search

Altinn / altinn-authorization

Altinn platform microservice for handling authorization
2 stars 3 forks source link

The call to SBL Bridge to fetch roles for the user fails with a 500 Internal Server Error #832

Open nairaz opened 3 months ago

nairaz commented 3 months ago

Description of the bug

The call to SBL Bridge to fetch roles for the user fails with a 500 Internal Server Error

From the logs, it's observed that the call to Altinn 3 to fetch recipients and delegations is failing, where the user receives a 403 Forbidden error. Even though they are logged in with level 3 access and are a DAILY user

The hypothesis is that users with "fortrolig" and "strengt fortrolig" (codes 6 and 7 ) are failing

logs: https://portal.azure.com/#view/AppInsightsExtension/DetailsV2Blade/ComponentId~/%7B%2[…]-8ef6-d0b6ddcfd9a4%22%2C%22eventTable%22%3A%22requests%22%7D

Steps To Reproduce

Users with confidential and strictly confidential (kode 6 og 7 "fortrolig" og "strengt fortrolig" roles are failing.

  1. Log in with user 05895495109 or 018652 99334 in https://info.at22.altinn.cloud/
  2. Select the organization.
  3. Choose " skjema og tjenester du har rettighet til" or "Andre med rettigheter til virksomheten"
  4. Fails with the following error message

  5. image

Additional Information

No response

jonkjetiloye commented 3 months ago

The problem stems from a change made in Altinn 2 by Team Core (Bug 64125) The issue has now been solved in Altinn 2 through the Bug 64209