phrase ‘Your organization is not allowed to invite members’ i get as return on POST request. If this option required - it should be documented i think.

        if not features.has('organizations:invite-members', organization, actor=request.user):
            return Response(
{'organization': 'Your organization is not allowed to invite members'}, status=403)

github.com

getsentry/sentry/blob/0b5b3faf7a5c6f5616ca1939d8989171cc35b067/src/sentry/api/endpoints/organization_member_index.py

from __future__ import absolute_import
import six

from django.db import transaction, IntegrityError
from django.db.models import Q
from rest_framework import serializers
from rest_framework.response import Response
from django.conf import settings

from sentry.app import locks
from sentry import roles, features
from sentry.api.bases.organization import (
    OrganizationEndpoint, OrganizationPermission)
from sentry.api.paginator import OffsetPaginator
from sentry.api.serializers import serialize
from sentry.api.serializers.rest_framework import ListField
from sentry.models import AuditLogEntryEvent, OrganizationMember, OrganizationMemberTeam, Team, TeamStatus
from sentry.search.utils import tokenize_query
from sentry.signals import member_invited
from .organization_member_details import get_allowed_roles

This file has been truncated. show original

Topic		Replies	Views
Unable to Invite User to Organization On-Premise	10	3482	July 9, 2019
Cannot invite new user to my orginization On-Premise	0	797	November 28, 2018
How to create user after fresh installation On-Premise	4	13506	April 28, 2020
Can't create new user account On-Premise	3	7233	October 14, 2019
Could not invite user On-Premise	4	1226	May 10, 2021

No permissions for superuser

Related topics