<!-- 
RSS generated by JIRA (1001.0.0-SNAPSHOT#100246-sha1:7a5c50119eb0633d306e14180817ddef5e80c75d) at Thu Feb 08 23:24:26 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary add field=key&field=summary to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>FOLIO Jira</title>
    <link>https://folio-org.atlassian.net</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>1001.0.0-SNAPSHOT</version>
        <build-number>100246</build-number>
        <build-date>07-02-2024</build-date>
    </build-info>

<item>
            <title>[FOLIO-2945] Create ldp report user on reference environments</title>
                <link>https://folio-org.atlassian.net/browse/FOLIO-2945</link>
                <project id="10290" key="FOLIO">FOLIO</project>
                    <description>&lt;p&gt;From &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=70121%3A8d96963c-ce4c-478d-9023-2de35bc14b67&quot; class=&quot;user-hover&quot; rel=&quot;70121:8d96963c-ce4c-478d-9023-2de35bc14b67&quot; data-account-id=&quot;70121:8d96963c-ce4c-478d-9023-2de35bc14b67&quot; accountid=&quot;70121:8d96963c-ce4c-478d-9023-2de35bc14b67&quot; rel=&quot;noreferrer&quot;&gt;Nassib Nassar&lt;/a&gt; &lt;/p&gt;

&lt;p&gt;Hello, I think we are seeing again a problem that was discussed here on Nov. 24, which is 403 errors connecting to interfaces in:&lt;/p&gt;

&lt;div class=&quot;preformatted panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;preformattedContent panelContent&quot;&gt;
&lt;pre&gt;mod-email
mod-feesfines
mod-finance-storage
mod-inventory-storage
mod-invoice-storage
mod-orders-storage
mod-organizations-storage
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;

&lt;p&gt;In November the problem was missing permissions for diku_admin, although it was not clear why the permissions had stopped being assigned during the build.  The symptoms here appear to be identical.  The problem prevents reporting SMEs from working on FOLIO report development.  Thank you for any assistance.&lt;/p&gt;</description>
                <environment></environment>
        <key id="80026">FOLIO-2945</key>
            <summary>Create ldp report user on reference environments</summary>
                <type id="10005" iconUrl="https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10309?size=medium">Story</type>
                                            <priority id="10005" iconUrl="https://dev.folio.org/assets/jira-priority/tbd.svg">TBD</priority>
                        <status id="3" iconUrl="https://folio-org.atlassian.net/images/icons/statuses/inprogress.png" description="This issue is being actively worked on at the moment by the assignee.">In Progress</status>
                    <statusCategory id="4" key="indeterminate" colorName="yellow"/>
                                    <resolution id="-1">Unresolved</resolution>
                                                        <assignee accountid="5cd423bebc70090d6ce241b1">Ian Hardy</assignee>
                                                                <reporter accountid="5cd423bebc70090d6ce241b1">Ian Hardy</reporter>
                                    <labels>
                    </labels>
                <created>Tue, 5 Jan 2021 14:45:07 +0000</created>
                <updated>Tue, 3 Aug 2021 13:32:43 +0000</updated>
                                                                                <due></due>
                            <votes>0</votes>
                                    <watches>5</watches>
                                                                <comments>
                                                            <comment id="190852" author="70121:8d96963c-ce4c-478d-9023-2de35bc14b67" created="Tue, 5 Jan 2021 20:03:38 +0000"  >&lt;p&gt;To clarify, this problem is observed with folio-snapshot which is the data source used for the reporting reference environment.&lt;/p&gt;</comment>
                                                            <comment id="190857" author="5cd423bebc70090d6ce241b1" created="Tue, 5 Jan 2021 20:31:33 +0000"  >&lt;p&gt;Hi Nassib, the permissions look OK to me. I didn&apos;t check every module, but got a fresh token for diku admin and was able to use it to get things like /item-storage/items and /feefines without problems. Where specifically are you seeing this 403?&lt;/p&gt;</comment>
                                                            <comment id="190861" author="70121:8d96963c-ce4c-478d-9023-2de35bc14b67" created="Tue, 5 Jan 2021 20:43:52 +0000"  >&lt;p&gt;The problem appears to have been fixed.&lt;/p&gt;

&lt;p&gt;The details were the same as in the Nov. 24 thread and affected the same interfaces:&lt;/p&gt;
&lt;div class=&quot;preformatted panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;preformattedContent panelContent&quot;&gt;
&lt;pre&gt;Response code: mod-email: /email: 403
Response code: mod-feesfines: /transfer-criterias: 403
Response code: mod-finance-storage: /finance-storage/budgets: 403
Response code: mod-finance-storage: /finance-storage/fiscal-years: 403
Response code: mod-finance-storage: /finance-storage/fund-types: 403
Response code: mod-finance-storage: /finance-storage/funds: 403
Response code: mod-finance-storage: /finance-storage/group-fund-fiscal-years: 403
Response code: mod-finance-storage: /finance-storage/groups: 403
Response code: mod-finance-storage: /finance-storage/ledger-fiscal-years: 404
Response code: mod-finance-storage: /finance-storage/ledgers: 403
Response code: mod-finance-storage: /finance-storage/transactions: 403
Response code: mod-inventory-storage: /instance-storage/instance-relationships: 403
Response code: mod-invoice-storage: /invoice-storage/invoice-lines: 403
Response code: mod-invoice-storage: /invoice-storage/invoices: 403
Response code: mod-invoice-storage: /voucher-storage/voucher-lines: 403
Response code: mod-invoice-storage: /voucher-storage/vouchers: 403
Response code: mod-orders-storage: /acquisitions-units-storage/memberships: 403
Response code: mod-orders-storage: /acquisitions-units-storage/units: 403
Response code: mod-orders-storage: /orders-storage/alerts: 403
Response code: mod-orders-storage: /orders-storage/order-templates: 403
Response code: mod-orders-storage: /orders-storage/po-lines: 403
Response code: mod-orders-storage: /orders-storage/purchase-orders: 403
Response code: mod-orders-storage: /orders-storage/receiving-history: 403
Response code: mod-orders-storage: /orders-storage/reporting-codes: 403
Response code: mod-organizations-storage: /organizations-storage/organizations: 403
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;</comment>
                                                            <comment id="190865" author="5cd423bebc70090d6ce241b1" created="Tue, 5 Jan 2021 21:58:12 +0000"  >&lt;p&gt;Nassib reports it only seems to have occured certain days: Dec. 3, 17, 28, 30, and Jan 4. Difficult to reconstruct, but happening enough that its probably worth looking into. Nassib will review LDP logs, if we&apos;re still in the dark, set up a jenkins job to:&lt;/p&gt;

&lt;p&gt;1. Login as diku_admin&lt;br/&gt;
2. get all permissions assigned to diku_admin and log them&lt;br/&gt;
2. try a get on some of the effected interfaces listed above and fail if 403. Send email to Ian and Nassib.&lt;/p&gt;</comment>
                                                            <comment id="190869" author="70121:8d96963c-ce4c-478d-9023-2de35bc14b67" created="Thu, 18 Feb 2021 19:06:07 +0000"  >&lt;p&gt;This was seen again on February 9, and is active again today (February 18).&lt;/p&gt;</comment>
                                                            <comment id="190871" author="70121:8d96963c-ce4c-478d-9023-2de35bc14b67" created="Wed, 24 Feb 2021 19:46:14 +0000"  >&lt;p&gt;This is active again today (February 24).&lt;/p&gt;</comment>
                                                            <comment id="190872" author="70121:8d96963c-ce4c-478d-9023-2de35bc14b67" created="Fri, 12 Mar 2021 20:37:07 +0000"  >&lt;p&gt;This is active again today (March 12).&lt;/p&gt;</comment>
                                                            <comment id="190874" author="5cd423bebc70090d6ce241b1" created="Fri, 12 Mar 2021 21:28:41 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=615afd1cd9820f0070a09ef0&quot; class=&quot;user-hover&quot; rel=&quot;615afd1cd9820f0070a09ef0&quot; data-account-id=&quot;615afd1cd9820f0070a09ef0&quot; accountid=&quot;615afd1cd9820f0070a09ef0&quot; rel=&quot;noreferrer&quot;&gt;Zak Burke&lt;/a&gt;&#160;suggested this is happening when you edit diku_admin&apos;s perms in the UI. Perms that aren&apos;t visible don&apos;t get preserved when you save. I re-ran the tenant-admin-perms role Attaching output here. lines that start &quot;skipping&quot; mean that permission was never lost, starting with &quot;changed&quot; means the permission needed to restored.&#160;&lt;span class=&quot;nobr&quot;&gt;&lt;a href=&quot;/rest/api/3/attachment/content/63948&quot; title=&quot;changed-perms.txt attached to FOLIO-2945&quot; data-attachment-type=&quot;file&quot; data-attachment-name=&quot;changed-perms.txt&quot; data-media-services-type=&quot;file&quot; data-media-services-id=&quot;2e4cd9b0-736b-4441-927d-42a56ffe8d3c&quot; rel=&quot;noreferrer&quot;&gt;changed-perms.txt&lt;sup&gt;&lt;img class=&quot;rendericon&quot; src=&quot;/images/icons/link_attachment_7.gif&quot; height=&quot;7&quot; width=&quot;7&quot; align=&quot;absmiddle&quot; alt=&quot;&quot; border=&quot;0&quot;/&gt;&lt;/sup&gt;&lt;/a&gt;&lt;/span&gt;&lt;/p&gt;</comment>
                                                            <comment id="190880" author="5cd423bebc70090d6ce241b1" created="Thu, 18 Mar 2021 18:13:41 +0000"  >&lt;p&gt;Zak has opened 
    &lt;span class=&quot;jira-issue-macro resolved&quot; data-jira-key=&quot;UIU-2075&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/UIU-2075&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;&amp;quot;visible: false&amp;quot; permissions are inadvertently removed on edit&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10303?size=medium&quot; /&gt;
            UIU-2075
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-success jira-macro-single-issue-export-pdf&quot;&gt;Closed&lt;/span&gt;
            &lt;/span&gt;
 to address the permissions issue. We&apos;ll create a seperate ldp user w/read only permissions to avoid any problems w/using the tenant admin user.&lt;/p&gt;</comment>
                                                            <comment id="190883" author="557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d" created="Tue, 13 Apr 2021 13:29:05 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5cd423bebc70090d6ce241b1&quot; class=&quot;user-hover&quot; rel=&quot;5cd423bebc70090d6ce241b1&quot; data-account-id=&quot;5cd423bebc70090d6ce241b1&quot; accountid=&quot;5cd423bebc70090d6ce241b1&quot; rel=&quot;noreferrer&quot;&gt;Ian Hardy&lt;/a&gt; is this closed?&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10003">
                    <name>Relates</name>
                                            <outwardlinks description="relates to">
                                        <issuelink>
            <issuekey id="79708">FOLIO-3027</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="42980">UIU-2075</issuekey>
        </issuelink>
                            </outwardlinks>
                                                        </issuelinktype>
                    </issuelinks>
                <attachments>
                            <attachment id="63948" name="changed-perms.txt" size="13581" author="5cd423bebc70090d6ce241b1" created="Fri, 12 Mar 2021 21:28:33 +0000"/>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10000" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummarycf">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10057" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Development Team</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10155"><![CDATA[FOLIO DevOps]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10019" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0|hzx2vb:r7k</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10020" key="com.pyxis.greenhopper.jira:gh-sprint">
                        <customfieldname>Sprint</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue id="1990">DevOps: Sprint 105</customfieldvalue>
    <customfieldvalue id="1991">DevOps Sprint 109</customfieldvalue>
    <customfieldvalue id="1880">DevOps Sprint 107</customfieldvalue>
    <customfieldvalue id="1881">DevOps Sprint 108</customfieldvalue>
    <customfieldvalue id="1980">DevOps Sprint 106</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10024" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>[CHART] Date of First Response</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Tue, 5 Jan 2021 20:03:38 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                </customfields>
    </item>
</channel>
</rss>