Event Visualiser Status: Conflict, User: xyw not allowed...

This issue just ‘popped’ in the last 12 hours for a pilot system for event capture. Some form changes were made and pushed out … and while this error seems to point to a permissions issue …. it doesn’t make any logical sense. Here goes,

3 event charts worked last night.

This morning, those same 3 charts throw an error:

Code: 409

Status: Conflict

User_ xyz is not allowed to view org unit: abc

The silly thing is, I’m not logged in as that user, but as Admin, with full access to all orgs.

If I look at the request URL (similar to below) …

/api/analytics/events/aggregate/wVzYQk6jW5q.json?stage=iPDH75AgmNv&dimension=kbaD30LqqjQ&dimension=ou:abc;tMQcwX60LSi;I3BIS1WKwpD&filter=pe:LAST_4_WEEKS;THIS_WEEK&outputType=EVENT&displayProperty=NAME

which generates the error, and remove the offending org id from the query string …. it brings back a result-set rather than the error message.

Any clues anyone?

Version info is: 2.21

Build revision: 20971
Build date: 2015-12-18 12:01

David

Are you sure this is not server caching, possibly the reverse proxy?

···

On Wed, Mar 16, 2016 at 1:40 PM, David Hagan david.hagan@sagehagan.com wrote:

This issue just ‘popped’ in the last 12 hours for a pilot system for event capture. Some form changes were made and pushed out … and while this error seems to point to a permissions issue …. it doesn’t make any logical sense. Here goes,

3 event charts worked last night.

This morning, those same 3 charts throw an error:

Code: 409

Status: Conflict

User_ xyz is not allowed to view org unit: abc

The silly thing is, I’m not logged in as that user, but as Admin, with full access to all orgs.

If I look at the request URL (similar to below) …

/api/analytics/events/aggregate/wVzYQk6jW5q.json?stage=iPDH75AgmNv&dimension=kbaD30LqqjQ&dimension=ou:abc;tMQcwX60LSi;I3BIS1WKwpD&filter=pe:LAST_4_WEEKS;THIS_WEEK&outputType=EVENT&displayProperty=NAME

which generates the error, and remove the offending org id from the query string …. it brings back a result-set rather than the error message.

Any clues anyone?

Version info is: 2.21

Build revision: 20971
Build date: 2015-12-18 12:01

David


Mailing list: https://launchpad.net/~dhis2-users

Post to : dhis2-users@lists.launchpad.net

Unsubscribe : https://launchpad.net/~dhis2-users

More help : https://help.launchpad.net/ListHelp

Jason P. Pickering
email: jason.p.pickering@gmail.com
tel:+46764147049

Hmmmmm,

I did do some testing overnight as that user …..

Let me check.

DH

Hi David,

could it be that this user is in fact not allowed to view that org unit? The “data view organisation unit” of the user is determining whether she has access to the org unit, including its sub-hierarchy.

regards,

Lars

···

On Wed, Mar 16, 2016 at 1:40 PM, David Hagan david.hagan@sagehagan.com wrote:

This issue just ‘popped’ in the last 12 hours for a pilot system for event capture. Some form changes were made and pushed out … and while this error seems to point to a permissions issue …. it doesn’t make any logical sense. Here goes,

3 event charts worked last night.

This morning, those same 3 charts throw an error:

Code: 409

Status: Conflict

User_ xyz is not allowed to view org unit: abc

The silly thing is, I’m not logged in as that user, but as Admin, with full access to all orgs.

If I look at the request URL (similar to below) …

/api/analytics/events/aggregate/wVzYQk6jW5q.json?stage=iPDH75AgmNv&dimension=kbaD30LqqjQ&dimension=ou:abc;tMQcwX60LSi;I3BIS1WKwpD&filter=pe:LAST_4_WEEKS;THIS_WEEK&outputType=EVENT&displayProperty=NAME

which generates the error, and remove the offending org id from the query string …. it brings back a result-set rather than the error message.

Any clues anyone?

Version info is: 2.21

Build revision: 20971
Build date: 2015-12-18 12:01

David


Mailing list: https://launchpad.net/~dhis2-users

Post to : dhis2-users@lists.launchpad.net

Unsubscribe : https://launchpad.net/~dhis2-users

More help : https://help.launchpad.net/ListHelp

Lars Helge Øverland

Lead developer, DHIS 2

University of Oslo

Skype: larshelgeoverland

http://www.dhis2.org

Hi David,

Did you get the solution for this. I am also facing the same issue with one of my instance(2.20)

Regards

Akash Jindal

​​

​​

···

On Wed, Mar 16, 2016 at 1:40 PM, David Hagan david.hagan@sagehagan.com wrote:

This issue just ‘popped’ in the last 12 hours for a pilot system for event capture. Some form changes were made and pushed out … and while this error seems to point to a permissions issue …. it doesn’t make any logical sense. Here goes,

3 event charts worked last night.

This morning, those same 3 charts throw an error:

Code: 409

Status: Conflict

User_ xyz is not allowed to view org unit: abc

The silly thing is, I’m not logged in as that user, but as Admin, with full access to all orgs.

If I look at the request URL (similar to below) …

/api/analytics/events/aggregate/wVzYQk6jW5q.json?stage=iPDH75AgmNv&dimension=kbaD30LqqjQ&dimension=ou:abc;tMQcwX60LSi;I3BIS1WKwpD&filter=pe:LAST_4_WEEKS;THIS_WEEK&outputType=EVENT&displayProperty=NAME

which generates the error, and remove the offending org id from the query string …. it brings back a result-set rather than the error message.

Any clues anyone?

Version info is: 2.21

Build revision: 20971
Build date: 2015-12-18 12:01

David


Mailing list: https://launchpad.net/~dhis2-users

Post to : dhis2-users@lists.launchpad.net

Unsubscribe : https://launchpad.net/~dhis2-users

More help : https://help.launchpad.net/ListHelp

Lars Helge Øverland

Lead developer, DHIS 2

University of Oslo

Skype: larshelgeoverland

http://www.dhis2.org

Regards
Akash Jindal

1 Like

I just experienced this same error: User: `Username` is not allowed to view org unit: Orgunituid I have tried running maintenance, refreshing analytics and resources but not helping. This is happening for both standard and super users.

@WaluQ,

Thank you for your question! It does seems like the same error but it could be because of different reasons so please help check.

First, please check that the users have the required permissions (in the API) check that ‘Orgunituid’ or the ancestor (/api/organisationUnits/[Orgunituid]?fields=id,displayFormName,level,ancestors) can be found in: /api/users/[Useruid]?fields=displayName,username,organisationUnits,dataViewOrganisationUnits

Second, please double check that you cleared the cache correctly - sometimes it requires a bit more effort. If you don’t get this error using a new browser/profile then it’s 100% a cache issue. Check out these three steps to do when the cache is not clearing properly: No + button on dahsboard app - #4 by Gassim

Third, after running the analytics tables export, please check the Catalina.out log. Please share the log here (without the sensitive info)

Thank you!