Modify

Opened 11 years ago

Closed 11 years ago

#266 closed defect (wontfix)

Anonymous users seem to have access

Reported by: Scott Grayban <sgrayban@…> Owned by: Noah Kantrowitz
Priority: high Component: HackInstallPlugin
Severity: critical Keywords:
Cc: Trac Release: 0.9

Description

It seems that anonymous users have some access to this plugin. Not sure is this is my error or a error in the plugin.

You can see what I mean at my website.

There is also a trackback error I get when usiing this.

Traceback (most recent call last):
  File "/usr/lib/python2.4/site-packages/trac/web/standalone.py", line 303, in _do_trac_req
    dispatch_request(path_info, req, env)
  File "/usr/lib/python2.4/site-packages/trac/web/main.py", line 139, in dispatch_request
    dispatcher.dispatch(req)
  File "/usr/lib/python2.4/site-packages/trac/web/main.py", line 107, in dispatch
    resp = chosen_handler.process_request(req)
  File "/usr/lib/python2.4/site-packages/TracWebAdmin-0.1.1dev_r2765-py2.4.egg/webadmin/web_ui.py", line 106, in process_request
    path_info)
  File "build/bdist.linux-i686/egg/hackinstall/web_ui.py", line 98, in process_admin_request
  File "build/bdist.linux-i686/egg/hackinstall/web_ui.py", line 255, in _install_plugins
IndexError: list index out of range

Attachments (0)

Change History (13)

comment:1 Changed 11 years ago by Noah Kantrowitz

Status: newassigned

Are you running the most recent version? Those should both have been fixed in trunk.

comment:2 Changed 11 years ago by Scott Grayban <sgrayban@…>

Bottom of my trac site says "Powered by Trac 0.9.4"

comment:3 Changed 11 years ago by Noah Kantrowitz

I mean the most recent version of this plugin.

comment:4 Changed 11 years ago by Scott Grayban <sgrayban@…>

I downloaded the version that is in the zip file link on the page.

/usr/lib/python2.4/site-packages/HackInstall-0.5-py2.4.egg/hackinstall/web_ui.pyc

That is what it compiled from that zip file.

I'm running the standalone server if that would be a problem.

comment:5 Changed 11 years ago by Noah Kantrowitz

Please try doing an actual checkout, and rebuild from that.

comment:6 Changed 11 years ago by Scott Grayban <sgrayban@…>

Ok that fixed the Admin issue. You should zip a new file from the svn then. The one you have for the download is bad.

However I still can't install any plugins. The only log I have is the log thats in the standalone. There are no webserver logs for a standalone server so this is all I can offer.

07:39:58 AM Trac[web_ui] DEBUG: Found egg 'TracAccountManager-0.1.2-py2.4.egg'
07:39:58 AM Trac[web_ui] DEBUG: Extracted version = 0
07:39:58 AM Trac[core] INFO: Running os.system(easy_install -m --install-dir=/var/trac/project/castpodder/plugins --record=/tmp/hackinstall-recordXinFXo.txt http://trac-hacks.org/svn/changelogplugin/0.9)
07:40:00 AM Trac[core] WARNING: easy_install failed with a return code of 256. Please look in your webserver's error log for the output
07:40:00 AM Trac[web_ui] WARNING: Encountered an unknown error when installing ChangeLogPlugin. Please see your webserver's logs for more information.
07:40:00 AM Trac[main] ERROR: Error during installation, please see the log for more information.
Traceback (most recent call last):
  File "/usr/lib/python2.4/site-packages/trac/web/standalone.py", line 303, in _do_trac_req
    dispatch_request(path_info, req, env)
  File "/usr/lib/python2.4/site-packages/trac/web/main.py", line 139, in dispatch_request
    dispatcher.dispatch(req)
  File "/usr/lib/python2.4/site-packages/trac/web/main.py", line 107, in dispatch
    resp = chosen_handler.process_request(req)
  File "/usr/lib/python2.4/site-packages/TracWebAdmin-0.1.1dev_r2765-py2.4.egg/webadmin/web_ui.py", line 106, in process_request
    path_info)
  File "/usr/lib/python2.4/site-packages/HackInstall-0.5-py2.4.egg/hackinstall/web_ui.py", line 99, in process_admin_request
  File "/usr/lib/python2.4/site-packages/HackInstall-0.5-py2.4.egg/hackinstall/web_ui.py", line 264, in _install_plugins
TracError: Error during installation, please see the log for more information.

comment:7 Changed 11 years ago by Scott Grayban <sgrayban@…>

Anything on this yet?

comment:8 Changed 11 years ago by Alec Thomas

The ZIP download links have been fixed. This was an issue on TracHacks.

comment:9 Changed 11 years ago by Scott Grayban <sgrayban@…>

Still not working here for me.

Log output is below.....

04:35:43 PM Trac[web_ui] DEBUG: Found egg 'TracAccountManager-0.1.2-py2.4.egg'
04:35:43 PM Trac[web_ui] DEBUG: Extracted version = 0
04:35:43 PM Trac[web_ui] DEBUG: Found egg 'TracXMLRPC-0.1-py2.4.egg'
04:35:43 PM Trac[web_ui] DEBUG: Extracted version = 0
04:35:43 PM Trac[core] INFO: Running os.system(easy_install -m --install-dir=/var/trac/project/castpodder/plugins --record=/tmp/hackinstall-recordiM9EcK.txt http://trac-hacks.org/svn/changelogplugin/0.9)
04:35:45 PM Trac[core] WARNING: easy_install failed with a return code of 256. Please look in your webserver's error log for the output
04:35:45 PM Trac[web_ui] WARNING: Encountered an unknown error when installing ChangeLogPlugin. Please see your webserver's logs for more information.
04:35:45 PM Trac[main] ERROR: Error during installation, please see the log for more information.
Traceback (most recent call last):
  File "/usr/lib/python2.4/site-packages/trac/web/standalone.py", line 303, in _do_trac_req
    dispatch_request(path_info, req, env)
  File "/usr/lib/python2.4/site-packages/trac/web/main.py", line 139, in dispatch_request
    dispatcher.dispatch(req)
  File "/usr/lib/python2.4/site-packages/trac/web/main.py", line 107, in dispatch
    resp = chosen_handler.process_request(req)
  File "/usr/lib/python2.4/site-packages/TracWebAdmin-0.1.1dev_r2765-py2.4.egg/webadmin/web_ui.py", line 106, in process_request
    path_info)
  File "/usr/lib/python2.4/site-packages/HackInstall-0.5-py2.4.egg/hackinstall/web_ui.py", line 99, in process_admin_request
  File "/usr/lib/python2.4/site-packages/HackInstall-0.5-py2.4.egg/hackinstall/web_ui.py", line 264, in _install_plugins
TracError: Error during installation, please see the log for more information.

Any ideas why this is happening? Shouldn't the plugin work on standalone Trac sites?

comment:10 Changed 11 years ago by Scott Grayban <sgrayban@…>

Running the command manually works just fine with a error that can be ignored.

# easy_install -m --install-dir=/var/trac/project/castpodder/plugins --record=/tmp/hackinstall-recordZ6qTmx.txt http://trac-hacks.org/svn/discussionplugin/0.9
TEST FAILED: /var/trac/project/castpodder/plugins does NOT support .pth files
Downloading http://trac-hacks.org/svn/discussionplugin/0.9
Doing subversion checkout from http://trac-hacks.org/svn/discussionplugin/0.9 to /root/tmp/easy_install-m5jsBE/0.9
Processing 0.9
Running setup.py -q bdist_egg --dist-dir /root/tmp/easy_install-m5jsBE/0.9/egg-dist-tmp-SWLku4
warning: manifest_maker: standard file not found: should have one of README, README.txt
zip_safe flag not set; analyzing archive contents...

Installed /var/trac/project/castpodder/plugins/TracDiscussion-0.1-py2.4.egg

Because this distribution was installed --multi-version or --install-dir,
before you can import modules from this package in an application, you
will need to 'import pkg_resources' and then use a 'require()' call
similar to one of these examples, in order to select the desired version:

    pkg_resources.require("TracDiscussion")  # latest installed version
    pkg_resources.require("TracDiscussion==0.1")  # this exact version
    pkg_resources.require("TracDiscussion>=0.1")  # this version or higher


Note also that the installation directory must be on sys.path at runtime for
this to work.  (e.g. by being the application's script directory, by being on
PYTHONPATH, or by being added to sys.path by your code.)

Processing dependencies for TracDiscussion==0.1
writing list of installed files to '/tmp/hackinstall-recordZ6qTmx.txt'

comment:11 Changed 11 years ago by Scott Grayban <sgrayban@…>

Keywords: dead added
Resolution: wontfix
Status: assignedclosed
Trac Release: 0.9

Well thanks for atleast looking. I removed your plugin since it obviously doesn't work. You haven't even responded to this. Shame, it had potential but I have no time to hack code you should be fixing.

comment:12 Changed 11 years ago by Noah Kantrowitz

Keywords: dead removed
Resolution: wontfix
Status: closedreopened

Several points of note:

  1. This plugin is still very experimental, but it works quite well on my development server.
  2. I do intend to fix this, but as a full time student I have other priorities.
  3. This is largely community supported, so I will accept a patch from just about anyone. This is no more my job than anyone else's.

comment:13 Changed 11 years ago by Noah Kantrowitz

Resolution: wontfix
Status: reopenedclosed

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The owner will remain Noah Kantrowitz.
The resolution will be deleted. Next status will be 'reopened'.

Add Comment


E-mail address and name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.