[Glass] Cannot #reclaimAll ... fails with a SecurityError

[James Foster via Glass]

Take a look at:
	((AllUsers userWithId: 'GcUser') objectNamed: #'UserGlobals') objectSecurityPolicy. 
Then take a look at:
	System myUserProfile groups.
Your code should work as DataCurator since that user is in the System group, which has write permission to #’UserGlobals’ for GcUser.

I suspect that UserXXX is not in the System group. With the privileges you have granted, your user can initiate GC operations, but not adjust GC parameters.

James

> On Jul 2, 2015, at 1:56 PM, James Foster <james.foster at gemtalksystems.com> wrote:
> 
> This is related to ObjectSecurityPolicy and I suspect that you could change the policy for the object in question so that it could be modified by your other user. See the Programming Guide for details.
> 
> James
> 
>> On Jul 2, 2015, at 1:22 PM, Mariano Martinez Peck via Glass <glass at lists.gemtalksystems.com <mailto:glass at lists.gemtalksystems.com>> wrote:
>> 
>> Hi,
>> 
>> I am trying to do a reclaimAll in my local gemstone (running in OSX). I am running the following code:
>> 
>> System beginTransaction. 
>> SystemRepository reclaimAll.
>> 
>> And the user I am using to run that code (the one that holds and runs my app) is created with this privileges:
>> 
>> (AllUsers userWithId: 'userXXX')
>> 	addPrivilege: #'CodeModification';
>>      addPrivilege: #'UserPassword';
>>      addPrivilege: #'OtherPassword';
>>      addPrivilege: #'GarbageCollection';
>>      addPrivilege: #'SystemControl';
>>      addPrivilege: #'SessionAccess';
>>      addPrivilege: #'FileControl';
>>      addPrivilege: #'SessionPriority';
>>      addGroup: 'DataCuratorGroup'.
>> 
>> As you can see, it does have GarbageCollection and SystemControl added.
>> 
>> The error I am getting is in #reclaimAll in the line:
>> 
>> newMinPages := 1 .
>> saveMinPages := self _setGcConfigAt: #reclaimMinPages put: newMinPages .
>> 
>> And this is the exact error:
>> 
>> a SecurityError occurred (error 2116), An attempt was made to modify the object #'reclaimMinPages'->40 in objectSecurityPolicyId 7 with insufficient authorization.
>> 
>> I know I may solve this by logging in in as GsUser, but I want to run #reclaimAll with MY user. 
>> 
>> Thoughts?
>> 
>> Thanks in advance,
>> 
>> -- 
>> Mariano
>> http://marianopeck.wordpress.com <http://marianopeck.wordpress.com/>
>> _______________________________________________
>> Glass mailing list
>> Glass at lists.gemtalksystems.com <mailto:Glass at lists.gemtalksystems.com>
>> http://lists.gemtalksystems.com/mailman/listinfo/glass
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.gemtalksystems.com/mailman/private/glass/attachments/20150702/76f69f69/attachment-0001.html>