<div dir="ltr"><div>Hi,</div><div><br></div><div>I finally got around to this, and I'm not exactly sure that I understand what's happening.</div><div>When I try to make a security change to a particular application I see the error at the top of the screen:</div><div>
<div class="gmail-flashBox gmail-alert gmail-alert-danger" role="alert">
"There was an error trying to save your application"</div><div class="gmail-flashBox gmail-alert gmail-alert-danger" role="alert"><br></div><div>And if I dig into some of the additional information, In "Translation" I see<br></div></div><div><br></div><div>"
<table><tbody><tr><td class="gmail-font-normal gmail-text-small gmail-nowrap">en</td>
<td class="gmail-font-normal gmail-text-small gmail-text-bold gmail-nowrap">messages</td>
<td class="gmail-font-normal gmail-text-small gmail-nowrap">1</td>
<td>
<span class="gmail-nowrap">mb.application.save.failure.general</span>
</td>
<td class="gmail-prewrap">There was an error trying to save your application.</td></tr></tbody></table>"</div><div><br></div><div>I do see quite a number of Deprecations warnings.</div><div><br></div><div>Here are some of the top ones:</div><div><br></div><div>
<table class="gmail-logs"><tbody><tr class="gmail-"><td class="gmail-font-normal gmail-text-small" nowrap><span class="gmail-text-muted gmail-newline">15:38:50</span>
</td>
<td class="gmail-font-normal gmail-text-small gmail-text-bold" nowrap>
php
<span class="gmail-text-muted">(2 times)</span>
</td>
<td class="gmail-font-normal">
<span class="gmail-dump-inline">User Deprecated: The "<b>choices_as_values</b>" option is deprecated since Symfony 3.1 and will be removed in 4.0. You should not use it anymore.</span>
<div class="gmail-text-small gmail-font-normal">
<a class="gmail-btn gmail-btn-link gmail-text-small gmail-sf-toggle gmail-sf-toggle-off">Show context</a>
<a class="gmail-btn gmail-btn-link gmail-text-small gmail-sf-toggle gmail-sf-toggle-off">Show trace</a>
</div>
</td>
</tr>
<tr class="gmail-">
<td class="gmail-font-normal gmail-text-small" nowrap>
<span class="gmail-text-muted gmail-newline">15:38:50</span>
</td>
<td class="gmail-font-normal gmail-text-small gmail-text-bold" nowrap>
php
</td>
<td class="gmail-font-normal">
<span class="gmail-dump-inline">User Deprecated: The
Symfony\Component\Process\ProcessBuilder class is deprecated since
Symfony 3.4 and will be removed in 4.0. Use the Process class instead.</span>
<div class="gmail-text-small gmail-font-normal">
<a class="gmail-btn gmail-btn-link gmail-text-small gmail-sf-toggle gmail-sf-toggle-off">Show context</a>
<a class="gmail-btn gmail-btn-link gmail-text-small gmail-sf-toggle gmail-sf-toggle-off">Show trace</a>
</div>
</td>
</tr>
<tr class="gmail-">
<td class="gmail-font-normal gmail-text-small" nowrap>
<span class="gmail-text-muted gmail-newline">15:38:50</span>
</td>
<td class="gmail-font-normal gmail-text-small gmail-text-bold" nowrap>
php
</td>
<td class="gmail-font-normal">
<span class="gmail-dump-inline">User Deprecated: The "<b>mapbender.uploads_manager.service</b>"
service is private, getting it from the container is deprecated since
Symfony 3.2 and will fail in 4.0. You should either make the service
public, or stop using the container directly and use dependency
injection instead.</span>
<div class="gmail-text-small gmail-font-normal">
<a class="gmail-btn gmail-btn-link gmail-text-small gmail-sf-toggle gmail-sf-toggle-off">Show context</a>
<a class="gmail-btn gmail-btn-link gmail-text-small gmail-sf-toggle gmail-sf-toggle-off">Show trace</a>
</div>
</td>
</tr>
<tr class="gmail-">
<td class="gmail-font-normal gmail-text-small" nowrap>
<span class="gmail-text-muted gmail-newline">15:38:50</span>
</td>
<td class="gmail-font-normal gmail-text-small gmail-text-bold" nowrap>
php
</td>
<td class="gmail-font-normal">
<span class="gmail-dump-inline">User Deprecated: The "<b>fom.acl.manager</b>"
service is private, getting it from the container is deprecated since
Symfony 3.2 and will fail in 4.0. You should either make the service
public, or stop using the container directly and use dependency
injection instead.</span>
<div class="gmail-text-small gmail-font-normal">
<a class="gmail-btn gmail-btn-link gmail-text-small gmail-sf-toggle gmail-sf-toggle-off">Show context</a>
<a class="gmail-btn gmail-btn-link gmail-text-small gmail-sf-toggle gmail-sf-toggle-off">Show trace</a>
</div>
</td>
</tr>
<tr class="gmail-">
<td class="gmail-font-normal gmail-text-small" nowrap>
<span class="gmail-text-muted gmail-newline">15:38:50</span>
</td>
<td class="gmail-font-normal gmail-text-small gmail-text-bold" nowrap>
php
<span class="gmail-text-muted">(10 times)</span>
</td>
<td class="gmail-font-normal">
<span class="gmail-dump-inline">User Deprecated: Calling "<b>tab_container_id</b>" on template "<b>MapbenderManagerBundle::layouts/tabbed.html.twig</b>" from template "<b>MapbenderManagerBundle::layouts/tabbed.html.twig</b>" is deprecated since version 1.28 and won't be supported anymore in 2.0.</span>
<div class="gmail-text-small gmail-font-normal">
<a class="gmail-btn gmail-btn-link gmail-text-small gmail-sf-toggle gmail-sf-toggle-off">Show context</a>
<a class="gmail-btn gmail-btn-link gmail-text-small gmail-sf-toggle gmail-sf-toggle-off">Show trace</a>
</div>
</td>
</tr>
<tr class="gmail-">
<td class="gmail-font-normal gmail-text-small" nowrap>
<span class="gmail-text-muted gmail-newline">15:38:50</span>
</td>
<td class="gmail-font-normal gmail-text-small gmail-text-bold" nowrap>
php
<span class="gmail-text-muted">(5 times)</span>
</td>
<td class="gmail-font-normal">
<span class="gmail-dump-inline">User Deprecated: Calling "<b>tab_header_id</b>" on template "<b>MapbenderManagerBundle::layouts/tabbed.html.twig</b>" from template "<b>MapbenderManagerBundle::layouts/tabbed.html.twig</b>" is deprecated since version 1.28 and won't be supported anymore in 2.0.</span>
<div class="gmail-text-small gmail-font-normal">
<a class="gmail-btn gmail-btn-link gmail-text-small gmail-sf-toggle gmail-sf-toggle-off">Show context</a>
<a class="gmail-btn gmail-btn-link gmail-text-small gmail-sf-toggle gmail-sf-toggle-off">Show trace</a>
</div>
</td>
</tr>
<tr class="gmail-">
<td class="gmail-font-normal gmail-text-small" nowrap>
<span class="gmail-text-muted gmail-newline">15:38:50</span>
</td>
<td class="gmail-font-normal gmail-text-small gmail-text-bold" nowrap>
php
<span class="gmail-text-muted">(5 times)</span>
</td>
<td class="gmail-font-normal">
<span class="gmail-dump-inline">User Deprecated: Calling "<b>tab_header</b>" on template "<b>MapbenderManagerBundle::layouts/tabbed.html.twig</b>" from template "<b>@MapbenderManager/Application/edit.html.twig</b>" is deprecated since version 1.28 and won't be supported anymore in 2.0.</span>
<div class="gmail-text-small gmail-font-normal">
<a class="gmail-btn gmail-btn-link gmail-text-small gmail-sf-toggle gmail-sf-toggle-off">Show context</a>
<a class="gmail-btn gmail-btn-link gmail-text-small gmail-sf-toggle gmail-sf-toggle-off">Show trace</a>
</div>
</td>
</tr>
<tr class="gmail-">
<td class="gmail-font-normal gmail-text-small" nowrap>
<span class="gmail-text-muted gmail-newline">15:38:50</span>
</td>
<td class="gmail-font-normal gmail-text-small gmail-text-bold" nowrap>
php
<span class="gmail-text-muted">(5 times)</span>
</td>
<td class="gmail-font-normal">
<span class="gmail-dump-inline">User Deprecated: Calling "<b>tab_content_attributes</b>" on template "<b>MapbenderManagerBundle::layouts/tabbed.html.twig</b>" from template "<b>@MapbenderManager/Application/edit.html.twig</b>" is deprecated since version 1.28 and won't be supported anymore in 2.0.</span>
<div class="gmail-text-small gmail-font-normal">
<a class="gmail-btn gmail-btn-link gmail-text-small gmail-sf-toggle gmail-sf-toggle-off">Show context</a>
<a class="gmail-btn gmail-btn-link gmail-text-small gmail-sf-toggle gmail-sf-toggle-off">Show trace</a>
</div></td></tr></tbody></table>
</div><div><br></div><div>Any thoughts on what I should specifically look for / where I should look?<br></div><div><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Jun 18, 2021 at 3:21 AM <<a href="mailto:david.patzke@wheregroup.com">david.patzke@wheregroup.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="overflow-wrap: break-word;" lang="DE"><div class="gmail-m_6185135424029422924WordSection1"><p class="MsoNormal"><span>Hi Joel,<u></u><u></u></span></p><p class="MsoNormal"><span><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US">you have to option. First you could edit the file app_dev.php with a shell-based Editor like vi or nano and remove temporally the lines 12-18:<br> <u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">if (isset($_SERVER['HTTP_CLIENT_IP'])<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"> || isset($_SERVER['HTTP_X_FORWARDED_FOR'])<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"> || !in_array(@$_SERVER['REMOTE_ADDR'], array('127.0.0.1', 'fe80::1', '::1'))<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">) {<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"> header('HTTP/1.0 403 Forbidden');<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"> exit('You are not allowed to access this file. Check '.basename(__FILE__).' for more information.');<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">}<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US">Then you can open the dev controller from everywhere. Please be advised that this is a huge security risk, cause error pages in this mode will leak sensitive information! So, you have to reenable this security feature afterwards! Second options would be to tunnel the http port of your server to your local machine via ssh. Then you can open the application from your machine. <u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US">Best regards David<u></u><u></u></span></p><div style="border-color:rgb(225,225,225) currentcolor currentcolor;border-style:solid none none;border-width:1pt medium medium;padding:3pt 0in 0in"><p class="MsoNormal"><b><span lang="EN-US">Von:</span></b><span lang="EN-US"> Mapbender_users <<a href="mailto:mapbender_users-bounces@lists.osgeo.org" target="_blank">mapbender_users-bounces@lists.osgeo.org</a>> <b>Im Auftrag von </b>Joel Blizzard<br><b>Gesendet:</b> Thursday, June 17, 2021 11:38 PM<br><b>An:</b> <a href="mailto:astrid.emde@wheregroup.com" target="_blank">astrid.emde@wheregroup.com</a>; Mapbender User List <<a href="mailto:mapbender_users@lists.osgeo.org" target="_blank">mapbender_users@lists.osgeo.org</a>><br><b>Betreff:</b> Re: [Mapbender-users] Cannot change application security permissions after mapbender update<u></u><u></u></span></p></div><p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p><div><div><p class="MsoNormal">Did you try doing an install and then an upgrade?<u></u><u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">php version is PHP 7.2.24-0ubuntu0.18.04.7<u></u><u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">Unfortunately I cannot run dev mode, as this is running on a cloud hosted server that I do not have a GUI on. Is there a way to run it from a system other than localhost?<u></u><u></u></p></div><div><p class="MsoNormal">I looked in the documentation and it says " Symfony offers a developer mode with lot of information about your application (logging, exceptions, database queries, memory usage, time and more). This mode is only available from localhost."<u></u><u></u></p></div></div><p class="MsoNormal"><u></u> <u></u></p><div><div><p class="MsoNormal">On Thu, Jun 17, 2021 at 1:07 AM Astrid Emde (WhereGroup) <<a href="mailto:astrid.emde@wheregroup.com" target="_blank">astrid.emde@wheregroup.com</a>> wrote:<u></u><u></u></p></div><blockquote style="border-color:currentcolor currentcolor currentcolor rgb(204,204,204);border-style:none none none solid;border-width:medium medium medium 1pt;padding:0in 0in 0in 6pt;margin-left:4.8pt;margin-right:0in"><p class="MsoNormal">Hello Joel,<br><br>I can not reproduce the error. Everything works fine at my installation.<br><br>Did you try the app_dev.php mode too?<br><br>What is your php version?<br><br>Astrid<br><br>Am 2021-06-14 22:08, schrieb Joel Blizzard:<br>> In upgrading from Mapbender 3.2.3 to 3.2.5 I no longer have the<br>> ability to adjust security settings on the applications I've created.<br>> <br>> So if I go into an application, and go to the "Security" tab, if I try<br>> to remove public access, or add a user to the list, or make any kind<br>> of change to existing permissions for an application, when I click<br>> Save, I get an internal 500 error.<br>> <br>> When I look at my logs on the server, I see this error:<br>> <br>> [php7:notice] [pid 4589] [client <IPaddress>:63695] PHP Notice:<br>> Undefined offset: 2 in<br>> /var/www/mapbender/vendor/symfony/security-acl/Dbal/MutableAclProvider.php<br>> on line 981<br>> <br>> That is referring to this section of MutableAclProvider.php:<br>> Line 981 is the one that says "$ace = $old[$i]"<br>> <br>> private function updateOldFieldAceProperty($name, array $changes)<br>> {<br>> $currentIds = array();<br>> foreach ($changes[1] as $field => $new) {<br>> for ($i = 0, $c = count($new); $i < $c; ++$i) {<br>> $ace = $new[$i];<br>> <br>> if (null !== $ace->getId()) {<br>> $currentIds[$ace->getId()] = true;<br>> }<br>> }<br>> }<br>> <br>> foreach ($changes[0] as $old) {<br>> for ($i = 0, $c = count($old); $i < $c; ++$i) {<br>> $ace = $old[$i];<br>> <br>> if (!isset($currentIds[$ace->getId()])) {<br>> <br>> $this->connection->executeQuery($this->getDeleteAccessControlEntrySql($ace->getId()));<br>> unset($this->loadedAces[$ace->getId()]);<br>> }<br>> }<br>> }<br>> }<br>> <br>> Can anyone assist me in figuring out what's gone wrong here?<br>> <br>> Thank you!<br>> _______________________________________________<br>> Mapbender_users mailing list<br>> <a href="mailto:Mapbender_users@lists.osgeo.org" target="_blank">Mapbender_users@lists.osgeo.org</a><br>> <a href="https://lists.osgeo.org/mailman/listinfo/mapbender_users" target="_blank">https://lists.osgeo.org/mailman/listinfo/mapbender_users</a><br><br>-- <br>Mit freundlichen Grüßen<br><br>Astrid Emde<br>GIS-Consultant<br><br>*************************************************************************<br>Aufbau von Geodateninfrastrukturen mit Open-Source-Software<br>FOSS Academy 5 Tage-Kompaktkurs „Sommerschule 2021"<br>Jetzt anmelden: <a href="https://foss-academy.com/kompaktkurse/" target="_blank">https://foss-academy.com/kompaktkurse/</a><br>*************************************************************************<br> Astrid Emde<br> WhereGroup GmbH<br> Eifelstraße 7<br> 53119 Bonn<br> Germany<br><br> Fon: +49(0)228 90 90 38 - 22<br> Fax: +49(0)228 90 90 38 - 11<br><br> <a href="mailto:astrid.emde@wheregroup.com" target="_blank">astrid.emde@wheregroup.com</a><br> <a href="http://www.wheregroup.com" target="_blank">www.wheregroup.com</a><br><br> Meinen PGP Public-Key können Sie unter <a href="http://pgp.mit.edu" target="_blank">pgp.mit.edu</a> herunterladen:<br><br><a href="https://keys.openpgp.org/vks/v1/by-fingerprint/01F8152D36FC07C25EADDE86C5084ACC1C287CCB" target="_blank">https://keys.openpgp.org/vks/v1/by-fingerprint/01F8152D36FC07C25EADDE86C5084ACC1C287CCB</a><br> Signierte und/oder verschlüsselte Nachrichten sind sehr willkommen<br><br> Folgen Sie der WhereGroup auf twitter:<br> <a href="http://twitter.com/WhereGroup_com" target="_blank">http://twitter.com/WhereGroup_com</a><br><br> Geschäftsführer:<br> Olaf Knopp, Peter Stamm<br> Amtsgericht Bonn, HRB 9885<br>-------------------------------_______________________________________________<br>Mapbender_users mailing list<br><a href="mailto:Mapbender_users@lists.osgeo.org" target="_blank">Mapbender_users@lists.osgeo.org</a><br><a href="https://lists.osgeo.org/mailman/listinfo/mapbender_users" target="_blank">https://lists.osgeo.org/mailman/listinfo/mapbender_users</a><u></u><u></u></p></blockquote></div></div></div>_______________________________________________<br>
Mapbender_users mailing list<br>
<a href="mailto:Mapbender_users@lists.osgeo.org" target="_blank">Mapbender_users@lists.osgeo.org</a><br>
<a href="https://lists.osgeo.org/mailman/listinfo/mapbender_users" rel="noreferrer" target="_blank">https://lists.osgeo.org/mailman/listinfo/mapbender_users</a><br>
</blockquote></div></div>