<!-- 
RSS generated by JIRA (1001.0.0-SNAPSHOT#100246-sha1:7a5c50119eb0633d306e14180817ddef5e80c75d) at Thu Feb 08 23:12:25 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary add field=key&field=summary to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>FOLIO Jira</title>
    <link>https://folio-org.atlassian.net</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>1001.0.0-SNAPSHOT</version>
        <build-number>100246</build-number>
        <build-date>07-02-2024</build-date>
    </build-info>

<item>
            <title>[FOLIO-1312] Intermittant ansible deployment errors during PRs</title>
                <link>https://folio-org.atlassian.net/browse/FOLIO-1312</link>
                <project id="10290" key="FOLIO">FOLIO</project>
                    <description>&lt;p&gt;The following auth error occurs every so often while loading sample circulation data for a tenant during PR regression testing initialization: &lt;/p&gt;

&lt;p&gt;ASK &lt;span class=&quot;error&quot;&gt;&amp;#91;folio-ansible/roles/mod-circulation-data : Load loan policies&amp;#93;&lt;/span&gt; ***********&lt;br/&gt;
changed: &lt;span class=&quot;error&quot;&gt;&amp;#91;localhost&amp;#93;&lt;/span&gt; =&amp;gt; (item=/home/jenkins/workspace/folio-org/ui-users/PR-413/folio-infrastructure/CI/ansible/folio-ansible/roles/mod-circulation-data/files/loan-policies/one-hour.json)&lt;br/&gt;
failed: &lt;span class=&quot;error&quot;&gt;&amp;#91;localhost&amp;#93;&lt;/span&gt; (item=/home/jenkins/workspace/folio-org/ui-users/PR-413/folio-infrastructure/CI/ansible/folio-ansible/roles/mod-circulation-data/files/loan-policies/rolling.json) =&amp;gt; &lt;/p&gt;
{&quot;changed&quot;: false, &quot;connection&quot;: &quot;close&quot;, &quot;content&quot;: &quot;Access requires permission: circulation-storage.loan-policies.item.post&quot;, &quot;item&quot;: &quot;/home/jenkins/workspace/folio-org/ui-users/PR-413/folio-infrastructure/CI/ansible/folio-ansible/roles/mod-circulation-data/files/loan-policies/rolling.json&quot;, &quot;msg&quot;: &quot;Status code was 403 and not [201, 422, 500]: HTTP Error 403: Forbidden&quot;, &quot;redirected&quot;: false, &quot;status&quot;: 403, &quot;transfer_encoding&quot;: &quot;chunked&quot;, &quot;url&quot;: &quot;http://folio-snapshot-stable.aws.indexdata.com:9130/loan-policy-storage/loan-policies&quot;, &quot;x_okapi_trace&quot;: &quot;POST mod-authtoken-1.4.1-SNAPSHOT.21 http://10.36.1.145:9135/loan-policy-storage/loan-policies : 403 19950us&quot;}
&lt;p&gt;	to retry, use: --limit @/home/jenkins/workspace/folio-org/ui-users/PR-413/folio-infrastructure/CI/ansible/folioci-pr.retry&lt;/p&gt;</description>
                <environment></environment>
        <key id="80672">FOLIO-1312</key>
            <summary>Intermittant ansible deployment errors during PRs</summary>
                <type id="10001" iconUrl="https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10303?size=medium">Bug</type>
                                            <priority id="10002" iconUrl="https://dev.folio.org/assets/jira-priority/jira-p3.svg">P3</priority>
                        <status id="6" iconUrl="https://folio-org.atlassian.net/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="green"/>
                                    <resolution id="10003">Done</resolution>
                                                        <assignee accountid="5f9abc1eb45b2e007453f423">John Malconian</assignee>
                                                                <reporter accountid="5f9abc1eb45b2e007453f423">John Malconian</reporter>
                                    <labels>
                            <label>ci</label>
                            <label>sprint41</label>
                            <label>sprint42</label>
                            <label>sprint43</label>
                            <label>sprint44</label>
                            <label>sprint45</label>
                    </labels>
                <created>Tue, 26 Jun 2018 13:47:47 +0000</created>
                <updated>Mon, 12 Nov 2018 14:24:46 +0000</updated>
                            <resolved>Wed, 22 Aug 2018 13:39:50 +0000</resolved>
                                                                        <due></due>
                            <votes>0</votes>
                                    <watches>6</watches>
                                                                <comments>
                                                            <comment id="193872" author="5f9abc1eb45b2e007453f423" created="Tue, 26 Jun 2018 14:09:39 +0000"  >&lt;p&gt;Example occurances: &lt;/p&gt;

&lt;p&gt;Failure - &lt;a href=&quot;https://jenkins-aws.indexdata.com/job/folio-org/job/ui-users/view/change-requests/job/PR-413/8/console&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://jenkins-aws.indexdata.com/job/folio-org/job/ui-users/view/change-requests/job/PR-413/8/console&lt;/a&gt;&lt;/p&gt;</comment>
                                                            <comment id="193874" author="5f9abc1eb45b2e007453f423" created="Tue, 26 Jun 2018 14:36:15 +0000"  >&lt;p&gt;Subsequent success - &lt;a href=&quot;https://jenkins-aws.indexdata.com/job/folio-org/job/ui-users/view/change-requests/job/PR-413/9/&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://jenkins-aws.indexdata.com/job/folio-org/job/ui-users/view/change-requests/job/PR-413/9/&lt;/a&gt;&lt;/p&gt;</comment>
                                                            <comment id="193875" author="5f9abc1eb45b2e007453f423" created="Tue, 26 Jun 2018 14:39:14 +0000"  >&lt;p&gt;It appears the permission is added to the tenant admin user here on PR-413 Build 8:&lt;/p&gt;

&lt;p&gt;changed: &lt;span class=&quot;error&quot;&gt;&amp;#91;localhost&amp;#93;&lt;/span&gt; =&amp;gt; (item=&lt;/p&gt;
{u&apos;dummy&apos;: False, u&apos;permissionName&apos;: u&apos;circulation-storage.all&apos;, u&apos;displayName&apos;: u&apos;Circulation storage module - all permissions&apos;, u&apos;description&apos;: u&apos;Entire set of permissions needed to use the circulation storage module&apos;, u&apos;tags&apos;: [], u&apos;childOf&apos;: [], u&apos;visible&apos;: False, u&apos;subPermissions&apos;: [u&apos;circulation-storage.loans.collection.get&apos;, u&apos;circulation-storage.loans.item.get&apos;, u&apos;circulation-storage.loans.item.post&apos;, u&apos;circulation-storage.loans.item.put&apos;, u&apos;circulation-storage.loans.item.delete&apos;, u&apos;circulation-storage.loans.collection.delete&apos;, u&apos;circulation-storage.loans-history.collection.get&apos;, u&apos;circulation-storage.loan-rules.get&apos;, u&apos;circulation-storage.loan-rules.put&apos;, u&apos;circulation-storage.loan-policies.collection.get&apos;, u&apos;circulation-storage.loan-policies.item.get&apos;, u&apos;circulation-storage.loan-policies.item.post&apos;, u&apos;circulation-storage.loan-policies.item.put&apos;, u&apos;circulation-storage.loan-policies.item.delete&apos;, u&apos;circulation-storage.loan-policies.collection.delete&apos;, u&apos;circulation-storage.requests.collection.get&apos;, u&apos;circulation-storage.requests.item.get&apos;, u&apos;circulation-storage.requests.item.post&apos;, u&apos;circulation-storage.requests.item.put&apos;, u&apos;circulation-storage.requests.item.delete&apos;, u&apos;circulation-storage.requests.collection.delete&apos;, u&apos;circulation-storage.fixed-due-date-schedules.collection.delete&apos;, u&apos;circulation-storage.fixed-due-date-schedules.item.delete&apos;, u&apos;circulation-storage.fixed-due-date-schedules.item.put&apos;, u&apos;circulation-storage.fixed-due-date-schedules.item.post&apos;, u&apos;circulation-storage.fixed-due-date-schedules.item.get&apos;, u&apos;circulation-storage.fixed-due-date-schedules.collection.get&apos;, u&apos;circulation-storage.staff-slips.item.delete&apos;, u&apos;circulation-storage.staff-slips.collection.delete&apos;, u&apos;circulation-storage.staff-slips.collection.get&apos;, u&apos;circulation-storage.staff-slips.item.post&apos;, u&apos;circulation-storage.staff-slips.item.put&apos;, u&apos;circulation-storage.staff-slips.item.get&apos;], u&apos;mutable&apos;: False, u&apos;id&apos;: u&apos;a9e33958-888c-40ff-bb81-793649b6965b&apos;, u&apos;grantedTo&apos;: []}
&lt;p&gt;)&lt;/p&gt;

&lt;p&gt;And here on PR-413 Build 9: &lt;/p&gt;

&lt;p&gt;changed: &lt;span class=&quot;error&quot;&gt;&amp;#91;localhost&amp;#93;&lt;/span&gt; =&amp;gt; (item=&lt;/p&gt;
{u&apos;dummy&apos;: False, u&apos;permissionName&apos;: u&apos;circulation-storage.all&apos;, u&apos;displayName&apos;: u&apos;Circulation storage module - all permissions&apos;, u&apos;description&apos;: u&apos;Entire set of permissions needed to use the circulation storage module&apos;, u&apos;tags&apos;: [], u&apos;childOf&apos;: [], u&apos;visible&apos;: False, u&apos;subPermissions&apos;: [u&apos;circulation-storage.loans.collection.get&apos;, u&apos;circulation-storage.loans.item.get&apos;, u&apos;circulation-storage.loans.item.post&apos;, u&apos;circulation-storage.loans.item.put&apos;, u&apos;circulation-storage.loans.item.delete&apos;, u&apos;circulation-storage.loans.collection.delete&apos;, u&apos;circulation-storage.loans-history.collection.get&apos;, u&apos;circulation-storage.loan-rules.get&apos;, u&apos;circulation-storage.loan-rules.put&apos;, u&apos;circulation-storage.loan-policies.collection.get&apos;, u&apos;circulation-storage.loan-policies.item.get&apos;, u&apos;circulation-storage.loan-policies.item.post&apos;, u&apos;circulation-storage.loan-policies.item.put&apos;, u&apos;circulation-storage.loan-policies.item.delete&apos;, u&apos;circulation-storage.loan-policies.collection.delete&apos;, u&apos;circulation-storage.requests.collection.get&apos;, u&apos;circulation-storage.requests.item.get&apos;, u&apos;circulation-storage.requests.item.post&apos;, u&apos;circulation-storage.requests.item.put&apos;, u&apos;circulation-storage.requests.item.delete&apos;, u&apos;circulation-storage.requests.collection.delete&apos;, u&apos;circulation-storage.fixed-due-date-schedules.collection.delete&apos;, u&apos;circulation-storage.fixed-due-date-schedules.item.delete&apos;, u&apos;circulation-storage.fixed-due-date-schedules.item.put&apos;, u&apos;circulation-storage.fixed-due-date-schedules.item.post&apos;, u&apos;circulation-storage.fixed-due-date-schedules.item.get&apos;, u&apos;circulation-storage.fixed-due-date-schedules.collection.get&apos;, u&apos;circulation-storage.staff-slips.item.delete&apos;, u&apos;circulation-storage.staff-slips.collection.delete&apos;, u&apos;circulation-storage.staff-slips.collection.get&apos;, u&apos;circulation-storage.staff-slips.item.post&apos;, u&apos;circulation-storage.staff-slips.item.put&apos;, u&apos;circulation-storage.staff-slips.item.get&apos;], u&apos;mutable&apos;: False, u&apos;id&apos;: u&apos;2f2048b5-1438-43b5-85aa-6bdf56ab63fa&apos;, u&apos;grantedTo&apos;: []}
&lt;p&gt;)&lt;/p&gt;</comment>
                                                            <comment id="193878" author="5f9abc1eb45b2e007453f423" created="Tue, 26 Jun 2018 15:04:16 +0000"  >&lt;p&gt;Permissions for pr_413_8_admin: &lt;/p&gt;

&lt;p&gt;&lt;span class=&quot;error&quot;&gt;&amp;#91;malc@ip-10-36-20-124 scripts&amp;#93;&lt;/span&gt;$ curl -s -D - -X POST -d &apos;&lt;/p&gt;
{ &quot;username&quot;: &quot;pr_413_8_admin&quot;, &quot;password&quot;: &quot;admin&quot;}
&lt;p&gt;&apos; -H &apos;X-Okapi-Tenant: pr_413_8&apos; -H &apos;Accept: application/json, text/plain&apos; -H &apos;Content-Type: application/json&apos; &lt;a href=&quot;http://folio-snapshot-stable.aws.indexdata.com:9130/bl-users/login&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://folio-snapshot-stable.aws.indexdata.com:9130/bl-users/login&lt;/a&gt;&lt;br/&gt;
HTTP/1.1 201 Created&lt;br/&gt;
X-Okapi-Trace: POST mod-authtoken-1.4.1-SNAPSHOT.21 &lt;a href=&quot;http://10.36.1.145:9135/bl-users/login&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://10.36.1.145:9135/bl-users/login&lt;/a&gt; : 202 871us&lt;br/&gt;
Content-Type: application/json&lt;br/&gt;
x-okapi-token: eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJwcl80MTNfOF9hZG1pbiIsInVzZXJfaWQiOiIzZTBhYmY5ZC1jNmExLTQ0MDMtYjNjNS00MjQ2ZDExODk4ZGUiLCJ0ZW5hbnQiOiJwcl80MTNfOCJ9.vgGfVY43rPpbQ4pIvcOB6ICwmCloQ04RsI5F-IRZYT08S_stf5Sv7PChGVhzL3XDw27OhbiOfloi59aJQZwCLA&lt;br/&gt;
host: folio-snapshot-stable.aws.indexdata.com:9130&lt;br/&gt;
user-agent: curl/7.53.1&lt;br/&gt;
x-okapi-tenant: pr_413_8&lt;br/&gt;
accept: application/json, text/plain&lt;br/&gt;
x-okapi-request-id: 803481/bl-users&lt;br/&gt;
x-okapi-url: &lt;a href=&quot;http://10.36.1.145:9130&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://10.36.1.145:9130&lt;/a&gt;&lt;br/&gt;
x-okapi-permissions: []&lt;br/&gt;
X-Okapi-Trace: POST mod-users-bl-3.0.0-SNAPSHOT.17 &lt;a href=&quot;http://10.36.1.145:9134/bl-users/login&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://10.36.1.145:9134/bl-users/login&lt;/a&gt; : 201 59073us&lt;br/&gt;
Transfer-Encoding: chunked&lt;/p&gt;

&lt;p&gt;{&lt;br/&gt;
  &quot;user&quot; : {&lt;br/&gt;
    &quot;username&quot; : &quot;pr_413_8_admin&quot;,&lt;br/&gt;
    &quot;id&quot; : &quot;3e0abf9d-c6a1-4403-b3c5-4246d11898de&quot;,&lt;br/&gt;
    &quot;active&quot; : true,&lt;br/&gt;
    &quot;proxyFor&quot; : [ ],&lt;br/&gt;
    &quot;personal&quot; : &lt;/p&gt;
{
      &quot;lastName&quot; : &quot;ADMINISTRATOR&quot;,
      &quot;firstName&quot; : &quot;pr_413_8&quot;,
      &quot;email&quot; : &quot;admin@pr_413_8.example.org&quot;,
      &quot;addresses&quot; : [ ]
    }
&lt;p&gt;  },&lt;br/&gt;
  &quot;permissions&quot; : &lt;/p&gt;
{
    &quot;id&quot; : &quot;e1b32f6b-2393-4655-851a-13a614c3c2da&quot;,
    &quot;userId&quot; : &quot;3e0abf9d-c6a1-4403-b3c5-4246d11898de&quot;,
    &quot;permissions&quot; : [ &quot;perms.all&quot;, &quot;ui-checkin.all&quot;, &quot;ui-checkout.all&quot;, &quot;settings.checkout.enabled&quot;, &quot;ui-circulation.settings.fixed-due-date-schedules&quot;, &quot;settings.developer.enabled&quot;, &quot;settings.loan-policies.all&quot;, &quot;settings.loan-rules.all&quot;, &quot;module.developer.enabled&quot;, &quot;ui-inventory.all-permissions.TEMPORARY&quot;, &quot;ui-inventory.settings.materialtypes&quot;, &quot;ui-inventory.settings.loantypes&quot;, &quot;ui-inventory.settings.instance-formats&quot;, &quot;module.organization.enabled&quot;, &quot;ui-organization.settings.key-bindings&quot;, &quot;ui-organization.settings.locale&quot;, &quot;ui-organization.settings.plugins&quot;, &quot;ui-inventory.settings.instance-types&quot;, &quot;ui-inventory.settings.contributor-types&quot;, &quot;ui-organization.settings.location&quot;, &quot;ui-organization.settings.sso&quot;, &quot;circulation.all&quot;, &quot;ui-requests.all&quot;, &quot;module.search.enabled&quot;, &quot;circulation-storage.all&quot;, &quot;configuration.all&quot;, &quot;inventory.all&quot;, &quot;login-saml.all&quot;, &quot;ui-users.editperms&quot;, &quot;inventory-storage.all&quot;, &quot;notify.all&quot;, &quot;users.all&quot;, &quot;okapi.proxy.pull.modules.post&quot;, &quot;okapi.all&quot;, &quot;ui-users.create&quot;, &quot;module.notes.enabled&quot;, &quot;ui-users.editproxies&quot;, &quot;ui-users.editpermsets&quot;, &quot;settings.usergroups.all&quot;, &quot;login.all&quot;, &quot;users-bl.all&quot;, &quot;stripes-util-notes.all&quot;, &quot;stripes-util-notes.edit&quot;, &quot;stripes-util-notes.create&quot;, &quot;stripes-util-notes.delete&quot;, &quot;settings.addresstypes.all&quot; ]
  }
&lt;p&gt;,&lt;br/&gt;
  &quot;proxiesFor&quot; : [ ]&lt;br/&gt;
}&lt;/p&gt;

&lt;p&gt;Permissions for pr_413_9_admin:&lt;/p&gt;

&lt;p&gt;&lt;span class=&quot;error&quot;&gt;&amp;#91;malc@ip-10-36-20-124 scripts&amp;#93;&lt;/span&gt;$ curl -s -D - -XPOST -d &apos;&lt;/p&gt;
{ &quot;username&quot;: &quot;pr_413_9_admin&quot;, &quot;password&quot;: &quot;admin&quot;}
&lt;p&gt;&apos; -H &apos;X-Okapi-Tenant: pr_413_9&apos; -H &apos;Accept: application/json, text/plain&apos; -H &apos;Content-Type: application/json&apos; &lt;a href=&quot;http://folio-snapshot-stable.aws.indexdata.com:9130/bl-users/login&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://folio-snapshot-stable.aws.indexdata.com:9130/bl-users/login&lt;/a&gt;&lt;br/&gt;
HTTP/1.1 201 Created&lt;br/&gt;
X-Okapi-Trace: POST mod-authtoken-1.4.1-SNAPSHOT.21 &lt;a href=&quot;http://10.36.1.145:9135/bl-users/login&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://10.36.1.145:9135/bl-users/login&lt;/a&gt; : 202 795us&lt;br/&gt;
Content-Type: application/json&lt;br/&gt;
x-okapi-token: eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJwcl80MTNfOV9hZG1pbiIsInVzZXJfaWQiOiJhNTVjNjdiZC1mODIxLTQ0OGQtYjM1OS0wNDhlNjZmOTBkOTciLCJ0ZW5hbnQiOiJwcl80MTNfOSJ9.zeg0CW89Bmyg4PvEnwYIyk7IDFRbtrRrultw1uKOCNxUVlQukzXSYQdIckaBKORoGx_EqxEtleW1W_zGgxLAjQ&lt;br/&gt;
host: folio-snapshot-stable.aws.indexdata.com:9130&lt;br/&gt;
user-agent: curl/7.53.1&lt;br/&gt;
x-okapi-tenant: pr_413_9&lt;br/&gt;
accept: application/json, text/plain&lt;br/&gt;
x-okapi-request-id: 710602/bl-users&lt;br/&gt;
x-okapi-url: &lt;a href=&quot;http://10.36.1.145:9130&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://10.36.1.145:9130&lt;/a&gt;&lt;br/&gt;
x-okapi-permissions: []&lt;br/&gt;
X-Okapi-Trace: POST mod-users-bl-3.0.0-SNAPSHOT.17 &lt;a href=&quot;http://10.36.1.145:9134/bl-users/login&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://10.36.1.145:9134/bl-users/login&lt;/a&gt; : 201 61576us&lt;br/&gt;
Transfer-Encoding: chunked&lt;/p&gt;

&lt;p&gt;{&lt;br/&gt;
  &quot;user&quot; : {&lt;br/&gt;
    &quot;username&quot; : &quot;pr_413_9_admin&quot;,&lt;br/&gt;
    &quot;id&quot; : &quot;a55c67bd-f821-448d-b359-048e66f90d97&quot;,&lt;br/&gt;
    &quot;active&quot; : true,&lt;br/&gt;
    &quot;proxyFor&quot; : [ ],&lt;br/&gt;
    &quot;personal&quot; : &lt;/p&gt;
{
      &quot;lastName&quot; : &quot;ADMINISTRATOR&quot;,
      &quot;firstName&quot; : &quot;pr_413_9&quot;,
      &quot;email&quot; : &quot;admin@pr_413_9.example.org&quot;,
      &quot;addresses&quot; : [ ]
    }
&lt;p&gt;  },&lt;br/&gt;
  &quot;permissions&quot; : &lt;/p&gt;
{
    &quot;id&quot; : &quot;1797943f-0899-4e6f-9f38-76a3379924b1&quot;,
    &quot;userId&quot; : &quot;a55c67bd-f821-448d-b359-048e66f90d97&quot;,
    &quot;permissions&quot; : [ &quot;perms.all&quot;, &quot;ui-checkin.all&quot;, &quot;ui-checkout.all&quot;, &quot;settings.checkout.enabled&quot;, &quot;settings.loan-rules.all&quot;, &quot;settings.loan-policies.all&quot;, &quot;module.developer.enabled&quot;, &quot;ui-inventory.settings.instance-types&quot;, &quot;ui-inventory.all-permissions.TEMPORARY&quot;, &quot;ui-circulation.settings.fixed-due-date-schedules&quot;, &quot;settings.developer.enabled&quot;, &quot;ui-inventory.settings.contributor-types&quot;, &quot;ui-inventory.settings.loantypes&quot;, &quot;module.organization.enabled&quot;, &quot;module.search.enabled&quot;, &quot;ui-inventory.settings.materialtypes&quot;, &quot;ui-inventory.settings.instance-formats&quot;, &quot;ui-organization.settings.key-bindings&quot;, &quot;ui-organization.settings.locale&quot;, &quot;ui-organization.settings.plugins&quot;, &quot;ui-organization.settings.sso&quot;, &quot;ui-requests.all&quot;, &quot;circulation-storage.all&quot;, &quot;ui-organization.settings.location&quot;, &quot;circulation.all&quot;, &quot;inventory.all&quot;, &quot;configuration.all&quot;, &quot;ui-users.editperms&quot;, &quot;inventory-storage.all&quot;, &quot;users.all&quot;, &quot;okapi.proxy.pull.modules.post&quot;, &quot;login-saml.all&quot;, &quot;okapi.all&quot;, &quot;notify.all&quot;, &quot;settings.addresstypes.all&quot;, &quot;login.all&quot;, &quot;module.notes.enabled&quot;, &quot;settings.usergroups.all&quot;, &quot;users-bl.all&quot;, &quot;stripes-util-notes.all&quot;, &quot;stripes-util-notes.edit&quot;, &quot;stripes-util-notes.create&quot;, &quot;stripes-util-notes.delete&quot;, &quot;ui-users.create&quot;, &quot;ui-users.editproxies&quot;, &quot;ui-users.editpermsets&quot; ]
  }
&lt;p&gt;,&lt;br/&gt;
  &quot;proxiesFor&quot; : [ ]&lt;br/&gt;
}&lt;/p&gt;</comment>
                                                            <comment id="193881" author="5f9abc1eb45b2e007453f423" created="Tue, 26 Jun 2018 15:12:03 +0000"  >&lt;p&gt;Both tenant admin users have &apos;circulation-storage.all&apos; defined which I assume includes &apos;circulation-storage.loan-policies.item.post&apos;&lt;/p&gt;</comment>
                                                            <comment id="193882" author="5f9abc1eb45b2e007453f423" created="Tue, 26 Jun 2018 16:03:00 +0000"  >&lt;p&gt;The task that loads the loan policies looks like this: &lt;/p&gt;

&lt;ul class=&quot;alternate&quot; type=&quot;square&quot;&gt;
	&lt;li&gt;name: Load loan policies&lt;br/&gt;
  uri:&lt;br/&gt;
    url: &quot;{{ okapi_url }}/loan-policy-storage/loan-policies&quot;&lt;br/&gt;
    method: POST&lt;br/&gt;
    body_format: json&lt;br/&gt;
    headers:&lt;br/&gt;
      Authtoken-Refresh-Cache: &quot;true&quot;&lt;br/&gt;
      X-Okapi-Tenant: &quot;{{ tenant }}&quot;&lt;br/&gt;
      Accept: application/json&lt;br/&gt;
      X-Okapi-Token: &quot;{{ tenant_admin_login.x_okapi_token | default(&apos;token&apos;) }}&quot;&lt;br/&gt;
    body: &quot;{{ lookup(&apos;file&apos;, item) }}&quot;&lt;br/&gt;
    status_code: 201, 422, 500&lt;br/&gt;
  register: load_loanp&lt;br/&gt;
  changed_when: load_loanp.status == 201&lt;br/&gt;
  with_fileglob:&lt;/li&gt;
	&lt;li&gt;loan-policies/*.json&lt;/li&gt;
&lt;/ul&gt;



&lt;p&gt;I wonder if the header &apos;Authtoken-Refresh-Cache: &quot;true&quot;&apos; may have something to do with this. &lt;/p&gt;</comment>
                                                            <comment id="193883" author="5f9abc1eb45b2e007453f423" created="Tue, 26 Jun 2018 16:42:11 +0000"  >&lt;p&gt;the permission &apos;circulation-storage.all&apos;  is created and granted to the tenant admin user minutes prior to when this request is made and approximately a few seconds after the tenant admin user is granted the x_okapi_token that is used in the request. &lt;/p&gt;</comment>
                                                            <comment id="193884" author="5f9abc1eb45b2e007453f423" created="Tue, 10 Jul 2018 21:19:16 +0000"  >&lt;p&gt;I believe this might be resolved by 
    &lt;span class=&quot;jira-issue-macro resolved&quot; data-jira-key=&quot;MODAT-27&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/MODAT-27&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;Add creation timestamp to token on creation&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10322?size=medium&quot; /&gt;
            MODAT-27
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-success jira-macro-single-issue-export-pdf&quot;&gt;Closed&lt;/span&gt;
            &lt;/span&gt;
 but I will it open for a little longer to see if the issue manifests itself again. &lt;/p&gt;</comment>
                                                            <comment id="193886" author="5f9abc1eb45b2e007453f423" created="Wed, 18 Jul 2018 14:38:14 +0000"  >&lt;p&gt;Haven&apos;t seen problem since 
    &lt;span class=&quot;jira-issue-macro resolved&quot; data-jira-key=&quot;MODAT-27&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/MODAT-27&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;Add creation timestamp to token on creation&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10322?size=medium&quot; /&gt;
            MODAT-27
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-success jira-macro-single-issue-export-pdf&quot;&gt;Closed&lt;/span&gt;
            &lt;/span&gt;
 has been resolved.  Closing issue. &lt;/p&gt;</comment>
                                                            <comment id="193887" author="5f9abc1eb45b2e007453f423" created="Thu, 19 Jul 2018 17:31:51 +0000"  >&lt;p&gt;Re-opening this issue.   New instance of failure detected. &lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://jenkins-aws.indexdata.com/job/folio-org/job/ui-checkout/job/PR-158/2/console&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://jenkins-aws.indexdata.com/job/folio-org/job/ui-checkout/job/PR-158/2/console&lt;/a&gt;&lt;/p&gt;</comment>
                                                            <comment id="193889" author="5f9abc1eb45b2e007453f423" created="Thu, 19 Jul 2018 18:01:04 +0000"  >&lt;p&gt;I thought maybe the admin user became &apos;inactive&apos; maybe,  but that does not appear to be the case: &lt;/p&gt;

&lt;p&gt;&lt;span class=&quot;error&quot;&gt;&amp;#91;malc@ip-10-36-20-124 scripts&amp;#93;&lt;/span&gt;$ curl -H &quot;x-okapi-token: $OKAPI_TOKEN&quot; -H &quot;x-okapi-tenant: pr_158_2&quot; -H &quot;Content-Type: application/json&quot; $&lt;/p&gt;
{OKAPI_URL}
&lt;p&gt;/users&lt;br/&gt;
{&lt;br/&gt;
  &quot;users&quot; : [ {&lt;br/&gt;
    &quot;username&quot; : &quot;pr_158_2_admin&quot;,&lt;br/&gt;
    &quot;id&quot; : &quot;8965408e-13df-59b1-b927-f7324aa5771a&quot;,&lt;br/&gt;
    &quot;active&quot; : true,&lt;br/&gt;
    &quot;proxyFor&quot; : [ ],&lt;br/&gt;
    &quot;personal&quot; : &lt;/p&gt;
{
      &quot;lastName&quot; : &quot;pr_158_2&quot;,
      &quot;firstName&quot; : &quot;Admin&quot;,
      &quot;email&quot; : &quot;admin@example.org&quot;,
      &quot;addresses&quot; : [ ]
    }
&lt;p&gt;  } ],&lt;br/&gt;
  &quot;totalRecords&quot; : 1,&lt;br/&gt;
  &quot;resultInfo&quot; : &lt;/p&gt;
{
    &quot;totalRecords&quot; : 1,
    &quot;facets&quot; : [ ],
    &quot;diagnostics&quot; : [ ]
  }</comment>
                                                            <comment id="193891" author="5f9abc1eb45b2e007453f423" created="Thu, 19 Jul 2018 19:18:06 +0000"  >&lt;p&gt;Log snippet: &lt;/p&gt;

&lt;div class=&quot;preformatted panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;preformattedContent panelContent&quot;&gt;
&lt;pre&gt;2018-07-19 16:42:35,777 INFO  DockerModuleHandle   mod-permissions-5.2.5-SNAPSHOT.22 16:42:35 INFO  PermsAPI             Calling getExpandedPermissionsSequential with permissionList: inventory-storage.location-units.campuses.item.get, inventory-storage.location-units.campuses.item.post, inventory-storage.location-units.campuses.item.put, inventory-storage.location-units.campuses.item.delete, inventory-storage.location-units.libraries.collection.get, inventory-storage.location-units.libraries.item.get, inventory-storage.location-units.libraries.item.post, inventory-storage.location-units.libraries.item.put, inventory-storage.location-units.libraries.item.delete, inventory-storage.locations.collection.get, inventory-storage.locations.item.get, inventory-storage.locations.item.post, inventory-storage.locations.item.put, inventory-storage.locations.item.delete, inventory-storage.identifier-types.collection.get
2018-07-19 16:42:35,780 INFO  ProxyContext         954162/classification-types REQ 10.36.20.139:36938 pr_158_2 POST /classification-types mod-authtoken-1.4.1-SNAPSHOT.21 mod-inventory-storage-12.1.0-SNAPSHOT.128
2018-07-19 16:42:35,781 WARN  ProxyService         relayToResponse XXX Returning direct response 403
2018-07-19 16:42:35,781 INFO  ProxyContext         954162/classification-types RES 403 617us mod-authtoken-1.4.1-SNAPSHOT.21 http://10.36.1.64:9135/classification-types
2018-07-19 16:42:35,784 INFO  DockerModuleHandle   mod-authtoken-1.4.1-SNAPSHOT.21 getUserAndExpandedPermissions, userid=8965408e-13df-59b1-b927-f7324aa5771apermissions=[]
2018-07-19 16:42:35,784 INFO  DockerModuleHandle   mod-authtoken-1.4.1-SNAPSHOT.21 completing future with user permissions=[], expanded permissions=[]
2018-07-19 16:42:35,784 INFO  DockerModuleHandle   mod-authtoken-1.4.1-SNAPSHOT.21 Jul 19, 2018 4:42:35 PM mod-auth-authtoken-module
2018-07-19 16:42:35,784 INFO  DockerModuleHandle   mod-authtoken-1.4.1-SNAPSHOT.21 INFO: Retrieving permissions for userid 8965408e-13df-59b1-b927-f7324aa5771a and expanding permissions for []
2018-07-19 16:42:35,784 INFO  DockerModuleHandle   mod-authtoken-1.4.1-SNAPSHOT.21 Jul 19, 2018 4:42:35 PM mod-auth-authtoken-module
2018-07-19 16:42:35,784 INFO  DockerModuleHandle   mod-authtoken-1.4.1-SNAPSHOT.21 INFO: Retrieving permissions for userid 8965408e-13df-59b1-b927-f7324aa5771a, and expanded permissions for []
2018-07-19 16:42:35,784 INFO  DockerModuleHandle   mod-authtoken-1.4.1-SNAPSHOT.21 Jul 19, 2018 4:42:35 PM mod-auth-authtoken-module
2018-07-19 16:42:35,784 INFO  DockerModuleHandle   mod-authtoken-1.4.1-SNAPSHOT.21 SEVERE: [](user permissions) nor [](module permissions) do not contain inventory-storage.classification-types.item.post
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;</comment>
                                                            <comment id="193894" author="5f9abc1eb45b2e007453f423" created="Thu, 19 Jul 2018 19:19:22 +0000"  >&lt;p&gt;Permissions for user pr_158_2_admin: &lt;/p&gt;

&lt;div class=&quot;preformatted panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;preformattedContent panelContent&quot;&gt;
&lt;pre&gt;ubuntu@ip-10-36-1-64:~$ curl -s -D - -X POST -d &apos;{ &quot;username&quot;: &quot;pr_158_2_admin&quot;, &quot;password&quot;: &quot;admin&quot;}&apos; -H &apos;X-Okapi-Tenant: pr_158_2&apos; -H &apos;Accept: application/json, text/plain&apos; -H &apos;Content-Type: application/json&apos; http://folio-snapshot-stable.aws.indexdata.com:9130/bl-users/login
HTTP/1.1 201 Created
X-Okapi-Trace: POST mod-authtoken-1.4.1-SNAPSHOT.21 http://10.36.1.64:9135/bl-users/login : 202 854us
Content-Type: application/json
x-okapi-token: eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJwcl8xNThfMl9hZG1pbiIsInVzZXJfaWQiOiI4OTY1NDA4ZS0xM2RmLTU5YjEtYjkyNy1mNzMyNGFhNTc3MWEiLCJ0ZW5hbnQiOiJwcl8xNThfMiJ9.gKQ3UyFROWL5A8A4RaYD3f4Jm7l8Z2JJCGmuECTfVtqUoC-sRRl_Jg25KCO4O-xAY7ijZ2fuq8_KhWaCIkRULg
host: folio-snapshot-stable.aws.indexdata.com:9130
user-agent: curl/7.47.0
x-okapi-tenant: pr_158_2
accept: application/json, text/plain
x-okapi-request-id: 150912/bl-users
x-okapi-url: http://10.36.1.64:9130
x-okapi-permissions: []
X-Okapi-Trace: POST mod-users-bl-3.0.0-SNAPSHOT.17 http://10.36.1.64:9134/bl-users/login : 201 60350us
Transfer-Encoding: chunked

{
  &quot;user&quot; : {
    &quot;username&quot; : &quot;pr_158_2_admin&quot;,
    &quot;id&quot; : &quot;8965408e-13df-59b1-b927-f7324aa5771a&quot;,
    &quot;active&quot; : true,
    &quot;proxyFor&quot; : [ ],
    &quot;personal&quot; : {
      &quot;lastName&quot; : &quot;pr_158_2&quot;,
      &quot;firstName&quot; : &quot;Admin&quot;,
      &quot;email&quot; : &quot;admin@example.org&quot;,
      &quot;addresses&quot; : [ ]
    }
  },
  &quot;permissions&quot; : {
    &quot;id&quot; : &quot;de79044f-f0a5-524c-8e01-0c7eaf9e8018&quot;,
    &quot;userId&quot; : &quot;8965408e-13df-59b1-b927-f7324aa5771a&quot;,
    &quot;permissions&quot; : [ &quot;perms.all&quot;, &quot;login.all&quot;, &quot;users.all&quot;, &quot;ui-checkin.all&quot;, &quot;ui-checkout.all&quot;, &quot;settings.checkout.enabled&quot;, &quot;settings.loan-policies.all&quot;, &quot;ui-circulation.settings.fixed-due-date-schedules&quot;, &quot;module.developer.enabled&quot;, &quot;ui-inventory.settings.contributor-types&quot;, &quot;settings.loan-rules.all&quot;, &quot;ui-inventory.settings.materialtypes&quot;, &quot;ui-inventory.settings.loantypes&quot;, &quot;ui-circulation.settings.cancellation-reasons&quot;, &quot;ui-inventory.settings.instance-formats&quot;, &quot;settings.developer.enabled&quot;, &quot;ui-inventory.settings.instance-types&quot;, &quot;module.organization.enabled&quot;, &quot;ui-requests.all&quot;, &quot;ui-inventory.all-permissions.TEMPORARY&quot;, &quot;module.search.enabled&quot;, &quot;circulation-storage.all&quot;, &quot;ui-organization.settings.key-bindings&quot;, &quot;ui-organization.settings.locale&quot;, &quot;ui-organization.settings.plugins&quot;, &quot;ui-organization.settings.sso&quot;, &quot;okapi.proxy.pull.modules.post&quot;, &quot;okapi.all&quot;, &quot;inventory.all&quot;, &quot;ui-organization.settings.location&quot;, &quot;circulation.all&quot;, &quot;configuration.all&quot;, &quot;notify.all&quot;, &quot;settings.enabled&quot;, &quot;inventory-storage.all&quot;, &quot;login-saml.all&quot;, &quot;users-bl.all&quot;, &quot;stripes-util-notes.all&quot;, &quot;stripes-util-notes.edit&quot;, &quot;module.notes.enabled&quot;, &quot;stripes-util-notes.create&quot;, &quot;stripes-util-notes.delete&quot; ]
  },
  &quot;proxiesFor&quot; : [ ]
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;</comment>
                                                            <comment id="193897" author="5f9abc1eb45b2e007453f423" created="Thu, 19 Jul 2018 20:42:38 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5c38e8d616ac1e4f7cbc660a&quot; class=&quot;user-hover&quot; rel=&quot;5c38e8d616ac1e4f7cbc660a&quot; data-account-id=&quot;5c38e8d616ac1e4f7cbc660a&quot; accountid=&quot;5c38e8d616ac1e4f7cbc660a&quot; rel=&quot;noreferrer&quot;&gt;Kurt Nordstrom&lt;/a&gt; suggested setting the header &apos;Authtoken-Refresh-Cache: true&apos; in the data loading requests.   Updated folio-ansible/roles/module-sample-data/tasks/load-data.yml.   &lt;/p&gt;

&lt;p&gt;Will also attempt to see if I can set something up that runs in a loop in an attempt to duplicate the error. &lt;/p&gt;</comment>
                                                            <comment id="193899" author="5f9abc1eb45b2e007453f423" created="Fri, 20 Jul 2018 13:16:44 +0000"  >&lt;p&gt;Looks like adding Authtoken-Refresh-Cache: true has exacerbated the issue.   There were at least a half dozen failures overnight.  Here are a few examples:&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://jenkins-aws.indexdata.com/job/folio-org/job/ui-users/job/PR-429/7/console&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://jenkins-aws.indexdata.com/job/folio-org/job/ui-users/job/PR-429/7/console&lt;/a&gt;&lt;br/&gt;
&lt;a href=&quot;https://jenkins-aws.indexdata.com/job/folio-org/job/ui-users/job/PR-433/6/console&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://jenkins-aws.indexdata.com/job/folio-org/job/ui-users/job/PR-433/6/console&lt;/a&gt;&lt;br/&gt;
&lt;a href=&quot;https://jenkins-aws.indexdata.com/job/folio-org/job/ui-checkout/job/PR-151/12/console&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://jenkins-aws.indexdata.com/job/folio-org/job/ui-checkout/job/PR-151/12/console&lt;/a&gt;&lt;/p&gt;

</comment>
                                                            <comment id="193901" author="5c38e8d616ac1e4f7cbc660a" created="Fri, 20 Jul 2018 14:06:04 +0000"  >&lt;p&gt;Well, crap, that&apos;s not how it was supposed to work! &lt;img class=&quot;emoticon&quot; src=&quot;/images/icons/emoticons/biggrin.png&quot; height=&quot;16&quot; width=&quot;16&quot; align=&quot;absmiddle&quot; alt=&quot;&quot; border=&quot;0&quot;/&gt;&lt;/p&gt;

&lt;p&gt;Will investigate and let you know what I find.&lt;/p&gt;</comment>
                                                            <comment id="193903" author="5f9abc1eb45b2e007453f423" created="Tue, 24 Jul 2018 17:14:04 +0000"  >&lt;p&gt;I ran a loop that created tenants. enabled modules, assigned permissions, and loaded sample data exactly how jenkins is configured and am unable to reproduce a single failure.   About 50 tenants created.   I&apos;m going to continue to see if I can generate an error,  but have a feeling that I won&apos;t.   That&apos;s making this issue all the more perplexing.   Something environmental?  Will look into other approaches.&lt;/p&gt;</comment>
                                                            <comment id="193905" author="5f9abc1eb45b2e007453f423" created="Tue, 24 Jul 2018 19:51:28 +0000"  >&lt;p&gt;Ran another loop of 40 tenants.  No errors.   &lt;/p&gt;</comment>
                                                            <comment id="193906" author="5f9abc1eb45b2e007453f423" created="Tue, 31 Jul 2018 17:48:26 +0000"  >&lt;p&gt;Most recent PR failure due to this issue: &lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://jenkins-aws.indexdata.com/job/folio-org/job/ui-users/job/PR-413/21/&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://jenkins-aws.indexdata.com/job/folio-org/job/ui-users/job/PR-413/21/&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;TASK &lt;span class=&quot;error&quot;&gt;&amp;#91;folio-ansible/roles/module-sample-data : Load module data to /loan-policy-storage/loan-policies&amp;#93;&lt;/span&gt; ***&lt;br/&gt;
failed: &lt;span class=&quot;error&quot;&gt;&amp;#91;localhost&amp;#93;&lt;/span&gt; (item=/tmp/ansible.K4GiNK/mod-circulation-storage/reference-data/loan-policy-storage/loan-policies/one-hour.json) =&amp;gt; &lt;/p&gt;
{&quot;changed&quot;: false, &quot;connection&quot;: &quot;close&quot;, &quot;content&quot;: &quot;Access requires permission: circulation-storage.loan-policies.item.post&quot;, &quot;data_file&quot;: &quot;/tmp/ansible.K4GiNK/mod-circulation-storage/reference-data/loan-policy-storage/loan-policies/one-hour.json&quot;, &quot;msg&quot;: &quot;Status code was 403 and not [201, 500]: HTTP Error 403: Forbidden&quot;, &quot;redirected&quot;: false, &quot;status&quot;: 403, &quot;transfer_encoding&quot;: &quot;chunked&quot;, &quot;url&quot;: &quot;http://folio-snapshot-stable.aws.indexdata.com:9130/loan-policy-storage/loan-policies&quot;, &quot;x_okapi_trace&quot;: &quot;POST mod-authtoken-1.5.1-SNAPSHOT.24 http://10.36.1.143:9135/loan-policy-storage/loan-policies : 403 27874us&quot;}
&lt;p&gt;failed: &lt;span class=&quot;error&quot;&gt;&amp;#91;localhost&amp;#93;&lt;/span&gt; (item=/tmp/ansible.K4GiNK/mod-circulation-storage/reference-data/loan-policy-storage/loan-policies/rolling.json) =&amp;gt; &lt;/p&gt;
{&quot;changed&quot;: false, &quot;connection&quot;: &quot;close&quot;, &quot;content&quot;: &quot;Access requires permission: circulation-storage.loan-policies.item.post&quot;, &quot;data_file&quot;: &quot;/tmp/ansible.K4GiNK/mod-circulation-storage/reference-data/loan-policy-storage/loan-policies/rolling.json&quot;, &quot;msg&quot;: &quot;Status code was 403 and not [201, 500]: HTTP Error 403: Forbidden&quot;, &quot;redirected&quot;: false, &quot;status&quot;: 403, &quot;transfer_encoding&quot;: &quot;chunked&quot;, &quot;url&quot;: &quot;http://folio-snapshot-stable.aws.indexdata.com:9130/loan-policy-storage/loan-policies&quot;, &quot;x_okapi_trace&quot;: &quot;POST mod-authtoken-1.5.1-SNAPSHOT.24 http://10.36.1.143:9135/loan-policy-storage/loan-policies : 403 870us&quot;}

&lt;p&gt;I&apos;ve re-added &apos;Authtoken-Refresh-Cache: &quot;true&quot; header to Ansible module-sample-data role.   Hoping for different result after Kurt&apos;s bugfix here:  &lt;a href=&quot;https://github.com/folio-org/mod-authtoken/commit/79eea50d23a7f441eac220b79fba089bcf4ea844&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/folio-org/mod-authtoken/commit/79eea50d23a7f441eac220b79fba089bcf4ea844&lt;/a&gt;&lt;/p&gt;</comment>
                                                            <comment id="193909" author="5f9abc1eb45b2e007453f423" created="Wed, 1 Aug 2018 12:59:23 +0000"  >&lt;p&gt;Another error here this morning after enabling &apos;Authtoken-Refresh-Cache: &quot;true&quot;:&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://jenkins-aws.indexdata.com/job/folio-org/job/ui-organization/job/PR-72/18/console&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://jenkins-aws.indexdata.com/job/folio-org/job/ui-organization/job/PR-72/18/console&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;failed: &lt;span class=&quot;error&quot;&gt;&amp;#91;localhost&amp;#93;&lt;/span&gt; (item=/tmp/ansible.aojbH0/mod-inventory-storage/reference-data/contributor-types/Degreegrantinginstitution.json) =&amp;gt; &lt;/p&gt;
{&quot;changed&quot;: false, &quot;connection&quot;: &quot;close&quot;, &quot;content&quot;: &quot;Access requires permission: inventory-storage.contributor-types.item.post&quot;, &quot;data_file&quot;: &quot;/tmp/ansible.aojbH0/mod-inventory-storage/reference-data/contributor-types/Degreegrantinginstitution.json&quot;, &quot;msg&quot;: &quot;Status code was 403 and not [201, 400]: HTTP Error 403: Forbidden&quot;, &quot;redirected&quot;: false, &quot;status&quot;: 403, &quot;transfer_encoding&quot;: &quot;chunked&quot;, &quot;url&quot;: &quot;http://folio-snapshot-stable.aws.indexdata.com:9130/contributor-types&quot;, &quot;x_okapi_trace&quot;: &quot;POST mod-authtoken-1.5.1-SNAPSHOT.24 http://10.36.1.143:9135/contributor-types : 403 16360us&quot;}</comment>
                                                            <comment id="193912" author="5f9abc1eb45b2e007453f423" created="Wed, 1 Aug 2018 15:42:08 +0000"  >&lt;p&gt;I think the issue here is that there is a tenant admin user and tenant mismatch occurring.    &lt;/p&gt;

&lt;p&gt;This build - &lt;a href=&quot;https://jenkins-aws.indexdata.com/job/folio-org/job/ui-organization/view/change-requests/job/PR-72/18/&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://jenkins-aws.indexdata.com/job/folio-org/job/ui-organization/view/change-requests/job/PR-72/18/&lt;/a&gt; - which creates tenant &apos;pr_72_18&apos; with a tenant admin user called &apos;pr_72_18_admin&apos; and this build - &lt;br/&gt;
&lt;a href=&quot;https://jenkins-aws.indexdata.com/job/folio-org/job/ui-organization/view/change-requests/job/PR-99/6/&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://jenkins-aws.indexdata.com/job/folio-org/job/ui-organization/view/change-requests/job/PR-99/6/&lt;/a&gt; - which creates tenant, &apos;pr_99_6&apos; with a tenant admin user called &apos;pr_99_6_admin&apos; were triggered at the same time and pretty much ran in parallel.  &lt;/p&gt;

&lt;p&gt;Here are the attributes of the &apos;pr_72_18_admin&apos; user: &lt;/p&gt;

&lt;div class=&quot;preformatted panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;preformattedContent panelContent&quot;&gt;
&lt;pre&gt;ubuntu@ip-10-36-1-143:~$ curl -s -D - -X POST -d &apos;{ &quot;username&quot;: &quot;pr_72_18_admin&quot;, &quot;password&quot;: &quot;admin&quot;}&apos; -H &apos;X-Okapi-Tenant: pr_72_18&apos; -H &apos;Accept: application/json, text/plain&apos; -H &apos;Content-Type: application/json&apos; http://folio-snapshot-stable.aws.indexdata.com:9130/bl-users/login
HTTP/1.1 201 Created
X-Okapi-Trace: POST mod-authtoken-1.5.1-SNAPSHOT.24 http://10.36.1.143:9135/bl-users/login : 202 612us
Content-Type: application/json
x-okapi-token: eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJwcl83Ml8xOF9hZG1pbiIsInVzZXJfaWQiOiIyM2NmMTM3YS1mNzkxLTUwNjYtOWE0Ny0wYmEwYzk3OGJhYzQiLCJ0ZW5hbnQiOiJwcl83Ml8xOCIsImlhdCI6MTUzMzEzNzM1OH0.HRwAsqc8jSZt01Nqqe0V00pTWyNkczEcYTalvM0Zx3oAVJO3vwY0T3XUD-EDHZDmCNp_vMnK2d2gyO8BpEHJGw
host: folio-snapshot-stable.aws.indexdata.com:9130
user-agent: curl/7.47.0
x-okapi-tenant: pr_72_18
accept: application/json, text/plain
x-okapi-request-id: 354913/bl-users
x-okapi-url: http://10.36.1.143:9130
x-okapi-permissions: []
X-Okapi-Trace: POST mod-users-bl-3.0.0-SNAPSHOT.19 http://10.36.1.143:9134/bl-users/login : 201 63516us
Transfer-Encoding: chunked

{
  &quot;user&quot; : {
    &quot;username&quot; : &quot;pr_72_18_admin&quot;,
    &quot;id&quot; : &quot;23cf137a-f791-5066-9a47-0ba0c978bac4&quot;,
    &quot;active&quot; : true,
    &quot;proxyFor&quot; : [ ],
    &quot;personal&quot; : {
      &quot;lastName&quot; : &quot;pr_72_18&quot;,
      &quot;firstName&quot; : &quot;Admin&quot;,
      &quot;email&quot; : &quot;admin@example.org&quot;,
      &quot;addresses&quot; : [ ]
    }
  },
  &quot;permissions&quot; : {
    &quot;id&quot; : &quot;305e8b1c-659a-595a-9718-ebba56792100&quot;,
    &quot;userId&quot; : &quot;23cf137a-f791-5066-9a47-0ba0c978bac4&quot;,
    &quot;permissions&quot; : [ &quot;perms.all&quot;, &quot;login.all&quot;, &quot;users.all&quot;, &quot;ui-checkin.all&quot;, &quot;ui-checkout.all&quot;, &quot;settings.checkout.enabled&quot;, &quot;settings.loan-policies.all&quot;, &quot;ui-circulation.settings.fixed-due-date-schedules&quot;, &quot;ui-circulation.settings.cancellation-reasons&quot;, &quot;module.organization.enabled&quot;, &quot;module.search.enabled&quot;, &quot;settings.loan-rules.all&quot;, &quot;module.developer.enabled&quot;, &quot;ui-inventory.settings.instance-types&quot;, &quot;settings.developer.enabled&quot;, &quot;ui-inventory.settings.instance-formats&quot;, &quot;ui-organization.settings.location&quot;, &quot;ui-inventory.all-permissions.TEMPORARY&quot;, &quot;ui-inventory.settings.materialtypes&quot;, &quot;ui-inventory.settings.loantypes&quot;, &quot;ui-organization.settings.key-bindings&quot;, &quot;ui-organization.settings.locale&quot;, &quot;ui-organization.settings.plugins&quot;, &quot;ui-organization.settings.sso&quot;, &quot;ui-inventory.settings.contributor-types&quot;, &quot;circulation.all&quot;, &quot;ui-requests.all&quot;, &quot;circulation-storage.all&quot;, &quot;inventory.all&quot;, &quot;configuration.all&quot;, &quot;login-saml.all&quot;, &quot;okapi.proxy.pull.modules.post&quot;, &quot;okapi.all&quot;, &quot;notify.all&quot;, &quot;inventory-storage.all&quot;, &quot;ui-users.create&quot;, &quot;settings.comments.all&quot;, &quot;settings.feefines.all&quot;, &quot;module.notes.enabled&quot;, &quot;tags.all&quot;, &quot;settings.refunds.all&quot;, &quot;users-bl.all&quot;, &quot;stripes-util-notes.all&quot;, &quot;module.tags.enabled&quot;, &quot;settings.usergroups.all&quot;, &quot;stripes-util-notes.edit&quot;, &quot;stripes-util-notes.create&quot;, &quot;stripes-util-notes.delete&quot;, &quot;settings.tags.enabled&quot;, &quot;settings.waives.all&quot;, &quot;settings.accounts.all&quot;, &quot;settings.transfers.all&quot;, &quot;feesfines.all&quot;, &quot;ui-users.editperms&quot;, &quot;ui-users.editproxies&quot;, &quot;settings.owners.all&quot;, &quot;settings.feefineactions.all&quot;, &quot;settings.transfertypes.all&quot;, &quot;ui-users.editpermsets&quot;, &quot;settings.payments.all&quot;, &quot;settings.addresstypes.all&quot; ]
  },
  &quot;proxiesFor&quot; : [ ]
}
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;

&lt;p&gt;Here are the attributes of the pr_99_6_admin user: &lt;/p&gt;

&lt;div class=&quot;preformatted panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;preformattedContent panelContent&quot;&gt;
&lt;pre&gt;ubuntu@ip-10-36-1-143:~$ curl -s -D - -X POST -d &apos;{ &quot;username&quot;: &quot;pr_99_6_admin&quot;, &quot;password&quot;: &quot;admin&quot;}&apos; -H &apos;X-Okapi-Tenant: pr_99_6&apos; -H &apos;Accept: application/json, text/plain&apos; -H &apos;Content-Type: application/json&apos; http://folio-snapshot-stable.aws.indexdata.com:9130/bl-users/login
HTTP/1.1 201 Created
X-Okapi-Trace: POST mod-authtoken-1.5.1-SNAPSHOT.24 http://10.36.1.143:9135/bl-users/login : 202 730us
Content-Type: application/json
x-okapi-token: eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJwcl85OV82X2FkbWluIiwidXNlcl9pZCI6ImJlNDVkNDFkLTAwYmItNWEwMC1iMTg5LWYyMDliZTEyMzM0YSIsInRlbmFudCI6InByXzk5XzYiLCJpYXQiOjE1MzMxMzc3NDF9.j1WCtmbpmdC154AlUGl4dQVd4dIaLegN4EbIwCf0qDE4ygVceh936Ju92S6YplHC7HR-LCWzvY925P31Swe8Ig
host: folio-snapshot-stable.aws.indexdata.com:9130
user-agent: curl/7.47.0
x-okapi-tenant: pr_99_6
accept: application/json, text/plain
x-okapi-request-id: 850488/bl-users
x-okapi-url: http://10.36.1.143:9130
x-okapi-permissions: []
X-Okapi-Trace: POST mod-users-bl-3.0.0-SNAPSHOT.19 http://10.36.1.143:9134/bl-users/login : 201 70740us
Transfer-Encoding: chunked

{
  &quot;user&quot; : {
    &quot;username&quot; : &quot;pr_99_6_admin&quot;,
    &quot;id&quot; : &quot;be45d41d-00bb-5a00-b189-f209be12334a&quot;,
    &quot;active&quot; : true,
    &quot;proxyFor&quot; : [ ],
    &quot;personal&quot; : {
      &quot;lastName&quot; : &quot;pr_99_6&quot;,
      &quot;firstName&quot; : &quot;Admin&quot;,
      &quot;email&quot; : &quot;admin@example.org&quot;,
      &quot;addresses&quot; : [ ]
    }
  },
  &quot;permissions&quot; : {
    &quot;id&quot; : &quot;fa2fb195-de51-5b4e-935b-2b420de46db0&quot;,
    &quot;userId&quot; : &quot;be45d41d-00bb-5a00-b189-f209be12334a&quot;,
    &quot;permissions&quot; : [ &quot;perms.all&quot;, &quot;login.all&quot;, &quot;users.all&quot;, &quot;ui-checkin.all&quot;, &quot;ui-checkout.all&quot;, &quot;settings.checkout.enabled&quot;, &quot;settings.loan-policies.all&quot;, &quot;ui-circulation.settings.cancellation-reasons&quot;, &quot;module.developer.enabled&quot;, &quot;ui-inventory.settings.loantypes&quot;, &quot;settings.loan-rules.all&quot;, &quot;settings.developer.enabled&quot;, &quot;inventory.all&quot;, &quot;ui-circulation.settings.fixed-due-date-schedules&quot;, &quot;ui-inventory.all-permissions.TEMPORARY&quot;, &quot;ui-inventory.settings.materialtypes&quot;, &quot;ui-inventory.settings.instance-formats&quot;, &quot;module.organization.enabled&quot;, &quot;ui-inventory.settings.instance-types&quot;, &quot;ui-inventory.settings.contributor-types&quot;, &quot;ui-organization.settings.key-bindings&quot;, &quot;ui-organization.settings.locale&quot;, &quot;ui-organization.settings.plugins&quot;, &quot;ui-organization.settings.sso&quot;, &quot;ui-organization.settings.location&quot;, &quot;ui-requests.all&quot;, &quot;module.search.enabled&quot;, &quot;circulation.all&quot;, &quot;configuration.all&quot;, &quot;circulation-storage.all&quot;, &quot;okapi.all&quot;, &quot;module.notes.enabled&quot;, &quot;module.tags.enabled&quot;, &quot;login-saml.all&quot;, &quot;notify.all&quot;, &quot;inventory-storage.all&quot;, &quot;okapi.proxy.pull.modules.post&quot;, &quot;feesfines.all&quot;, &quot;settings.tags.enabled&quot;, &quot;ui-users.create&quot;, &quot;settings.feefines.all&quot;, &quot;settings.payments.all&quot;, &quot;users-bl.all&quot;, &quot;stripes-util-notes.all&quot;, &quot;stripes-util-notes.edit&quot;, &quot;stripes-util-notes.create&quot;, &quot;stripes-util-notes.delete&quot;, &quot;tags.all&quot;, &quot;settings.comments.all&quot;, &quot;settings.feefineactions.all&quot;, &quot;ui-users.editperms&quot;, &quot;ui-users.editproxies&quot;, &quot;settings.owners.all&quot;, &quot;settings.refunds.all&quot;, &quot;settings.waives.all&quot;, &quot;settings.accounts.all&quot;, &quot;settings.usergroups.all&quot;, &quot;settings.transfers.all&quot;, &quot;settings.transfertypes.all&quot;, &quot;settings.addresstypes.all&quot;, &quot;ui-users.editpermsets&quot; ]
  },
  &quot;proxiesFor&quot; : [ ]
}
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;

&lt;p&gt;Here is the okapi log where the error occurred: &lt;/p&gt;

&lt;div class=&quot;preformatted panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;preformattedContent panelContent&quot;&gt;
&lt;pre&gt;2018-08-01 11:26:41,331 INFO  DockerModuleHandle   mod-permissions-5.3.0-SNAPSHOT.25 11:26:41 INFO  LogUtil              org.folio.rest.RestVerticle start  invoking getPermsUsersByIdPermissions
2018-08-01 11:26:41,331 INFO  DockerModuleHandle   mod-permissions-5.3.0-SNAPSHOT.25 11:26:41 INFO  LogUtil              10.36.1.143:37756 GET /perms/users/305e8b1c-659a-595a-9718-ebba56792100/permissions expanded=true HTTP_1_1 404 56 1 tid=pr_99_6 Not Found
2018-08-01 11:26:41,331 WARN  ProxyService         relayToResponse XXX Returning direct response 403
2018-08-01 11:26:41,331 INFO  ProxyContext         001166/contributor-types RES 403 16365us mod-authtoken-1.5.1-SNAPSHOT.24 http://10.36.1.143:9135/contributor-types
2018-08-01 11:26:41,331 INFO  DockerModuleHandle   mod-authtoken-1.5.1-SNAPSHOT.24 Aug 01, 2018 11:26:41 AM mod-auth-authtoken-module
2018-08-01 11:26:41,331 INFO  DockerModuleHandle   mod-authtoken-1.5.1-SNAPSHOT.24 SEVERE: [](user permissions) nor [](module permissions) do not contain inventory-storage.contributor-types.item.post
2018-08-01 11:26:41,331 INFO  DockerModuleHandle   mod-authtoken-1.5.1-SNAPSHOT.24 completing future with user permissions=[], expanded permissions=[]
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;


&lt;p&gt;Note the following line in particular:&lt;/p&gt;

&lt;div class=&quot;preformatted panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;preformattedContent panelContent&quot;&gt;
&lt;pre&gt;10.36.1.143:37756 GET /perms/users/305e8b1c-659a-595a-9718-ebba56792100/permissions expanded=true HTTP_1_1 404 56 1 tid=pr_99_6 Not Found
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;

&lt;p&gt;In the above line,  the tenant admin&apos;s permissions id is &apos;305e8b1c-659a-595a-9718-ebba56792100&apos;.   This is the permissions id for the tenant admin user &apos;pr_72_18_admin&apos;.   However, also note that the &apos;tid&apos;  logged in pr_99_6.    This tenant user and the tenant do not match.   &lt;/p&gt;
</comment>
                                                            <comment id="193919" author="5f9abc1eb45b2e007453f423" created="Wed, 1 Aug 2018 16:18:13 +0000"  >&lt;p&gt;I guess the question is what is causing this mismatch.   Something environmental on the Jenkins side that is passing the wrong tenant in a header or is this a bug in okapi or one of the modules. &lt;/p&gt;</comment>
                                                            <comment id="193923" author="5f9abc1eb45b2e007453f423" created="Wed, 1 Aug 2018 18:44:51 +0000"  >&lt;p&gt;attached okapi log file that contains the error for tenant, pr_72_18.&lt;/p&gt;</comment>
                                                            <comment id="193925" author="5f9abc1eb45b2e007453f423" created="Thu, 2 Aug 2018 18:07:42 +0000"  >&lt;p&gt;I&apos;m able to duplicate this problem rather easily outside of Jenkins by creating two tenants and bootstrapping tenant data almost simultaneously.    So its not a CI issue. &lt;/p&gt;</comment>
                                                            <comment id="193928" author="5f8314dfbdef80006f6f572d" created="Thu, 2 Aug 2018 18:21:06 +0000"  >&lt;p&gt;Excellent. Then we can try this locally.. Please supply the produce/script ..&lt;/p&gt;</comment>
                                                            <comment id="193930" author="5f9abc1eb45b2e007453f423" created="Thu, 2 Aug 2018 18:29:31 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5f8314dfbdef80006f6f572d&quot; class=&quot;user-hover&quot; rel=&quot;5f8314dfbdef80006f6f572d&quot; data-account-id=&quot;5f8314dfbdef80006f6f572d&quot; accountid=&quot;5f8314dfbdef80006f6f572d&quot; rel=&quot;noreferrer&quot;&gt;Adam Dickmeiss&lt;/a&gt; I&apos;ll attempt to package something up you can run easily.   The data loading is via ansible. &lt;/p&gt;</comment>
                                                            <comment id="193933" author="5f9abc1eb45b2e007453f423" created="Thu, 2 Aug 2018 23:15:07 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5f8314dfbdef80006f6f572d&quot; class=&quot;user-hover&quot; rel=&quot;5f8314dfbdef80006f6f572d&quot; data-account-id=&quot;5f8314dfbdef80006f6f572d&quot; accountid=&quot;5f8314dfbdef80006f6f572d&quot; rel=&quot;noreferrer&quot;&gt;Adam Dickmeiss&lt;/a&gt; I&apos;ve cobbled together some bash scripts so that you do not have to deal with setting up an Ansible environment.    I was able to replicate the issue on the first try with these scripts. &lt;/p&gt;

&lt;p&gt;Steps to run:  &lt;/p&gt;
&lt;ul class=&quot;alternate&quot; type=&quot;square&quot;&gt;
	&lt;li&gt;make sure you have &apos;curl&apos; and &apos;jq&apos; installed.&lt;/li&gt;
	&lt;li&gt;clone &lt;a href=&quot;https://github.com/folio-org/folio-infrastructure&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/folio-org/folio-infrastructure&lt;/a&gt;&lt;/li&gt;
	&lt;li&gt;cd folio-infrastructure/CI/scripts&lt;/li&gt;
	&lt;li&gt;take a look at the modules listed in the file &apos;tenant_module_list&apos;.   Make sure you have Okapi and those modules deployed already.   Update the file if the versions of the modules listed differ slightly from the modules you have deployed.&lt;/li&gt;
	&lt;li&gt;take a look at bootstrapTenant.sh and update &apos;okapiUrl&apos; and the Postgres env info accordingly.&lt;/li&gt;
	&lt;li&gt;run  &apos;./bootstrapTenant.sh tenant1 &amp;gt; tenant1.log 2&amp;gt;&amp;amp;1 &amp;amp;&apos;&lt;/li&gt;
	&lt;li&gt;and then run another instance immediately afterward,   &apos;./bootstrapTenant.sh tenant2 &amp;gt; tenant2.log 2&amp;gt;&amp;amp;1 &amp;amp;&apos;,  so that the two are running somewhat in parallel.&lt;/li&gt;
	&lt;li&gt;grep for the string &apos;Access requires permission&apos; in both tenant logs when the scripts are complete.   This indicates there was a permissions problem as reported above.   Check the okapi logs for additional details.&lt;/li&gt;
&lt;/ul&gt;

</comment>
                                                            <comment id="193936" author="557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d" created="Mon, 6 Aug 2018 13:36:25 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=712020%3A38d1a08f-86a8-4df2-9191-239b16b0a81a&quot; class=&quot;user-hover&quot; rel=&quot;712020:38d1a08f-86a8-4df2-9191-239b16b0a81a&quot; data-account-id=&quot;712020:38d1a08f-86a8-4df2-9191-239b16b0a81a&quot; accountid=&quot;712020:38d1a08f-86a8-4df2-9191-239b16b0a81a&quot; rel=&quot;noreferrer&quot;&gt;Heikki Levanto&lt;/a&gt; or &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5c38e8d616ac1e4f7cbc660a&quot; class=&quot;user-hover&quot; rel=&quot;5c38e8d616ac1e4f7cbc660a&quot; data-account-id=&quot;5c38e8d616ac1e4f7cbc660a&quot; accountid=&quot;5c38e8d616ac1e4f7cbc660a&quot; rel=&quot;noreferrer&quot;&gt;Kurt Nordstrom&lt;/a&gt; would it make sense for one of you to look into it while Adam is away?&lt;/p&gt;</comment>
                                                            <comment id="193940" author="712020:38d1a08f-86a8-4df2-9191-239b16b0a81a" created="Tue, 7 Aug 2018 09:37:48 +0000"  >&lt;p&gt;I can take a look&lt;/p&gt;</comment>
                                                            <comment id="193943" author="712020:38d1a08f-86a8-4df2-9191-239b16b0a81a" created="Tue, 7 Aug 2018 13:25:20 +0000"  >&lt;p&gt;I tried to reproduce this locally. Run into small problems with the maze of small scripts, and assumptions about database setups, so never got to the point where it would load the reference data. Now I need to move on to other things.&lt;/p&gt;</comment>
                                                            <comment id="193948" author="557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d" created="Wed, 8 Aug 2018 13:20:15 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5f8314dfbdef80006f6f572d&quot; class=&quot;user-hover&quot; rel=&quot;5f8314dfbdef80006f6f572d&quot; data-account-id=&quot;5f8314dfbdef80006f6f572d&quot; accountid=&quot;5f8314dfbdef80006f6f572d&quot; rel=&quot;noreferrer&quot;&gt;Adam Dickmeiss&lt;/a&gt; can you look into this first thing after you get back? Thanks!&lt;/p&gt;</comment>
                                                            <comment id="193952" author="5f8314dfbdef80006f6f572d" created="Thu, 9 Aug 2018 12:05:43 +0000"  >&lt;p&gt;From code inspection, I think the problem is in mod-authtoken. It has a class, ModulePermissionsSource, which is created once (for all tenants) and it has a member (tenant) which will be inconsistent whenever requests is made to  handleAuthorize. I&apos;ll try to fix and make a PR.&lt;/p&gt;</comment>
                                                            <comment id="193957" author="5f8314dfbdef80006f6f572d" created="Thu, 9 Aug 2018 13:01:51 +0000"  >&lt;p&gt;Made a pull request: See 
    &lt;span class=&quot;jira-issue-macro resolved&quot; data-jira-key=&quot;MODAT-29&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/MODAT-29&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;concurrency issue with tenant&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10303?size=medium&quot; /&gt;
            MODAT-29
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-success jira-macro-single-issue-export-pdf&quot;&gt;Closed&lt;/span&gt;
            &lt;/span&gt;
&lt;/p&gt;</comment>
                                                            <comment id="193959" author="5f8314dfbdef80006f6f572d" created="Fri, 10 Aug 2018 10:26:40 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5f9abc1eb45b2e007453f423&quot; class=&quot;user-hover&quot; rel=&quot;5f9abc1eb45b2e007453f423&quot; data-account-id=&quot;5f9abc1eb45b2e007453f423&quot; accountid=&quot;5f9abc1eb45b2e007453f423&quot; rel=&quot;noreferrer&quot;&gt;John Malconian&lt;/a&gt; .. When convenient, please check if the issue goes away with mod-authtoken from master.&lt;/p&gt;</comment>
                                                            <comment id="193960" author="557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d" created="Wed, 15 Aug 2018 12:43:04 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5f9abc1eb45b2e007453f423&quot; class=&quot;user-hover&quot; rel=&quot;5f9abc1eb45b2e007453f423&quot; data-account-id=&quot;5f9abc1eb45b2e007453f423&quot; accountid=&quot;5f9abc1eb45b2e007453f423&quot; rel=&quot;noreferrer&quot;&gt;John Malconian&lt;/a&gt; what&apos;s the latest status here?&lt;/p&gt;</comment>
                                                            <comment id="193962" author="5f9abc1eb45b2e007453f423" created="Wed, 15 Aug 2018 12:52:05 +0000"  >&lt;p&gt;I still need to verify if this is fixed. &lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10000">
                    <name>Blocks</name>
                                            <outwardlinks description="blocks">
                                        <issuelink>
            <issuekey id="80538">FOLIO-1043</issuekey>
        </issuelink>
                            </outwardlinks>
                                                                <inwardlinks description="is blocked by">
                                        <issuelink>
            <issuekey id="74069">MODAT-29</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                            <issuelinktype id="10003">
                    <name>Relates</name>
                                            <outwardlinks description="relates to">
                                        <issuelink>
            <issuekey id="74065">MODAT-27</issuekey>
        </issuelink>
                            </outwardlinks>
                                                        </issuelinktype>
                    </issuelinks>
                <attachments>
                            <attachment id="64068" name="okapi.log-pr_72_18.gz" size="876381" author="5f9abc1eb45b2e007453f423" created="Wed, 1 Aug 2018 18:43:50 +0000"/>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10000" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummarycf">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10019" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0|hzyoen:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10020" key="com.pyxis.greenhopper.jira:gh-sprint">
                        <customfieldname>Sprint</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10024" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>[CHART] Date of First Response</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Fri, 20 Jul 2018 14:06:04 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10025" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>[CHART] Time in Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                    </customfields>
    </item>
</channel>
</rss>