search

kaltura / server

The Kaltura Platform Backend. To install Kaltura, visit the install packages repository.
https://github.com/kaltura/platform-install-packages
GNU Affero General Public License v3.0
368 stars 175 forks source link

Analytics: CSV Report Generation #2791

Closed Patryk57 closed 9 years ago

Patryk57 commented 9 years ago

Dear Kaltura Community,

We are currently using Kaltura Edition 10.12.0 and are running into an issue when it comes to generate CSV files from the Analytics Pannel. Analytic works like a charm but when we download the CSV file, there is no data but an XML message with the following error: The access to service [report->serve] is forbidden.

When I check in the logs, I see axactly the same error:

2015-07-02 10:24:43 [0.000209] [81.92.239.229] [1380888924] [API] [kPermissionManager::isActionPermitted] ERR: exception 'Exception' with message 'Service is not permitted' in /opt/kaltura/app/infra/log/KalturaLog.php:82 Stack trace:

0 /opt/kaltura/app/alpha/apps/kaltura/lib/kPermissionManager.php(801): KalturaLog::err('Service is not ...')

1 /opt/kaltura/app/api_v3/lib/KalturaBaseService.php(183): kPermissionManager::isActionPermitted('report', 'serve')

2 /opt/kaltura/app/api_v3/lib/KalturaBaseService.php(130): KalturaBaseService->isPermitted(false)

3 /opt/kaltura/app/api_v3/services/ReportService.php(13): KalturaBaseService->initService('report', 'report', 'serve')

4 /opt/kaltura/app/api_v3/lib/KalturaActionReflector.php(256): ReportService->initService('report', 'report', 'serve')

5 /opt/kaltura/app/api_v3/lib/KalturaDispatcher.php(115): KalturaActionReflector->initService(NULL)

6 /opt/kaltura/app/api_v3/lib/KalturaFrontController.php(111): KalturaDispatcher->dispatch('report', 'serve', Array)

7 /opt/kaltura/app/api_v3/web/index.php(20): KalturaFrontController->run()

8 {main}

2015-07-02 10:24:43 [0.000151] [81.92.239.229] [1380888924] [API] [KalturaBaseService->isPermitted] ERR: exception 'Exception' with message 'Action is not permitted' in /opt/kaltura/app/infra/log/KalturaLog.php:82 Stack trace:

0 /opt/kaltura/app/api_v3/lib/KalturaBaseService.php(190): KalturaLog::err('Action is not p...')

1 /opt/kaltura/app/api_v3/lib/KalturaBaseService.php(130): KalturaBaseService->isPermitted(false)

2 /opt/kaltura/app/api_v3/services/ReportService.php(13): KalturaBaseService->initService('report', 'report', 'serve')

3 /opt/kaltura/app/api_v3/lib/KalturaActionReflector.php(256): ReportService->initService('report', 'report', 'serve')

4 /opt/kaltura/app/api_v3/lib/KalturaDispatcher.php(115): KalturaActionReflector->initService(NULL)

5 /opt/kaltura/app/api_v3/lib/KalturaFrontController.php(111): KalturaDispatcher->dispatch('report', 'serve', Array)

6 /opt/kaltura/app/api_v3/web/index.php(20): KalturaFrontController->run()

7 {main}

2015-07-02 10:24:43 [0.000154] [81.92.239.229] [1380888924] [API] [KalturaBaseService->isPermitted] ERR: exception 'Exception' with message 'Kaltura network is not allowed' in /opt/kaltura/app/infra/log/KalturaLog.php:82 Stack trace:

0 /opt/kaltura/app/api_v3/lib/KalturaBaseService.php(199): KalturaLog::err('Kaltura network...')

1 /opt/kaltura/app/api_v3/lib/KalturaBaseService.php(130): KalturaBaseService->isPermitted(false)

2 /opt/kaltura/app/api_v3/services/ReportService.php(13): KalturaBaseService->initService('report', 'report', 'serve')

3 /opt/kaltura/app/api_v3/lib/KalturaActionReflector.php(256): ReportService->initService('report', 'report', 'serve')

4 /opt/kaltura/app/api_v3/lib/KalturaDispatcher.php(115): KalturaActionReflector->initService(NULL)

5 /opt/kaltura/app/api_v3/lib/KalturaFrontController.php(111): KalturaDispatcher->dispatch('report', 'serve', Array)

6 /opt/kaltura/app/api_v3/web/index.php(20): KalturaFrontController->run()

7 {main}

2015-07-02 10:24:43 [0.007603] [81.92.239.229] [1380888924] [API] [KalturaFrontController->getExceptionObject] ERR: exception 'KalturaAPIException' with message 'The access to service [report->serve] is forbidden' in /opt/kaltura/app/api_v3/lib/KalturaBaseService.php:135 Stack trace:

0 /opt/kaltura/app/api_v3/services/ReportService.php(13): KalturaBaseService->initService('report', 'report', 'serve')

1 /opt/kaltura/app/api_v3/lib/KalturaActionReflector.php(256): ReportService->initService('report', 'report', 'serve')

2 /opt/kaltura/app/api_v3/lib/KalturaDispatcher.php(115): KalturaActionReflector->initService(NULL)

3 /opt/kaltura/app/api_v3/lib/KalturaFrontController.php(111): KalturaDispatcher->dispatch('report', 'serve', Array)

4 /opt/kaltura/app/api_v3/web/index.php(20): KalturaFrontController->run()

5 {main}

2015-07-02 10:24:43 [0.006826] [81.92.239.229] [1380888924] [API] [KalturaFrontController->serializeResponse] DEBUG: Serialize start 2015-07-02 10:24:43 [0.000212] [81.92.239.229] [1380888924] [API] [KalturaFrontController->serializeResponse] DEBUG: Serialize took - 0.00020790100097656 2015-07-02 10:24:43 [0.000215] [81.92.239.229] [1380888924] [API] [global] INFO: API-end [0.10776591300964]

I am wondering if there is a plugin to activate in order to get it to work? Or maybe a special permission to give but I do not which one...

Do you have a hint for me? Your help will be much appreciated.

Many thanks in advance,

Best regards,

Patrick

kaltura-hooks commented 9 years ago

Hi @Patryk57,

Thank for you reporting an issue and helping improve Kaltura!

To get the fastest response time, and help the maintainers review and test your reported issues or suggestions, please ensure that your issue includes the following (please comment with more info if you have not included all this info in your original issue):

    # rpm -qa "kaltura*"
For deb based systems:
    # dpkg -l "kaltura-*"
    # tail -f /opt/kaltura/log/*.log /opt/kaltura/log/batch/*.log | grep -A 1 -B 1 --color "ERR:\|PHP\|trace\|CRIT\|\[error\]"

and paste the output.

For general troubleshooting see: https://github.com/kaltura/platform-install-packages/blob/Jupiter-10.13.0/doc/kaltura-packages-faq.md#troubleshooting-help

If you only have a general question rather than a bug report, please close this issue and post at: http://forum.kaltura.org

Thank you in advance,

Patryk57 commented 9 years ago

Hi @kaltura-hooks,

Many thanks for you answer. We actually have two different self hosted and clusterised environements:

Here are the details you requested:

PRODUCTION ENVIRONMENT These are the RPM installed on one of our front server:

[root@LU-LX-VSTR28 ~]# rpm -qa | grep -i kaltura kaltura-postinst-1.0.22-9.noarch kaltura-server-10.2.0-1.noarch kaltura-libmcrypt-devel-2.5.7-5.x86_64 kaltura-segmenter-1.0-1.x86_64 kaltura-kupload-1.0.0-1.noarch kaltura-flexwrapper-v1.2-1.noarch kaltura-release-10.2.0-1.noarch kaltura-base-10.2.0-5.noarch kaltura-widgets-1.0.0-8.noarch kaltura-ffmpeg-aux-0.6-2.x86_64 kaltura-sshpass-1.05-1.x86_64 kaltura-kclip-v1.1.2.1-2.noarch kaltura-clipapp-v1.0.7-1.noarch kaltura-kdp-v2.7.0-1.noarch kaltura-sphinx-2.2.1-16.x86_64 kaltura-x264-0.140-2.20140104.x86_64 kaltura-lame-3.99.5-3.x86_64 kaltura-libopencore-amr-0.1.2-2.x86_64 kaltura-librtmp-2.3-2.x86_64 kaltura-fdk-acc-0.1.3-1.x86_64 kaltura-kdpwrapper-v11.0-1.noarch kaltura-kcw-1.0.0-6.noarch kaltura-mencoder-3.4.6-9.x86_64 kaltura-html5lib-v2.25-1.noarch kaltura-batch-10.2.0-1.noarch kaltura-front-10.2.0-1.noarch kaltura-html5-studio-v1.9.3-2.noarch kaltura-kdp3-v3.9.9-2.noarch kaltura-red5-1.0.4-1.x86_64 kaltura-libfaac-1.26-1.x86_64 kaltura-libass-0.9.11-2.x86_64 kaltura-libmemcached-1.0.16-2.x86_64 kaltura-ksr-v1.0.44-1.noarch kaltura-kvpm-v1.0.6-1.noarch kaltura-krecord-1.0.0-1.noarch kaltura-ffmpeg-2.1.3-1.x86_64 kaltura-dwh-9.4.0-2.noarch kaltura-kmc-v5.38.7-9.noarch kaltura-a52dec-0.7.4-11.x86_64 kaltura-libmcrypt-2.5.7-5.x86_64 kaltura-monit-5.6-15.x86_64 kaltura-kdp3wrapper-v37.0-1.noarch kaltura-pentaho-4.2.1-1.x86_64

The MySQL version used is the following one:

[root@LU-LX-VSTR23 ~]# mysql --version mysql Ver 14.14 Distrib 5.1.73, for redhat-linux-gnu (x86_64) using readline 5.1

Here is the extraction of the error logs:

==> /opt/kaltura/log/kaltura_apache_errors.log <== [Fri Jul 03 10:38:56 2015] [error] [client 81.92.239.229] PHP Notice: The language 'fr' has to be added before it can be used. in /opt/kaltura/app/vendor/ZendFramework/library/Zend/Translate/Adapter.php on line 322, referer: http://streamover.bce.lu/admin_console/index.php/partner/list [Fri Jul 03 10:38:56 2015] [error] [client 81.92.239.229] PHP Notice: No translation for the language 'fr' available. in /opt/kaltura/app/vendor/ZendFramework/library/Zend/Translate/Adapter.php on line 335, referer: http://streamover.bce.lu/admin_console/index.php/partner/list 2015-07-03 10:38:56 [0.001170] [81.92.239.229] [1524292398] [PS2] [sfView->initialize] INFO: {sfView} initialize view for "kmc/kmc4" 2015-07-03 10:38:56 [0.002691] [81.92.239.229] [1524292398] [PS2] [sfPHPView->renderFile] INFO: {sfView} render "/opt/kaltura/app/alpha/apps/kaltura/modules/kmc/templates/kmc4Success.php" 2015-07-03 10:38:56 [0.002524] [81.92.239.229] [1524292398] [PS2] [sfPHPView->decorate] INFO: {sfView} decorate content with "/opt/kaltura/app/alpha/apps/kaltura/templates/kmclayout.php" 2015-07-03 10:38:56 [0.000396] [81.92.239.229] [1524292398] [PS2] [sfPHPView->renderFile] INFO: {sfView} render "/opt/kaltura/app/alpha/apps/kaltura/templates/kmclayout.php" 2015-07-03 10:38:56 [0.001365] [81.92.239.229] [1524292398] [PS2] [sfRenderingFilter->execute] INFO: {sfFilter} render to client 2015-07-03 10:39:35 [0.000530] [81.92.239.229] [1109325993] [API] [KalturaActionReflector->initService] DEBUG: Create or retrieve instance of action class [ReportService] 2015-07-03 10:39:35 [0.000629] [81.92.239.229] [1109325993] [API] [kPermissionManager::isActionPermitted] ERR: exception 'Exception' with message 'Service is not permitted' in /opt/kaltura/app/infra/log/KalturaLog.php:82 Stack trace:

0 /opt/kaltura/app/alpha/apps/kaltura/lib/kPermissionManager.php(801): KalturaLog::err('Service is not ...')

8 {main}

2015-07-03 10:39:35 [0.000626] [81.92.239.229] [1109325993] [API] [KalturaBaseService->isPermitted] ERR: exception 'Exception' with message 'Action is not permitted' in /opt/kaltura/app/infra/log/KalturaLog.php:82 Stack trace:

0 /opt/kaltura/app/api_v3/lib/KalturaBaseService.php(172): KalturaLog::err('Action is not p...')

7 {main}

2015-07-03 10:39:35 [0.000483] [81.92.239.229] [1109325993] [API] [KalturaBaseService->isPermitted] ERR: exception 'Exception' with message 'Kaltura network is not allowed' in /opt/kaltura/app/infra/log/KalturaLog.php:82 Stack trace:

0 /opt/kaltura/app/api_v3/lib/KalturaBaseService.php(181): KalturaLog::err('Kaltura network...')

7 {main}

2015-07-03 10:39:35 [0.001555] [81.92.239.229] [1109325993] [API] [KalturaFrontController->getExceptionObject] ERR: exception 'KalturaAPIException' with message 'The access to service [report->serve] is forbidden' in /opt/kaltura/app/api_v3/lib/KalturaBaseService.php:117 Stack trace:

0 /opt/kaltura/app/api_v3/services/ReportService.php(13): KalturaBaseService->initService('report', 'report', 'serve')

STAGING ENVIRONMENT Here are the rpm running on our Staging cluster: ( same issue here)

[root@LU-LX-STR21 ~]# rpm -qa | grep -i kaltura kaltura-nginx-1.8.0-4.x86_64 kaltura-libmcrypt-devel-2.5.7-5.x86_64 kaltura-segmenter-1.0-1.x86_64 kaltura-kupload-1.0.0-1.noarch kaltura-flexwrapper-v1.2-1.noarch kaltura-kdp3-v3.9.9-2.noarch kaltura-server-10.12.0-1.noarch kaltura-sshpass-1.05-1.x86_64 kaltura-kclip-v1.1.2.1-2.noarch kaltura-kdp-v2.7.0-1.noarch kaltura-sphinx-2.2.1-16.x86_64 kaltura-nginx-1.8.0-3.x86_64 kaltura-html5-studio-v1.9.8-1.noarch kaltura-batch-10.12.0-1.noarch kaltura-x264-0.140-2.20140104.x86_64 kaltura-lame-3.99.5-3.x86_64 kaltura-libopencore-amr-0.1.2-2.x86_64 kaltura-librtmp-2.3-2.x86_64 kaltura-fdk-acc-0.1.3-1.x86_64 kaltura-kdpwrapper-v11.0-1.noarch kaltura-kcw-1.0.0-6.noarch kaltura-mencoder-3.4.6-9.x86_64 kaltura-widgets-1.0.0-8.noarch kaltura-red5-1.0.4-1.x86_64 kaltura-base-10.12.0-5.noarch kaltura-release-10.12.0-1.noarch kaltura-front-10.12.0-1.noarch kaltura-libfaac-1.26-1.x86_64 kaltura-libass-0.9.11-2.x86_64 kaltura-libmemcached-1.0.16-2.x86_64 kaltura-ksr-v1.0.44-1.noarch kaltura-kvpm-v1.0.6-1.noarch kaltura-krecord-1.0.0-1.noarch kaltura-ffmpeg-2.1.3-1.x86_64 kaltura-dwh-9.4.0-2.noarch kaltura-clipapp-1.3-2.noarch kaltura-kmc-v5.39.1-3.noarch kaltura-postinst-1.0.26-1.noarch kaltura-a52dec-0.7.4-11.x86_64 kaltura-libmcrypt-2.5.7-5.x86_64 kaltura-monit-5.6-15.x86_64 kaltura-kdp3wrapper-v37.0-1.noarch kaltura-pentaho-4.2.1-1.x86_64 kaltura-html5lib-v2.31-2.noarch kaltura-ffmpeg-aux-0.6-2.x86_64

and MySQL version: > [root@lu-lx-str20 ~]# mysql --version mysql Ver 14.14 Distrib 5.1.73, for redhat-linux-gnu (x86_64) using readline 5.1

I hope I have enclosed everything required. Again, many thanks for taking the time to answer us. And many thanks in advance for your help.

Best regards,

Patrick

jessp01 commented 9 years ago

Hello,

Your version seems to be a bit old as the latest stable is 10.14.0.

I am unable to reproduce it with 10.14.0 and would recommend an upgrade but nonetheless, can you please look at /opt/kaltura/log/kaltura_api_v3.log and find the query attempted right before the error? It should be a query to the permission.* tables.

Then please run it manually and paste the results.

Also, can you specify exactly what report you are trying to download?

Thanks,

Patryk57 commented 9 years ago

Hi @jessp01 , @kaltura-hooks,

Again, thanks for your help and sorry for the late answer. The issue happens when I try to generate any report from the Analytics. For instance and for the following log extraction, I tried to generated a CSV report from the TOP CONTENTS view.

Here is what happens in the _kaltura_apilog while trying to generate the report:

2015-07-06 09:56:04 [0.000240] [81.92.239.229] [1686812078] [API] [global] INFO: API-start pid:14289 2015-07-06 09:56:04 [0.000521] [81.92.239.229] [1686812078] [API] [KalturaFrontController->run] DEBUG: Params [Array ( [service] => report [action] => serve [ks] => MjBjZDJkMzNiZTE2YzAwZjhmOGM2ZjY2OTNhNTJiYTI5MDA2MDI0NXwxMTE7MTExOzE0MzYyNTU3NTg7MDsxNDM2MTY5MzU4Ljc1MTg7O2Rvd25sb2FkOjU1OWEzNDhlOGEyY2JfMjAxNS0wNy1Nb24tMDI7Ow== [id] => 559a348e8a2cb_2015-07-Mon-02 [report.csv] => ) ] 2015-07-06 09:56:04 [0.003399] [81.92.239.229] [1686812078] [API] [KalturaDispatcher->dispatch] DEBUG: Dispatching service [report], action [serve], reqIndex [1] with params Array ( [0] => 559a348e8a2cb_2015-07-Mon-02 ) 2015-07-06 09:56:04 [0.012041] [81.92.239.229] [1686812078] [API] [KalturaPDO->_construct] DEBUG: conn took - 0.0050179958343506 seconds to mysql:host=146.220.183.10;port=3306;dbname=kaltura; 2015-07-06 09:56:04 [0.000384] [81.92.239.229] [1686812078] [API] [Propel::initConnection] NOTICE: total conn took 0.0055088996887207 mysql:host=146.220.183.10;port=3306;dbname=kaltura; 2015-07-06 09:56:04 [0.001022] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: /* LU-LX-STR21[1686812078][propel] / SELECT kuser.ID, kuser.LOGIN_DATA_ID, kuser.IS_ADMIN, kuser.SCREEN_NAME, kuser.FULL_NAME, kuser.FIRST_NAME, kuser.LAST_NAME, kuser.EMAIL, kuser.SHA1_PASSWORD, kuser.SALT, kuser.DATE_OF_BIRTH, kuser.COUNTRY, kuser.STATE, kuser.CITY, kuser.ZIP, kuser.URL_LIST, kuser.PICTURE, kuser.ICON, kuser.ABOUT_ME, kuser.TAGS, kuser.TAGLINE, kuser.NETWORK_HIGHSCHOOL, kuser.NETWORK_COLLEGE, kuser.NETWORK_OTHER, kuser.MOBILE_NUM, kuser.MATURE_CONTENT, kuser.GENDER, kuser.REGISTRATION_IP, kuser.REGISTRATION_COOKIE, kuser.IM_LIST, kuser.VIEWS, kuser.FANS, kuser.ENTRIES, kuser.STORAGE_SIZE, kuser.PRODUCED_KSHOWS, kuser.STATUS, kuser.CREATED_AT, kuser.UPDATED_AT, kuser.PARTNER_ID, kuser.DISPLAY_IN_SEARCH, kuser.PARTNER_DATA, kuser.PUSER_ID, kuser.ADMIN_TAGS, kuser.INDEXED_PARTNER_DATA_INT, kuser.INDEXED_PARTNER_DATA_STRING, kuser.CUSTOM_DATA, kuser.TYPE FROM kuser WHERE kuser.PARTNER_ID='111' AND kuser.PUSER_ID='' AND kuser.STATUS<>'2' ORDER BY kuser.UPDATEDAT DESC LIMIT 1 2015-07-06 09:56:04 [0.001135] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: Sql took - 0.00085997581481934 seconds 2015-07-06 09:56:04 [0.002904] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: / LU-LX-STR21[1686812078][propel] _/ SELECT invalid_session.ID, invalid_session.KS, invalid_session.KS_VALID_UNTIL, invalid_session.CREATED_AT, invalid_session.ACTIONS_LIMIT, invalid_session.TYPE FROM invalid_session WHERE (invalid_session.TYPE='0' AND invalidsession.KS='20cd2d33be16c00f8f8c6f6693a52ba290060245') LIMIT 1 2015-07-06 09:56:04 [0.000776] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: Sql took - 0.00049614906311035 seconds 2015-07-06 09:56:04 [0.002957] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: / LU-LX-STR21[1686812078][propel] _/ SELECT permission.ID, permission.TYPE, permission.NAME, permission.FRIENDLY_NAME, permission.DESCRIPTION, permission.PARTNER_ID, permission.STATUS, permission.DEPENDS_ON_PERMISSION_NAMES, permission.TAGS, permission.CREATED_AT, permission.UPDATED_AT, permission.CUSTOM_DATA FROM permission WHERE permission.PARTNER_ID IN ('111','0') AND permission.NAME='FEATURE_END_USERREPORTS' ORDER BY permission.STATUS ASC LIMIT 1 2015-07-06 09:56:04 [0.001012] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: Sql took - 0.00073599815368652 seconds 2015-07-06 09:56:04 [0.001501] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: / LU-LX-STR21[1686812078][propel] _/ SELECT kuser.ID, kuser.LOGIN_DATA_ID, kuser.IS_ADMIN, kuser.SCREEN_NAME, kuser.FULL_NAME, kuser.FIRST_NAME, kuser.LAST_NAME, kuser.EMAIL, kuser.SHA1_PASSWORD, kuser.SALT, kuser.DATE_OF_BIRTH, kuser.COUNTRY, kuser.STATE, kuser.CITY, kuser.ZIP, kuser.URL_LIST, kuser.PICTURE, kuser.ICON, kuser.ABOUT_ME, kuser.TAGS, kuser.TAGLINE, kuser.NETWORK_HIGHSCHOOL, kuser.NETWORK_COLLEGE, kuser.NETWORK_OTHER, kuser.MOBILE_NUM, kuser.MATURE_CONTENT, kuser.GENDER, kuser.REGISTRATION_IP, kuser.REGISTRATION_COOKIE, kuser.IM_LIST, kuser.VIEWS, kuser.FANS, kuser.ENTRIES, kuser.STORAGE_SIZE, kuser.PRODUCED_KSHOWS, kuser.STATUS, kuser.CREATED_AT, kuser.UPDATED_AT, kuser.PARTNER_ID, kuser.DISPLAY_IN_SEARCH, kuser.PARTNER_DATA, kuser.PUSER_ID, kuser.ADMIN_TAGS, kuser.INDEXED_PARTNER_DATA_INT, kuser.INDEXED_PARTNER_DATA_STRING, kuser.CUSTOM_DATA, kuser.TYPE FROM kuser WHERE kuser.PARTNER_ID='111' AND kuser.PUSERID IS NULL AND kuser.STATUS<>'2' LIMIT 1 2015-07-06 09:56:04 [0.001077] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: Sql took - 0.0008080005645752 seconds 2015-07-06 09:56:04 [0.001492] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: / LU-LX-STR21[1686812078][propel] _/ SELECT partner.ID, partner.PARTNER_NAME, partner.PARTNER_ALIAS, partner.URL1, partner.URL2, partner.SECRET, partner.ADMIN_SECRET, partner.MAX_NUMBER_OF_HITS_PER_DAY, partner.APPEAR_IN_SEARCH, partner.DEBUG_LEVEL, partner.CREATED_AT, partner.UPDATED_AT, partner.ANONYMOUS_KUSER_ID, partner.KS_MAX_EXPIRY_IN_SECONDS, partner.CREATE_USER_ON_DEMAND, partner.PREFIX, partner.ADMIN_NAME, partner.ADMIN_EMAIL, partner.DESCRIPTION, partner.COMMERCIAL_USE, partner.MODERATE_CONTENT, partner.NOTIFY, partner.CUSTOM_DATA, partner.SERVICE_CONFIG_ID, partner.STATUS, partner.CONTENT_CATEGORIES, partner.TYPE, partner.PHONE, partner.DESCRIBE_YOURSELF, partner.ADULT_CONTENT, partner.PARTNER_PACKAGE, partner.USAGE_PERCENT, partner.STORAGE_USAGE, partner.EIGHTY_PERCENT_WARNING, partner.USAGE_LIMIT_WARNING, partner.MONITOR_USAGE, partner.PRIORITY_GROUP_ID, partner.PARTNER_GROUP_TYPE, partner.PARTNER_PARENT_ID, partner.KMCVERSION FROM partner WHERE partner.ID='111' 2015-07-06 09:56:04 [0.001127] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: Sql took - 0.00086307525634766 seconds 2015-07-06 09:56:04 [0.001730] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: / LU-LX-STR21[1686812078][propel] _/ SELECT kuser_to_user_role.ID, kuser_to_user_role.KUSER_ID, kuser_to_user_role.USER_ROLE_ID, kuser_to_user_role.CREATED_AT, kuser_to_user_role.UPDATED_AT FROM kuser_to_user_role WHERE kuser_to_user_role.KUSERID='181' 2015-07-06 09:56:04 [0.000661] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: Sql took - 0.00040912628173828 seconds 2015-07-06 09:56:04 [0.001849] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: / LU-LX-STR21[1686812078][propel] _/ SELECT user_role.ID FROM user_role WHERE user_role.STR_ID='BASE_USER_SESSION_ROLE' AND user_role.STATUS<>'3' LIMIT 1 2015-07-06 09:56:04 [0.000724] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: Sql took - 0.00047016143798828 seconds 2015-07-06 09:56:04 [0.000582] [81.92.239.229] [1686812078] [API] [UserRolePeer::getIdByStrId] DEBUG: UserRole str_id [BASE_USER_SESSION_ROLE] mapped to id [1] - stored in cache 2015-07-06 09:56:04 [0.000595] [81.92.239.229] [1686812078] [API] [kPermissionManager::getFromCache] DEBUG: No cache value found for key [role_1_partner_111_internal0] 2015-07-06 09:56:04 [0.000814] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: / LU-LX-STR21[1686812078][propel] _/ SELECT user_role.ID, user_role.STR_ID, user_role.NAME, user_role.DESCRIPTION, user_role.PARTNER_ID, user_role.STATUS, user_role.PERMISSION_NAMES, user_role.TAGS, user_role.CREATED_AT, user_role.UPDATED_AT, user_role.CUSTOM_DATA, user_role.SYSTEM_NAME FROM user_role WHERE userrole.ID='1' 2015-07-06 09:56:04 [0.000716] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: Sql took - 0.00046491622924805 seconds 2015-07-06 09:56:04 [0.001294] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: / LU-LX-STR21[1686812078][propel] _/ SELECT permission.ID, permission.TYPE, permission.NAME, permission.FRIENDLY_NAME, permission.DESCRIPTION, permission.PARTNER_ID, permission.STATUS, permission.DEPENDS_ON_PERMISSION_NAMES, permission.TAGS, permission.CREATED_AT, permission.UPDATED_AT, permission.CUSTOM_DATA FROM permission WHERE permission.NAME IN ('BASE_USER_SESSION_PERMISSION') AND permission.PARTNERID IN ('111','0') 2015-07-06 09:56:04 [0.000898] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: Sql took - 0.00060915946960449 seconds 2015-07-06 09:56:04 [0.001321] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: / LU-LX-STR21[1686812078][propel] _/ SELECT permission.NAME FROM permission WHERE permission.PARTNERID='111' AND permission.TYPE IN ('3','2') AND (permission.STATUS='1' AND permission.STATUS<>'3') 2015-07-06 09:56:04 [0.001042] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: Sql took - 0.00078296661376953 seconds 2015-07-06 09:56:04 [0.002417] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: / LU-LX-STR21[1686812078][propel] _/ SELECT permission_to_permission_item.ID, permission_to_permission_item.PERMISSION_ID, permission_to_permission_item.PERMISSION_ITEM_ID, permission_to_permission_item.CREATED_AT, permission_to_permission_item.UPDATED_AT, permission.ID, permission.TYPE, permission.NAME, permission.FRIENDLY_NAME, permission.DESCRIPTION, permission.PARTNER_ID, permission.STATUS, permission.DEPENDS_ON_PERMISSION_NAMES, permission.TAGS, permission.CREATED_AT, permission.UPDATED_AT, permission.CUSTOM_DATA, permission_item.ID, permission_item.TYPE, permission_item.PARTNER_ID, permission_item.PARAM_1, permission_item.PARAM_2, permission_item.PARAM_3, permission_item.PARAM_4, permission_item.PARAM_5, permission_item.TAGS, permission_item.CREATED_AT, permission_item.UPDATED_AT, permission_item.CUSTOM_DATA FROM permission_to_permission_item LEFT JOIN permission ON (permission_to_permission_item.PERMISSION_ID=permission.ID) LEFT JOIN permission_item ON (permission_to_permission_item.PERMISSION_ITEM_ID=permission_item.ID) WHERE permission.NAME IN ('BASE_USER_SESSION_PERMISSION','ALWAYS_ALLOWED_ACTIONS') AND permission.PARTNER_ID IN ('0','111') AND permission_item.PARTNERID IN ('0','111') 2015-07-06 09:56:04 [0.006464] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: Sql took - 0.0061888694763184 seconds 2015-07-06 09:56:04 [0.041892] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: / LU-LX-STR21[1686812078][propel] _/ SELECT permission.ID, permission.TYPE, permission.NAME, permission.FRIENDLY_NAME, permission.DESCRIPTION, permission.PARTNER_ID, permission.STATUS, permission.DEPENDS_ON_PERMISSION_NAMES, permission.TAGS, permission.CREATED_AT, permission.UPDATED_AT, permission.CUSTOM_DATA FROM permission WHERE permission.PARTNER_ID='111' AND permission.TYPE='4' AND permission.STATUS<>'3' 2015-07-06 09:56:04 [0.000689] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: Sql took - 0.00052404403686523 seconds 2015-07-06 09:56:04 [0.000574] [81.92.239.229] [1686812078] [API] [kPermissionManager::storeInCache] DEBUG: New value stored in cache for key [role_1_partner_111_internal0] map hash [a9d87d7891c0ec0dd592150f75d48e39] 2015-07-06 09:56:04 [0.000754] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: / LU-LX-STR21[1686812078][propel] */ SELECT permission.ID, permission.TYPE, permission.NAME, permission.FRIENDLY_NAME, permission.DESCRIPTION, permission.PARTNER_ID, permission.STATUS, permission.DEPENDS_ON_PERMISSION_NAMES, permission.TAGS, permission.CREATED_AT, permission.UPDATED_AT, permission.CUSTOM_DATA FROM permission WHERE permission.PARTNER_ID IN ('111','0') AND permission.NAME='FEATURE_ENTITLEMENT' ORDER BY permission.STATUS ASC LIMIT 1 2015-07-06 09:56:04 [0.000611] [81.92.239.229] [1686812078] [API] [KalturaStatement->execute] DEBUG: Sql took - 0.00045394897460938 seconds 2015-07-06 09:56:04 [0.000308] [81.92.239.229] [1686812078] [API] [KalturaActionReflector->initService] DEBUG: Create or retrieve instance of action class [ReportService] 2015-07-06 09:56:04 [0.000257] [81.92.239.229] [1686812078] [API] [kPermissionManager::isActionPermitted] ERR: exception 'Exception' with message 'Service is not permitted' in /opt/kaltura/app/infra/log/KalturaLog.php:82 Stack trace:

0 /opt/kaltura/app/alpha/apps/kaltura/lib/kPermissionManager.php(801): KalturaLog::err('Service is not ...')

1 /opt/kaltura/app/api_v3/lib/KalturaBaseService.php(183): kPermissionManager::isActionPermitted('report', 'serve')

2 /opt/kaltura/app/api_v3/lib/KalturaBaseService.php(130): KalturaBaseService->isPermitted(false)

3 /opt/kaltura/app/api_v3/services/ReportService.php(13): KalturaBaseService->initService('report', 'report', 'serve')

4 /opt/kaltura/app/api_v3/lib/KalturaActionReflector.php(256): ReportService->initService('report', 'report', 'serve')

5 /opt/kaltura/app/api_v3/lib/KalturaDispatcher.php(115): KalturaActionReflector->initService(NULL)

6 /opt/kaltura/app/api_v3/lib/KalturaFrontController.php(111): KalturaDispatcher->dispatch('report', 'serve', Array)

7 /opt/kaltura/app/api_v3/web/index.php(20): KalturaFrontController->run()

8 {main}

2015-07-06 09:56:04 [0.000177] [81.92.239.229] [1686812078] [API] [KalturaBaseService->isPermitted] ERR: exception 'Exception' with message 'Action is not permitted' in /opt/kaltura/app/infra/log/KalturaLog.php:82 Stack trace:

0 /opt/kaltura/app/api_v3/lib/KalturaBaseService.php(190): KalturaLog::err('Action is not p...')

1 /opt/kaltura/app/api_v3/lib/KalturaBaseService.php(130): KalturaBaseService->isPermitted(false)

2 /opt/kaltura/app/api_v3/services/ReportService.php(13): KalturaBaseService->initService('report', 'report', 'serve')

3 /opt/kaltura/app/api_v3/lib/KalturaActionReflector.php(256): ReportService->initService('report', 'report', 'serve')

4 /opt/kaltura/app/api_v3/lib/KalturaDispatcher.php(115): KalturaActionReflector->initService(NULL)

5 /opt/kaltura/app/api_v3/lib/KalturaFrontController.php(111): KalturaDispatcher->dispatch('report', 'serve', Array)

6 /opt/kaltura/app/api_v3/web/index.php(20): KalturaFrontController->run()

7 {main}

2015-07-06 09:56:04 [0.000209] [81.92.239.229] [1686812078] [API] [KalturaBaseService->isPermitted] ERR: exception 'Exception' with message 'Kaltura network is not allowed' in /opt/kaltura/app/infra/log/KalturaLog.php:82 Stack trace:

0 /opt/kaltura/app/api_v3/lib/KalturaBaseService.php(199): KalturaLog::err('Kaltura network...')

1 /opt/kaltura/app/api_v3/lib/KalturaBaseService.php(130): KalturaBaseService->isPermitted(false)

2 /opt/kaltura/app/api_v3/services/ReportService.php(13): KalturaBaseService->initService('report', 'report', 'serve')

3 /opt/kaltura/app/api_v3/lib/KalturaActionReflector.php(256): ReportService->initService('report', 'report', 'serve')

4 /opt/kaltura/app/api_v3/lib/KalturaDispatcher.php(115): KalturaActionReflector->initService(NULL)

5 /opt/kaltura/app/api_v3/lib/KalturaFrontController.php(111): KalturaDispatcher->dispatch('report', 'serve', Array)

6 /opt/kaltura/app/api_v3/web/index.php(20): KalturaFrontController->run()

7 {main}

2015-07-06 09:56:04 [0.000618] [81.92.239.229] [1686812078] [API] [KalturaFrontController->getExceptionObject] ERR: exception 'KalturaAPIException' with message 'The access to service [report->serve] is forbidden' in /opt/kaltura/app/api_v3/lib/KalturaBaseService.php:135 Stack trace:

0 /opt/kaltura/app/api_v3/services/ReportService.php(13): KalturaBaseService->initService('report', 'report', 'serve')

1 /opt/kaltura/app/api_v3/lib/KalturaActionReflector.php(256): ReportService->initService('report', 'report', 'serve')

2 /opt/kaltura/app/api_v3/lib/KalturaDispatcher.php(115): KalturaActionReflector->initService(NULL)

3 /opt/kaltura/app/api_v3/lib/KalturaFrontController.php(111): KalturaDispatcher->dispatch('report', 'serve', Array)

4 /opt/kaltura/app/api_v3/web/index.php(20): KalturaFrontController->run()

5 {main}

2015-07-06 09:56:04 [0.000365] [81.92.239.229] [1686812078] [API] [KalturaFrontController->serializeResponse] DEBUG: Serialize start 2015-07-06 09:56:04 [0.000205] [81.92.239.229] [1686812078] [API] [KalturaFrontController->serializeResponse] DEBUG: Serialize took - 0.00034284591674805 2015-07-06 09:56:04 [0.000133] [81.92.239.229] [1686812078] [API] [global] INFO: API-end [0.10348200798035] 2015-07-06 09:56:04 [0.000116] [81.92.239.229] [1686812078] [API] [global] DEBUG:

When are the results of each Permission SQL queries when I run them manually: QUery 1:

mysql> SELECT permission.ID, permission.TYPE, permission.NAME, permission.FRIENDLY_NAME, permission.DESCRIPTION, permission.PARTNER_ID, permission.STATUS, permission.DEPENDS_ON_PERMISSION_NAMES, permission.TAGS, permission.CREATED_AT, permission.UPDATED_AT, permission.CUSTOM_DATA FROM permission WHERE permission.PARTNER_ID IN ('111','0') AND permission.NAME='FEATURE_END_USER_REPORTS' ORDER BY permission.STATUS ASC LIMIT 1 -> \G; *** 1. row *** ID: 2431 TYPE: 2 NAME: FEATURE_END_USER_REPORTS FRIENDLY_NAME: End-User Reports DESCRIPTION: End-User Reports PARTNER_ID: 111 STATUS: 1 DEPENDS_ON_PERMISSION_NAMES: NULL TAGS: NULL CREATED_AT: 2014-07-08 15:39:06 UPDATED_AT: 2014-07-08 15:39:06 CUSTOM_DATA: NULL 1 row in set (0.00 sec)

Query 2:

mysql> SELECT permission.NAME FROM permission WHERE permission.PARTNER_ID='111' AND permission.TYPE IN ('3','2') AND (permission.STATUS='1' AND permission.STATUS<>'3') -> \G; *** 1. row *** NAME: FEATURE_ANALYTICS_TAB *** 2. row *** NAME: FEATURE_PREVIEW_AND_EMBED_V2 *** 3. row *** NAME: FEATURE_HTML5_V2_PLAYER_PREVIEW *** 4. row *** NAME: FEATURE_VAST *** 5. row *** NAME: ANNOTATION_PLUGIN_PERMISSION *** 6. row *** NAME: FEATURE_END_USER_REPORTS *** 7. row *** NAME: 99_FEATURE_V2_FLAVORS *** 8. row *** NAME: FEATURE_PLATFORM_REPORTS *** 9. row *** NAME: FEATURE_SHOW_FLASH_STUDIO *** 10. row *** NAME: FEATURE_508_PLAYERS *** 11. row *** NAME: IMPORT_REMOTE_CAPTION_FOR_INDEXING *** 12. row *** NAME: FEATURE_CLIP_MEDIA *** 13. row *** NAME: FEATURE_ENTRY_REPLACEMENT *** 14. row *** NAME: FEATURE_DISABLE_KMC_KDP_ALERTS *** 15. row *** NAME: FEATURE_LIKE *** 16. row *** NAME: FEATURE_PS2_PERMISSIONS_VALIDATION *** 17. row *** NAME: FEATURE_REMOTE_STORAGE *** 18. row *** NAME: FEATURE_LIVE_STREAM *** 19. row *** NAME: FEATURE_LIVE_STREAM_RECORD *** 20. row *** NAME: FEATURE_KALTURA_LIVE_STREAM *** 21. row *** NAME: FEATURE_KALTURA_LIVE_STREAM_TRANSCODE *** 22. row *** NAME: FEATURE_LIVE_CHANNEL *** 23. row *** NAME: FEATURE_REMOTE_STORAGE_RULE *** 24. row *** NAME: FEATURE_MOBILE_FLAVORS *** 25. row *** NAME: FEATURE_V1_FLAVORS *** 26. row *** NAME: FEATURE_V2_FLAVORS *** 27. row *** NAME: FEATURE_MULTI_FLAVOR_INGESTION *** 28. row *** NAME: FEATURE_REMOTE_STORAGE_INGEST *** 29. row *** NAME: FEATURE_EMAIL_INGEST *** 30. row *** NAME: FEATURE_GENERATE_WEBVTT_CAPTIONS *** 31. row *** NAME: FEATURE_KMC_AKAMAI_UNIVERSAL_LIVE_STREAM_PROVISION *** 32. row *** NAME: WIDEVINE_ENABLE_DISTRIBUTION_DATES_SYNC *** 33. row *** NAME: FEATURE_KMC_ALLOW_FRAME *** 34. row *** NAME: KONTIKI_PLUGIN_PERMISSION *** 35. row *** NAME: FEATURE_SHOW_HTML_STUDIO *** 36. row *** NAME: FEATURE_HYBRID_ECDN *** 37. row *** NAME: FEATURE_DRAFT_ENTRY_CONV_PROF_SELECTION *** 38. row *** NAME: FEATURE_PUSH_PUBLISH *** 39. row *** NAME: FEATURE_REAL_TIME_REPORTS *** 40. row *** NAME: DRM_CENC_FLAVORS *** 41. row *** NAME: CUEPOINT_PLUGIN_PERMISSION *** 42. row *** NAME: ADCUEPOINT_PLUGIN_PERMISSION *** 43. row *** NAME: CAPTION_PLUGIN_PERMISSION *** 44. row *** NAME: CAPTIONSEARCH_PLUGIN_PERMISSION *** 45. row *** NAME: METADATA_PLUGIN_PERMISSION *** 46. row *** NAME: FEATURE_ENTITLEMENT *** 47. row *** NAME: FEATURE_END_USER_MANAGE *** 48. row *** NAME: ATTACHMENT_PLUGIN_PERMISSION *** 49. row *** NAME: EVENTNOTIFICATION_PLUGIN_PERMISSION *** 50. row *** NAME: CONTENTDISTRIBUTION_PLUGIN_PERMISSION *** 51. row *** NAME: DROPFOLDER_PLUGIN_PERMISSION *** 52. row *** NAME: SCHEDULEDTASK_PLUGIN_PERMISSION *** 53. row *** NAME: WIDEVINE_PLUGIN_PERMISSION *** 54. row *** NAME: DRM_PLUGIN_PERMISSION

Query 3:

mysql> SELECT permission.ID, permission.TYPE, permission.NAME, permission.FRIENDLY_NAME, permission.DESCRIPTION, permission.PARTNER_ID, permission.STATUS, permission.DEPENDS_ON_PERMISSION_NAMES, permission.TAGS, permission.CREATED_AT, permission.UPDATED_AT, permission.CUSTOM_DATA FROM permission WHERE permission.PARTNER_ID='111' AND permission.TYPE='4' AND permission.STATUS<>'3' -> \G; Empty set (0.00 sec)

Query 4:

mysql> SELECT permission.ID, permission.TYPE, permission.NAME, permission.FRIENDLY_NAME, permission.DESCRIPTION, permission.PARTNER_ID, permission.STATUS, permission.DEPENDS_ON_PERMISSION_NAMES, permission.TAGS, permission.CREATED_AT, permission.UPDATED_AT, permission.CUSTOM_DATA FROM permission WHERE permission.PARTNER_ID IN ('111','0') AND permission.NAME='FEATURE_ENTITLEMENT' ORDER BY permission.STATUS ASC LIMIT 1 -> \G; *** 1. row *** ID: 2551 TYPE: 3 NAME: FEATURE_ENTITLEMENT FRIENDLY_NAME: End-User Entitlements DESCRIPTION: End-User Entitlements PARTNER_ID: 111 STATUS: 1 DEPENDS_ON_PERMISSION_NAMES: NULL TAGS: NULL CREATED_AT: 2014-07-08 15:39:06 UPDATED_AT: 2014-07-08 15:39:06 CUSTOM_DATA: NULL 1 row in set (0.00 sec)

Query 5:

mysql> SELECT permission.ID, permission.TYPE, permission.NAME, permission.FRIENDLY_NAME, permission.DESCRIPTION, permission.PARTNER_ID, permission.STATUS, permission.DEPENDS_ON_PERMISSION_NAMES, permission.TAGS, permission.CREATED_AT, permission.UPDATED_AT, permission.CUSTOM_DATA FROM permission WHERE permission.NAME IN ('BASE_USER_SESSION_PERMISSION') AND permission.PARTNER_ID IN ('111','0') -> \G; *** 1. row *** ID: 621 TYPE: 1 NAME: BASE_USER_SESSION_PERMISSION FRIENDLY_NAME: User session permission DESCRIPTION: PARTNER_ID: 0 STATUS: 1 DEPENDS_ON_PERMISSION_NAMES: TAGS: CREATED_AT: 2014-07-08 15:24:43 UPDATED_AT: 2015-06-09 17:19:12 CUSTOM_DATA: a:1:{s:13:"partner_group";s:0:"";} 1 row in set (0.00 sec)

I noticed the empty Empty answer for Query 3, so I tried to change manually the Permission type to 4 for the permission name _FEATURE_END_USERREPORTS but it did not solve the issue.

Thanks in advance for your help,

Best regards,

Patrick

jessp01 commented 9 years ago

Can you paste the output for: mysql> SELECT permission.ID, permission.TYPE, permission.NAME, permission.FRIENDLY_NAME, permission.STATUS FROM permission WHERE permission.PARTNER_ID='111'

The status for FEATURE_ANALYTICS_TAB FEATURE_END_USER_REPORTS FEATURE_PLATFORM_REPORTS

Should be 1. What is it in your case?

Patryk57 commented 9 years ago

Hi again,

Permission statuses are all set to 1:

mysql> SELECT permission.ID, permission.TYPE, permission.NAME, permission.FRIENDLY_NAME, permission.STATUS FROM permission WHERE permission.PARTNER_ID='111' and NAME="FEATURE_ANALYTICS_TAB"\G; *** 1. row *** ID: 2361 TYPE: 2 NAME: FEATURE_ANALYTICS_TAB FRIENDLY_NAME: Reports and Analytics STATUS: 1 1 row in set (0.00 sec)

mysql> SELECT permission.ID, permission.TYPE, permission.NAME, permission.FRIENDLY_NAME, permission.STATUS FROM permission WHERE permission.PARTNER_ID='111' and NAME="FEATURE_END_USER_REPORTS"\G; *** 1. row *** ID: 2431 TYPE: 2 NAME: FEATURE_END_USER_REPORTS FRIENDLY_NAME: End-User Reports STATUS: 1

mysql> SELECT permission.ID, permission.TYPE, permission.NAME, permission.FRIENDLY_NAME, permission.STATUS FROM permission WHERE permission.PARTNER_ID='111' and NAME="FEATURE_PLATFORM_REPORTS"\G; *** 1. row *** ID: 2451 TYPE: 2 NAME: FEATURE_PLATFORM_REPORTS FRIENDLY_NAME: Platform Reports STATUS: 1 1 row in set (0.00 sec)

Patryk57 commented 9 years ago

Hi @kaltura-hooks , @jessp01 , @mdale and the rest of the Kaltura Community,

Do you have any other hint that could help me to debug this? Cause I have no more ideas... Is there a special plugin to uncomment in the app/configuration/plugin.ini to activate while installing Kaltura in order to activate this function? ( By the way, is there anywhere a description of all plugins?) Or maybe a feature to activate in partner cofiguration page? They are currently set to:

Many thanks in advance for your help,

Best regards,

Patrick

tan-tan-kanarek commented 9 years ago

Please paste the results of the following query: SELECT permission_to_permission_item.permission_item_id, permission_to_permission_item.permission_id, permission.name, permission.type, permission.status FROM permission_to_permission_item INNER JOIN permission_item ON permission_to_permission_item.permission_item_id = permission_item.id INNER JOIN permission ON permission_to_permission_item.permission_id = permission.id WHERE permission_item.param_1 = 'report' AND permission_item.param_2 = 'serve' AND permission.partner_id IN (0, 111);

Thanks, T.

Patryk57 commented 9 years ago

Hi @tan-tan-kanarek ,

Thanks for your help.

You query returns an empty set:

mysql> SELECT permission_to_permission_item.permission_item_id, > permission_to_permission_item.permission_id, permission.name, permission.type, permission.status FROM permission_to_permission_item -> INNER JOIN permission_item -> ON permission_to_permission_item.permission_item_id = permission_item.id -> INNER JOIN permission -> ON permission_to_permission_item.permission_id = permission.id -> WHERE permission_item.param_1 = 'report' -> AND permission_item.param_2 = 'serve' -> AND permission.partner_id IN (0, 111); Empty set (0.01 sec)

But if I remove the _permission_item.param2 = 'serve', I get the following answer:

mysql> SELECT permission_to_permission_item.permission_item_id, permission_to_permission_item.permission_id, permission.name, permission.type, permission.status FROM permission_to_permission_item INNER JOIN permission_item ON permission_to_permission_item.permission_item_id = permission_item.id INNER JOIN permission ON permission_to_permission_item.permission_id = permission.id WHERE permission_item.param_1 = 'report' AND permission.partner_id IN (0, 111); +--------------------+---------------+----------------+------+--------+ | permission_item_id | permission_id | name | type | status | +--------------------+---------------+----------------+------+--------+ | 4711 | 561 | ANALYTICS_BASE | 1 | 1 | | 4721 | 561 | ANALYTICS_BASE | 1 | 1 | | 4731 | 561 | ANALYTICS_BASE | 1 | 1 | | 4741 | 561 | ANALYTICS_BASE | 1 | 1 | | 4751 | 561 | ANALYTICS_BASE | 1 | 1 | | 4761 | 561 | ANALYTICS_BASE | 1 | 1 | | 4771 | 561 | ANALYTICS_BASE | 1 | 1 | | 4781 | 561 | ANALYTICS_BASE | 1 | 1 | | 4721 | 1341 | KMC_READ_ONLY | 1 | 1 | | 4751 | 1341 | KMC_READ_ONLY | 1 | 1 | +--------------------+---------------+----------------+------+--------+ 10 rows in set (0.00 sec)

So it seems like I am not able to serve the reports I generate. Do you know how I can add this permission?

Many thanks in advance,

Patrick

Patryk57 commented 9 years ago

What is the expected answer for your query? That could help me to debug.

Thanks in advance,

Patrick

tan-tan-kanarek commented 9 years ago

Try running the following script (assuming you installed under /opt/kaltura): php /opt/kaltura/app/alpha/scripts/utils/permissions/addPermissionsAndItems.php /opt/kaltura/app/deployment/permissions/service.report.ini

In the log file of this execution I expect that you'll see at least one insert into permission_item table, then try again the sql query (the one with all the joins). If you get results, then you can probably can reload your apache to clear the APC cache and retry.

tan-tan-kanarek commented 9 years ago

The query should return few columns with names ANALYTICS_BASE, CONTENT_MANAGE_BASE, ALWAYS_ALLOWED_ACTIONS, BASE_USER_SESSION_PERMISSION, type 1 and status 1, the ids are different in every environment.

Patryk57 commented 9 years ago

Awesome! This script has solved my issue. I was not aware about this script.

Thanks you @tan-tan-kanarek for helping me fixing this.

tan-tan-kanarek commented 9 years ago

Glad to help.