Modify

Opened 11 years ago

Closed 10 years ago

#266 closed defect (wontfix)

Anonymous users seem to have access

Reported by: Scott Grayban <sgrayban@…> Owned by: coderanger
Priority: high Component: HackInstallPlugin
Severity: critical Keywords:
Cc: Trac Release: 0.9

Description

It seems that anonymous users have some access to this plugin. Not sure is this is my error or a error in the plugin.

You can see what I mean at my website.

There is also a trackback error I get when usiing this.

Traceback (most recent call last):
  File "/usr/lib/python2.4/site-packages/trac/web/standalone.py", line 303, in _do_trac_req
    dispatch_request(path_info, req, env)
  File "/usr/lib/python2.4/site-packages/trac/web/main.py", line 139, in dispatch_request
    dispatcher.dispatch(req)
  File "/usr/lib/python2.4/site-packages/trac/web/main.py", line 107, in dispatch
    resp = chosen_handler.process_request(req)
  File "/usr/lib/python2.4/site-packages/TracWebAdmin-0.1.1dev_r2765-py2.4.egg/webadmin/web_ui.py", line 106, in process_request
    path_info)
  File "build/bdist.linux-i686/egg/hackinstall/web_ui.py", line 98, in process_admin_request
  File "build/bdist.linux-i686/egg/hackinstall/web_ui.py", line 255, in _install_plugins
IndexError: list index out of range

Attachments (0)

Change History (13)

comment:1 Changed 11 years ago by coderanger

  • Status changed from new to assigned

Are you running the most recent version? Those should both have been fixed in trunk.

comment:2 Changed 11 years ago by Scott Grayban <sgrayban@…>

Bottom of my trac site says "Powered by Trac 0.9.4"

comment:3 Changed 11 years ago by coderanger

I mean the most recent version of this plugin.

comment:4 Changed 11 years ago by Scott Grayban <sgrayban@…>

I downloaded the version that is in the zip file link on the page.

/usr/lib/python2.4/site-packages/HackInstall-0.5-py2.4.egg/hackinstall/web_ui.pyc

That is what it compiled from that zip file.

I'm running the standalone server if that would be a problem.

comment:5 Changed 11 years ago by coderanger

Please try doing an actual checkout, and rebuild from that.

comment:6 Changed 11 years ago by Scott Grayban <sgrayban@…>

Ok that fixed the Admin issue. You should zip a new file from the svn then. The one you have for the download is bad.

However I still can't install any plugins. The only log I have is the log thats in the standalone. There are no webserver logs for a standalone server so this is all I can offer.

07:39:58 AM Trac[web_ui] DEBUG: Found egg 'TracAccountManager-0.1.2-py2.4.egg'
07:39:58 AM Trac[web_ui] DEBUG: Extracted version = 0
07:39:58 AM Trac[core] INFO: Running os.system(easy_install -m --install-dir=/var/trac/project/castpodder/plugins --record=/tmp/hackinstall-recordXinFXo.txt http://trac-hacks.org/svn/changelogplugin/0.9)
07:40:00 AM Trac[core] WARNING: easy_install failed with a return code of 256. Please look in your webserver's error log for the output
07:40:00 AM Trac[web_ui] WARNING: Encountered an unknown error when installing ChangeLogPlugin. Please see your webserver's logs for more information.
07:40:00 AM Trac[main] ERROR: Error during installation, please see the log for more information.
Traceback (most recent call last):
  File "/usr/lib/python2.4/site-packages/trac/web/standalone.py", line 303, in _do_trac_req
    dispatch_request(path_info, req, env)
  File "/usr/lib/python2.4/site-packages/trac/web/main.py", line 139, in dispatch_request
    dispatcher.dispatch(req)
  File "/usr/lib/python2.4/site-packages/trac/web/main.py", line 107, in dispatch
    resp = chosen_handler.process_request(req)
  File "/usr/lib/python2.4/site-packages/TracWebAdmin-0.1.1dev_r2765-py2.4.egg/webadmin/web_ui.py", line 106, in process_request
    path_info)
  File "/usr/lib/python2.4/site-packages/HackInstall-0.5-py2.4.egg/hackinstall/web_ui.py", line 99, in process_admin_request
  File "/usr/lib/python2.4/site-packages/HackInstall-0.5-py2.4.egg/hackinstall/web_ui.py", line 264, in _install_plugins
TracError: Error during installation, please see the log for more information.

comment:7 Changed 11 years ago by Scott Grayban <sgrayban@…>

Anything on this yet?

comment:8 Changed 11 years ago by athomas

The ZIP download links have been fixed. This was an issue on TracHacks.

comment:9 Changed 11 years ago by Scott Grayban <sgrayban@…>

Still not working here for me.

Log output is below.....

04:35:43 PM Trac[web_ui] DEBUG: Found egg 'TracAccountManager-0.1.2-py2.4.egg'
04:35:43 PM Trac[web_ui] DEBUG: Extracted version = 0
04:35:43 PM Trac[web_ui] DEBUG: Found egg 'TracXMLRPC-0.1-py2.4.egg'
04:35:43 PM Trac[web_ui] DEBUG: Extracted version = 0
04:35:43 PM Trac[core] INFO: Running os.system(easy_install -m --install-dir=/var/trac/project/castpodder/plugins --record=/tmp/hackinstall-recordiM9EcK.txt http://trac-hacks.org/svn/changelogplugin/0.9)
04:35:45 PM Trac[core] WARNING: easy_install failed with a return code of 256. Please look in your webserver's error log for the output
04:35:45 PM Trac[web_ui] WARNING: Encountered an unknown error when installing ChangeLogPlugin. Please see your webserver's logs for more information.
04:35:45 PM Trac[main] ERROR: Error during installation, please see the log for more information.
Traceback (most recent call last):
  File "/usr/lib/python2.4/site-packages/trac/web/standalone.py", line 303, in _do_trac_req
    dispatch_request(path_info, req, env)
  File "/usr/lib/python2.4/site-packages/trac/web/main.py", line 139, in dispatch_request
    dispatcher.dispatch(req)
  File "/usr/lib/python2.4/site-packages/trac/web/main.py", line 107, in dispatch
    resp = chosen_handler.process_request(req)
  File "/usr/lib/python2.4/site-packages/TracWebAdmin-0.1.1dev_r2765-py2.4.egg/webadmin/web_ui.py", line 106, in process_request
    path_info)
  File "/usr/lib/python2.4/site-packages/HackInstall-0.5-py2.4.egg/hackinstall/web_ui.py", line 99, in process_admin_request
  File "/usr/lib/python2.4/site-packages/HackInstall-0.5-py2.4.egg/hackinstall/web_ui.py", line 264, in _install_plugins
TracError: Error during installation, please see the log for more information.

Any ideas why this is happening? Shouldn't the plugin work on standalone Trac sites?

comment:10 Changed 11 years ago by Scott Grayban <sgrayban@…>

Running the command manually works just fine with a error that can be ignored.

# easy_install -m --install-dir=/var/trac/project/castpodder/plugins --record=/tmp/hackinstall-recordZ6qTmx.txt http://trac-hacks.org/svn/discussionplugin/0.9
TEST FAILED: /var/trac/project/castpodder/plugins does NOT support .pth files
Downloading http://trac-hacks.org/svn/discussionplugin/0.9
Doing subversion checkout from http://trac-hacks.org/svn/discussionplugin/0.9 to /root/tmp/easy_install-m5jsBE/0.9
Processing 0.9
Running setup.py -q bdist_egg --dist-dir /root/tmp/easy_install-m5jsBE/0.9/egg-dist-tmp-SWLku4
warning: manifest_maker: standard file not found: should have one of README, README.txt
zip_safe flag not set; analyzing archive contents...

Installed /var/trac/project/castpodder/plugins/TracDiscussion-0.1-py2.4.egg

Because this distribution was installed --multi-version or --install-dir,
before you can import modules from this package in an application, you
will need to 'import pkg_resources' and then use a 'require()' call
similar to one of these examples, in order to select the desired version:

    pkg_resources.require("TracDiscussion")  # latest installed version
    pkg_resources.require("TracDiscussion==0.1")  # this exact version
    pkg_resources.require("TracDiscussion>=0.1")  # this version or higher


Note also that the installation directory must be on sys.path at runtime for
this to work.  (e.g. by being the application's script directory, by being on
PYTHONPATH, or by being added to sys.path by your code.)

Processing dependencies for TracDiscussion==0.1
writing list of installed files to '/tmp/hackinstall-recordZ6qTmx.txt'

comment:11 Changed 11 years ago by Scott Grayban <sgrayban@…>

  • Keywords dead added
  • Resolution set to wontfix
  • Status changed from assigned to closed
  • Trac Release set to 0.9

Well thanks for atleast looking. I removed your plugin since it obviously doesn't work. You haven't even responded to this. Shame, it had potential but I have no time to hack code you should be fixing.

comment:12 Changed 11 years ago by coderanger

  • Keywords dead removed
  • Resolution wontfix deleted
  • Status changed from closed to reopened

Several points of note:

  1. This plugin is still very experimental, but it works quite well on my development server.
  2. I do intend to fix this, but as a full time student I have other priorities.
  3. This is largely community supported, so I will accept a patch from just about anyone. This is no more my job than anyone else's.

comment:13 Changed 10 years ago by coderanger

  • Resolution set to wontfix
  • Status changed from reopened to closed

Add Comment

Modify Ticket

Action
as closed The owner will remain coderanger.
The resolution will be deleted. Next status will be 'reopened'.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.