Uploaded image for project: 'Sakai'
  1. Sakai
  2. SAK-37930

Can't upload existing resource because of CSRF error

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: RESOLVED
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: 10.2, 10.3, 10.4, 10.5, 11.0
    • Fix Version/s: 10.6
    • Component/s: Lessons
    • Labels:
    • 10 status:
      Resolved
    • Previous Issue Keys:
      LSNBLDR-533
    • Test Plan:
      Hide

      in lessons, do add content link, add existing resource.
      That opens the helper
      In the helper, choose upload file from the main folder.
      Try both modes: dragging a fie, and clicking on the drag area to open a chooser.
      Continue
      The file should appear in the folder. Select it.
      Continue.
      It should now appear on the Lessons page.

      This code is also used in MOTD. Login as admin.
      Choose MOTD tool.
      Create a new motd.
      When creating it, choose attach.
      Try uploading file as above.

      Show
      in lessons, do add content link, add existing resource. That opens the helper In the helper, choose upload file from the main folder. Try both modes: dragging a fie, and clicking on the drag area to open a chooser. Continue The file should appear in the folder. Select it. Continue. It should now appear on the Lessons page. This code is also used in MOTD. Login as admin. Choose MOTD tool. Create a new motd. When creating it, choose attach. Try uploading file as above.

      Description

      To replicate:

      1) Login as instructor
      2) Go to site with Lessons
      3) Add Content -> Add Content Link
      4) Select existing resource
      5) Upload files
      6) Click drop area and choose one file from local
      7) Continue

      2015-10-16 10:22:25,934 WARN http-apr-18888-exec-1 org.sakaiproject.cheftool.VelocityPortletPaneledAction - CSRF Token mismatched or missing on velocity action: doPost; toolId=sakai.lessonbuildertool
      2015-10-16 10:22:25,952 WARN http-apr-18888-exec-1 org.sakaiproject.authz.impl.DbAuthzGroupService - isAllowed(): called with no realms: lock: content.read user:
      2015-10-16 10:22:26,089 WARN http-apr-18888-exec-1 org.sakaiproject.portal.charon.handlers.SiteHandler - It is tacky to return markup on a POST CTI=sakai.lessonbuildertool URL=https://trunk-mysql.nightly.sakaiproject.org/porta
      l/site/3a7ad6d1-bdd2-4b87-a0f5-9bb6fc858482/tool/5c6d758b-5dc7-4515-8233-cb2329baf6a5/ResourcePicker/tool?sakai_action=doPost&flow=save
      2015-10-16 10:22:26,586 WARN http-apr-18888-exec-11 PonderUtilCore - Error servicing SakaiRSF request
      Target exception of class java.lang.NullPointerException
      Successive lines until stack trace show causes progressing to exception site:
      Error invoking init method handle on bean rootHandlerBean

      java.lang.NullPointerException
      at org.sakaiproject.content.tool.ResourcesHelperAction.notifyDragAndDropCompleted(ResourcesHelperAction.java:2198)
      at org.sakaiproject.content.tool.ResourcesHelperAction.doPost(ResourcesHelperAction.java:1955)

      caused by: uk.org.ponder.util.UniversalRuntimeException: Error servicing SakaiRSF request
      --> Error invoking init method handle on bean rootHandlerBean
      at org.sakaiproject.content.tool.ResourcesHelperAction.notifyDragAndDropCompleted(ResourcesHelperAction.java:2198)
      at org.sakaiproject.content.tool.ResourcesHelperAction.doPost(ResourcesHelperAction.java:1955)

        Gliffy Diagrams

          Zeplin

            Attachments

              Activity

                People

                Assignee:
                hedrick Charles Hedrick
                Reporter:
                ottenhoff Sam Ottenhoff
                Votes:
                0 Vote for this issue
                Watchers:
                8 Start watching this issue

                  Dates

                  Created:
                  Updated:
                  Resolved:

                    Git Integration