Error checking mailto: based authorization about acl-check HOT 8 CLOSED

Would be cool to have this fixed, since it is preventing people to use cool apps like solid-focus, which write directly to the root folder. Just had to give support to someone who was not aware of this bug and wondering why it did not work.

from acl-check.

ok, I don't remember how we triaged this 4 weeks ago because from your description it does sound like a bug. We should have added a note on the issue, sorry about that. Would you like to have a go at fixing this yourself? If not, we'll triage it again on Monday, and then either @jaxoncreed or myself will add it to our queue.

from acl-check.

Sorry, cannot handle this myself at the moment.

from acl-check.

I experienced a similar problem using the nodejs 5.x server

When a mail is specified in an acl file, applications do not have any access mode.
Here is the response received

403: All Required Access Modes Not Granted

The problem can be bypassed by commenting the mail line in the root acl file ("acl:agent mailto:[email protected];").

The problem seems to come from acl-check.js: getTrustedModesForOrigin does not seem to return any results because it somehow fails while trying to get the modes authorized by the mail acl:agent (e. g. mailto:[email protected])

solid:ACL Using ACL https://192.168.1.42:8454/.acl for ./.acl +0ms
solid:ACL 2 direct authentications about https://192.168.1.42:8454/ +16ms
solid:ACL could not fetch owner doc NamedNode { termType: 'NamedNode', value: 'mailto:[email protected]' } Only HTTP(S) protocols are supported +20ms
solid:ACL accessDenied: checking access to https://192.168.1.42:8454/ by https://persocloud.solidweb.org/profile/card#me and origin https://hyuryu.solid.community +477ms
solid:ACL trustedOrigins https://192.168.1.42:8454, modes +3ms
solid:ACL 2 direct authentications about https://192.168.1.42:8454/ +6ms
solid:ACL Agent or group: Ok, its public. +6ms
solid:ACL Mode allowed: http://www.w3.org/ns/auth/acl#Read +3ms
solid:ACL Checking auth https://192.168.1.42:8454/.acl#owner with agent https://persocloud.solidweb.org/profile/card#me +3ms
solid:ACL Agent explicitly authenticated. +4ms
solid:ACL Origin check FAILED. Origin not trusted. +3ms
solid:ACL Check failed: Origin Unauthorized +2ms
solid:ACL accessDenied: modeURIorReasons: ["http://www.w3.org/ns/auth/acl#Read","Origin Unauthorized"] +1ms
solid:ACL checking http://www.w3.org/ns/auth/acl#Control +2ms
solid:ACL MODE REQUIRED NOT ALLOWED: http://www.w3.org/ns/auth/acl#Control Denying with All Required Access Modes Not Granted +1ms
solid:ACL Read access denied to https://persocloud.solidweb.org/profile/card#me: 403 - All Required Access Modes Not Granted +5ms

from acl-check.

cc @jaxoncreed

from acl-check.

This is urgent, it's causing errors in production.

from acl-check.

Oh bummer, from https://github.com/solid/acl-check/commits/master it looks like this was fixed in thie module, but we didn't update NSS to use the latest version? Sorry about that!

from acl-check.

fixed in #1242

from acl-check.