ActionNotAllowed: sign permission required

[didier fabert]

Hi all,

I have a personal koji and after upgrade it from 1.14 to 1.17, sigulsign_unsigned.py cannot write signed rpm with the following error
<code>
INFO: Setting up koji session
INFO: Starting new HTTPS connection (1): koji.example.com
INFO: Getting builds from arguments
INFO: Got 1 builds
INFO: Getting build IDs from Koji
INFO: Getting rpms from each build
INFO: Found 3 rpms
INFO: Checking for unsigned rpms in koji
INFO: Signing rpms via sigul
INFO: Calling koji to write 3 rpms
ERROR: Error writing out nagios-plugins-example-1.0.53-1.el7.src.rpm
ERROR:     ActionNotAllowed: sign permission required

ERROR: Error writing out nagios-plugins-example-1.0.53-1.el7.x86_64.rpm
ERROR:     ActionNotAllowed: sign permission required

ERROR: Error writing out nagios-engines-example-1.0.53-1.el7.x86_64.rpm
ERROR:     ActionNotAllowed: sign permission required

ERROR: Errors during Writing:
ERROR:      nagios-plugins-example-1.0.53-1.el7.src.rpm
ERROR:      nagios-plugins-example-1.0.53-1.el7.x86_64.rpm
ERROR:      nagios-engines-example-1.0.53-1.el7.x86_64.rpm
</code>
I found nothing about his permission
<code>
koji list-permissions
admin
build
repo
livecd
maven-import
win-import
win-admin
appliance
image
</code>
I ran every schema-upgrade-*.sql db in /usr/share/doc/koji-1.17.0/docs/ from 1.15 to 1.16.

Am I miss something ?

[Tomas Kopecek]

Create it on fly (it is not there by default). `koji grant-permission --new
sign user_xyz`. I've created https://pagure.io/koji/issue/1520 to create it
by default.

po 1. 7. 2019 v 11:38 odesílatel didier fabert 
napsal:
> Hi all,
>
> I have a personal koji and after upgrade it from 1.14 to 1.17,
> sigulsign_unsigned.py cannot write signed rpm with the following error
>
> <code>
> INFO: Setting up koji session
> INFO: Starting new HTTPS connection (1): koji.example.com
> INFO: Getting builds from arguments
> INFO: Got 1 builds
> INFO: Getting build IDs from Koji
> INFO: Getting rpms from each build
> INFO: Found 3 rpms
> INFO: Checking for unsigned rpms in koji
> INFO: Signing rpms via sigul
> INFO: Calling koji to write 3 rpms
> ERROR: Error writing out nagios-plugins-example-1.0.53-1.el7.src.rpm
> ERROR:     ActionNotAllowed: sign permission required
>
> ERROR: Error writing out nagios-plugins-example-1.0.53-1.el7.x86_64.rpm
> ERROR:     ActionNotAllowed: sign permission required
>
> ERROR: Error writing out nagios-engines-example-1.0.53-1.el7.x86_64.rpm
> ERROR:     ActionNotAllowed: sign permission required
>
> ERROR: Errors during Writing:
> ERROR:      nagios-plugins-example-1.0.53-1.el7.src.rpm
> ERROR:      nagios-plugins-example-1.0.53-1.el7.x86_64.rpm
> ERROR:      nagios-engines-example-1.0.53-1.el7.x86_64.rpm
>
> </code>
> I found nothing about his permission
> <code>
> koji list-permissions
> admin
> build
> repo
> livecd
> maven-import
> win-import
> win-admin
> appliance
> image
> </code>
> I ran every schema-upgrade-*.sql db in /usr/share/doc/koji-1.17.0/docs/
> from 1.15 to 1.16.
>
> Am I miss something ?
> _______________________________________________
> buildsys mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail].o...