ActionNotAllowed: sign permission required

[didier fabert]

Hi all,

I have a personal koji and after upgrade it from 1.14 to 1.17, sigulsign_unsigned.py
cannot write signed rpm with the following error
<code>
INFO: Setting up koji session
INFO: Starting new HTTPS connection (1): koji.example.com
INFO: Getting builds from arguments
INFO: Got 1 builds
INFO: Getting build IDs from Koji
INFO: Getting rpms from each build
INFO: Found 3 rpms
INFO: Checking for unsigned rpms in koji
INFO: Signing rpms via sigul
INFO: Calling koji to write 3 rpms
ERROR: Error writing out nagios-plugins-example-1.0.53-1.el7.src.rpm
ERROR:     ActionNotAllowed: sign permission required

ERROR: Error writing out nagios-plugins-example-1.0.53-1.el7.x86_64.rpm
ERROR:     ActionNotAllowed: sign permission required

ERROR: Error writing out nagios-engines-example-1.0.53-1.el7.x86_64.rpm
ERROR:     ActionNotAllowed: sign permission required

ERROR: Errors during Writing:
ERROR:      nagios-plugins-example-1.0.53-1.el7.src.rpm
ERROR:      nagios-plugins-example-1.0.53-1.el7.x86_64.rpm
ERROR:      nagios-engines-example-1.0.53-1.el7.x86_64.rpm
</code>
I found nothing about his permission
<code>
koji list-permissions
admin
build
repo
livecd
maven-import
win-import
win-admin
appliance
image
</code>
I ran every schema-upgrade-*.sql db in /usr/share/doc/koji-1.17.0/docs/ from 1.15 to
1.16.

Am I miss something ?

[Tomas Kopecek]

Create it on fly (it is not there by default). `koji grant-permission --new
sign user_xyz`. I've created https://pagure.io/koji/issue/1520 to create it
by default.

po 1. 7. 2019 v 11:38 odesílatel didier fabert <didier.fabert(a)gmail.com&gt;
napsal:

>  Hi all,
>
>  I have a personal koji and after upgrade it from 1.14 to 1.17,
>  sigulsign_unsigned.py cannot write signed rpm with the following error
>  <code>
>  INFO: Setting up koji session
>  INFO: Starting new HTTPS connection (1): koji.example.com
>  INFO: Getting builds from arguments
>  INFO: Got 1 builds
>  INFO: Getting build IDs from Koji
>  INFO: Getting rpms from each build
>  INFO: Found 3 rpms
>  INFO: Checking for unsigned rpms in koji
>  INFO: Signing rpms via sigul
>  INFO: Calling koji to write 3 rpms
>  ERROR: Error writing out nagios-plugins-example-1.0.53-1.el7.src.rpm
>  ERROR:     ActionNotAllowed: sign permission required
>
>  ERROR: Error writing out nagios-plugins-example-1.0.53-1.el7.x86_64.rpm
>  ERROR:     ActionNotAllowed: sign permission required
>
>  ERROR: Error writing out nagios-engines-example-1.0.53-1.el7.x86_64.rpm
>  ERROR:     ActionNotAllowed: sign permission required
>
>  ERROR: Errors during Writing:
>  ERROR:      nagios-plugins-example-1.0.53-1.el7.src.rpm
>  ERROR:      nagios-plugins-example-1.0.53-1.el7.x86_64.rpm
>  ERROR:      nagios-engines-example-1.0.53-1.el7.x86_64.rpm
>  </code>
>  I found nothing about his permission
>  <code>
>  koji list-permissions
>  admin
>  build
>  repo
>  livecd
>  maven-import
>  win-import
>  win-admin
>  appliance
>  image
>  </code>
>  I ran every schema-upgrade-*.sql db in /usr/share/doc/koji-1.17.0/docs/
>  from 1.15 to 1.16.
>
>  Am I miss something ?
>  _______________________________________________
>  buildsys mailing list -- buildsys(a)lists.fedoraproject.org
>  To unsubscribe send an email to buildsys-leave(a)lists.fedoraproject.org
>  Fedora Code of Conduct:
>  https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
>  https://lists.fedoraproject.org/archives/list/[e-mail]...
>  

-- 

            Tomas Kopecek <tkopecek(a)redhat.com&gt;
            Release Engineering Development, RedHat