[Glass] Cannot #reclaimAll ... fails with a SecurityError

[Mariano Martinez Peck via Glass]

On Thu, Jul 2, 2015 at 6:13 PM, James Foster <
james.foster at gemtalksystems.com> wrote:

> Take a look at:
> ((AllUsers userWithId: 'GcUser') objectNamed: #'UserGlobals')
> objectSecurityPolicy.
> Then take a look at:
> System myUserProfile groups.
> Your code should work as DataCurator since that user is in the System
> group, which has write permission to #’UserGlobals’ for GcUser.
>
> I suspect that UserXXX is not in the System group. With the privileges you
> have granted, your user can initiate GC operations, but not adjust GC
> parameters.
>
>
Thanks James!!! You nailed it. I added my user to 'System' group and it
worked. Now I wonder....#reclaimAll has always been failing since forever
in my servers??? hahahahah . I need to test this tomorrow.... In either
case, as far as I understand, the #reclaimAll is NOT MANDATORY but an
option to eagerly reclaim at times where system is less used, (things will
be reclaimed if needed), as opposite to MFC which I HAVE to do it.

Thank you both,




> James
>
> On Jul 2, 2015, at 1:56 PM, James Foster <james.foster at gemtalksystems.com>
> wrote:
>
> This is related to ObjectSecurityPolicy and I suspect that you could
> change the policy for the object in question so that it could be modified
> by your other user. See the Programming Guide for details.
>
> James
>
> On Jul 2, 2015, at 1:22 PM, Mariano Martinez Peck via Glass <
> glass at lists.gemtalksystems.com> wrote:
>
> Hi,
>
> I am trying to do a reclaimAll in my local gemstone (running in OSX). I am
> running the following code:
>
> System beginTransaction.
> SystemRepository reclaimAll.
>
> And the user I am using to run that code (the one that holds and runs my
> app) is created with this privileges:
>
> (AllUsers userWithId: 'userXXX')
> addPrivilege: #'CodeModification';
>      addPrivilege: #'UserPassword';
>      addPrivilege: #'OtherPassword';
>      addPrivilege: #'*GarbageCollection*';
>      addPrivilege: #'*SystemControl*';
>      addPrivilege: #'SessionAccess';
>      addPrivilege: #'FileControl';
>      addPrivilege: #'SessionPriority';
>      addGroup: 'DataCuratorGroup'.
>
> As you can see, it does have *GarbageCollection and **SystemControl *
> added.
>
> The error I am getting is in #reclaimAll in the line:
>
> *newMinPages := 1 .*
> *saveMinPages := self _setGcConfigAt: #reclaimMinPages put: newMinPages .*
>
> And this is the exact error:
>
> a SecurityError occurred (error 2116), An attempt was made to modify the
> object #'reclaimMinPages'->40 in objectSecurityPolicyId 7 with insufficient
> authorization.
>
> I know I may solve this by logging in in as GsUser, but I want to run
> #reclaimAll with MY user.
>
> Thoughts?
>
> Thanks in advance,
>
> --
> Mariano
> http://marianopeck.wordpress.com
>  _______________________________________________
> Glass mailing list
> Glass at lists.gemtalksystems.com
> http://lists.gemtalksystems.com/mailman/listinfo/glass
>
>
>
>


-- 
Mariano
http://marianopeck.wordpress.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.gemtalksystems.com/mailman/private/glass/attachments/20150702/ed9486b1/attachment.html>