[midPoint] Object filter in authorization : "not applicable for object because of filter is not property-only filter" error

Frédéric Lohier frederic at lohier.org
Thu Oct 24 15:42:01 UTC 2019


Hello,



I am trying to limit the following authorization with a filter (in my case,
I would like to limit the org modify auth to a subtree of orgs) :



<authorization>

        <name>Organization items modify authorizations</name>

        <action>
http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#modify
</action>

        <object>

            <type>OrgType</type>

            <filter>

                <q:org>

                    <q:orgRef>

                        <q:oid>00000000-0000-0000-0000-000000000000</q:oid>
<!-- some Org -->

                    </q:orgRef>

                    <q:scope>SUBTREE</q:scope>

                </q:org>

            </filter>

        </object>

        <item>name</item>

        <item>description</item>

        <item>displayName</item>

        <item>emailAddress</item>

        <item>telephoneNumber</item>

        <item>jpegPhoto</item>

    </authorization>



But, although the filter works in the query playground, I get the error
“authorization 'TEST Organization items modify authorizations' in dummy:
00000000-0000-0000-0000-000000000000 (Midpoint_Manager_Org_Role) not
applicable for object because of filter is not property-only filter” (see
full error below).



Is it possible de to do what I am trying to do with authorizations?



2019-10-24 16:34:36,575 [MODEL] [http-nio-8080-exec-3] ERROR
(com.evolveum.midpoint.model.impl.controller.SchemaTransformer): Error
post-processing object dummy:3128471f-b954-4302-91da-b87d9064e14d(Services
Arobas):     authorization 'TEST Organization items modify authorizations'
in dummy:00000000-0000-0000-0000-000000000000(Midpoint_Manager_Org_Role)
not applicable for object because of filter is not property-only filter:
ORG: PRV(oid=00000000-0000-0000-0000-000000000000, targetType=null), SUBTREE

java.lang.IllegalArgumentException:     authorization 'TEST Organization
items modify authorizations' in
dummy:00000000-0000-0000-0000-000000000000(Midpoint_Manager_Org_Role) not
applicable for object because of filter is not property-only filter: ORG:
PRV(oid=00000000-0000-0000-0000-000000000000, targetType=null), SUBTREE

                at
com.evolveum.midpoint.schema.util.ObjectQueryUtil.lambda$assertPropertyOnly$1(ObjectQueryUtil.java:208)

                at
com.evolveum.midpoint.prism.impl.query.ObjectFilterImpl.accept(ObjectFilterImpl.java:20)

                at
com.evolveum.midpoint.schema.util.ObjectQueryUtil.assertPropertyOnly(ObjectQueryUtil.java:212)

                at
com.evolveum.midpoint.repo.sql.SqlRepositoryServiceImpl.selectorMatches(SqlRepositoryServiceImpl.java:1170)

                at
jdk.internal.reflect.GeneratedMethodAccessor532.invoke(Unknown Source)

                at
java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

                at
java.base/java.lang.reflect.Method.invoke(Method.java:566)

                at
org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:343)

                at
org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:198)

                at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)

                at
com.evolveum.midpoint.util.aspect.MidpointInterceptor.invoke(MidpointInterceptor.java:32)

                at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186)

                at
org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:212)

                at com.sun.proxy.$Proxy74.selectorMatches(Unknown Source)

                at
com.evolveum.midpoint.repo.cache.RepositoryCache.selectorMatches(RepositoryCache.java:1652)

                at
jdk.internal.reflect.GeneratedMethodAccessor532.invoke(Unknown Source)

                at
java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

                at
java.base/java.lang.reflect.Method.invoke(Method.java:566)

                at
org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:343)

                at
org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:198)

                at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)

                at
com.evolveum.midpoint.util.aspect.MidpointInterceptor.invoke(MidpointInterceptor.java:32)

                at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186)

                at
org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:212)

                at com.sun.proxy.$Proxy131.selectorMatches(Unknown Source)

                at
com.evolveum.midpoint.security.enforcer.impl.SecurityEnforcerImpl.isApplicable(SecurityEnforcerImpl.java:588)

                at
com.evolveum.midpoint.security.enforcer.impl.SecurityEnforcerImpl.isApplicable(SecurityEnforcerImpl.java:565)

                at
com.evolveum.midpoint.security.enforcer.impl.SecurityEnforcerImpl.compileSecurityConstraints(SecurityEnforcerImpl.java:1213)

                at
com.evolveum.midpoint.model.impl.controller.SchemaTransformer.compileSecurityConstraints(SchemaTransformer.java:356)

                at
com.evolveum.midpoint.model.impl.controller.SchemaTransformer.applySchemasAndSecurity(SchemaTransformer.java:189)

                at
com.evolveum.midpoint.model.impl.controller.SchemaTransformer.applySchemaAndSecurityToObject(SchemaTransformer.java:149)

                at
com.evolveum.midpoint.model.impl.controller.SchemaTransformer.applySchemasAndSecurityToObjects(SchemaTransformer.java:100)

                at
com.evolveum.midpoint.model.impl.controller.ModelController.searchObjects(ModelController.java:837)

                at
jdk.internal.reflect.GeneratedMethodAccessor903.invoke(Unknown Source)

                at
java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

                at
java.base/java.lang.reflect.Method.invoke(Method.java:566)

                at
org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:343)

                at
org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:198)

                at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)

                at
com.evolveum.midpoint.util.aspect.MidpointInterceptor.invoke(MidpointInterceptor.java:32)

                at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186)

                at
org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:212)

                at com.sun.proxy.$Proxy143.searchObjects(Unknown Source)

                at
jdk.internal.reflect.GeneratedMethodAccessor903.invoke(Unknown Source)

                at
java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

                at
java.base/java.lang.reflect.Method.invoke(Method.java:566)

                at
org.apache.wicket.proxy.LazyInitProxyFactory$JdkHandler.invoke(LazyInitProxyFactory.java:521)

                at com.sun.proxy.$Proxy236.searchObjects(Unknown Source)

                at
com.evolveum.midpoint.web.page.admin.orgs.AbstractOrgTabPanel.loadOrgRoots(AbstractOrgTabPanel.java:175)

                at
com.evolveum.midpoint.web.page.admin.orgs.AbstractOrgTabPanel.access$200(AbstractOrgTabPanel.java:44)

                at
com.evolveum.midpoint.web.page.admin.orgs.AbstractOrgTabPanel$1.load(AbstractOrgTabPanel.java:71)

                at
com.evolveum.midpoint.web.page.admin.orgs.AbstractOrgTabPanel$1.load(AbstractOrgTabPanel.java:65)

                at
com.evolveum.midpoint.gui.api.model.LoadableModel.getObject(LoadableModel.java:59)

                at
com.evolveum.midpoint.web.page.admin.orgs.AbstractOrgTabPanel.initLayout(AbstractOrgTabPanel.java:108)

                at
com.evolveum.midpoint.web.page.admin.orgs.AbstractOrgTabPanel.<init>(AbstractOrgTabPanel.java:61)

                at
com.evolveum.midpoint.web.page.admin.users.PageOrgTree$1.<init>(PageOrgTree.java:54)

                at
com.evolveum.midpoint.web.page.admin.users.PageOrgTree.initLayout(PageOrgTree.java:54)

                at
com.evolveum.midpoint.web.page.admin.users.PageOrgTree.<init>(PageOrgTree.java:50)

                at
java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native
Method)

                at
java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)

                at
java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)

                at
java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:490)

                at
org.apache.wicket.session.DefaultPageFactory.newPage(DefaultPageFactory.java:175)

                at
org.apache.wicket.session.DefaultPageFactory.newPage(DefaultPageFactory.java:67)

                at
org.apache.wicket.session.DefaultPageFactory.newPage(DefaultPageFactory.java:103)

                at
com.evolveum.midpoint.web.component.menu.MainMenuPanel.menuItemPerformed(MainMenuPanel.java:241)

                at
com.evolveum.midpoint.web.component.menu.MainMenuPanel.access$300(MainMenuPanel.java:41)

                at
com.evolveum.midpoint.web.component.menu.MainMenuPanel$9.onClick(MainMenuPanel.java:193)

                at
org.apache.wicket.markup.html.link.Link.onRequest(Link.java:189)

                at
org.apache.wicket.core.request.handler.ListenerRequestHandler.internalInvoke(ListenerRequestHandler.java:306)

                at
org.apache.wicket.core.request.handler.ListenerRequestHandler.invoke(ListenerRequestHandler.java:255)

                at
org.apache.wicket.core.request.handler.ListenerRequestHandler.invokeListener(ListenerRequestHandler.java:215)

                at
org.apache.wicket.core.request.handler.ListenerRequestHandler.respond(ListenerRequestHandler.java:208)

                at
org.apache.wicket.request.cycle.RequestCycle$HandlerExecutor.respond(RequestCycle.java:914)

                at
org.apache.wicket.request.RequestHandlerExecutor.execute(RequestHandlerExecutor.java:65)

                at
org.apache.wicket.request.cycle.RequestCycle.execute(RequestCycle.java:282)

                at
org.apache.wicket.request.cycle.RequestCycle.processRequest(RequestCycle.java:253)

                at
org.apache.wicket.request.cycle.RequestCycle.processRequestAndDetach(RequestCycle.java:221)

                at
org.apache.wicket.protocol.http.WicketFilter.processRequestCycle(WicketFilter.java:275)

                at
org.apache.wicket.protocol.http.WicketFilter.processRequest(WicketFilter.java:206)

                at
org.apache.wicket.protocol.http.WicketFilter.doFilter(WicketFilter.java:299)

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)

                at
com.evolveum.midpoint.web.util.MidPointProfilingServletFilter.doFilter(MidPointProfilingServletFilter.java:85)

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:320)

                at
org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:127)

                at
org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:91)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:119)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:137)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:111)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:170)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.savedrequest.RequestCacheAwareFilter.doFilter(RequestCacheAwareFilter.java:63)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.session.ConcurrentSessionFilter.doFilter(ConcurrentSessionFilter.java:155)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:200)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:116)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.csrf.CsrfFilter.doFilterInternal(CsrfFilter.java:100)

                at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:118)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.header.HeaderWriterFilter.doFilterInternal(HeaderWriterFilter.java:74)

                at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:118)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:105)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter.doFilterInternal(WebAsyncManagerIntegrationFilter.java:56)

                at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:118)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:215)

                at
org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:178)

                at
org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:357)

                at
org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:270)

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)

                at
org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:99)

                at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:118)

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)

                at
org.springframework.web.filter.FormContentFilter.doFilterInternal(FormContentFilter.java:92)

                at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:118)

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)

                at
org.springframework.web.filter.HiddenHttpMethodFilter.doFilterInternal(HiddenHttpMethodFilter.java:93)

                at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:118)

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)

                at
org.springframework.boot.actuate.metrics.web.servlet.WebMvcMetricsFilter.filterAndRecordMetrics(WebMvcMetricsFilter.java:114)

                at
org.springframework.boot.actuate.metrics.web.servlet.WebMvcMetricsFilter.doFilterInternal(WebMvcMetricsFilter.java:104)

                at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:118)

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)

                at
org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:200)

                at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:118)

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)

                at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:202)

                at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)

                at
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:526)

                at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:139)

                at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92)

                at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74)

                at
com.evolveum.midpoint.web.boot.TomcatRootValve.invoke(TomcatRootValve.java:60)

                at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343)

                at
org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:408)

                at
org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)

                at
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:860)

                at
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1587)

                at
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)

                at
java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)

                at
java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)

                at
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)

                at java.base/java.lang.Thread.run(Thread.java:834)

2019-10-24 16:34:36,583 [] [http-nio-8080-exec-3] ERROR
(com.evolveum.midpoint.gui.api.util.WebModelServiceUtils): Couldn't load
object.

java.lang.IllegalArgumentException:     authorization 'TEST Organization
items modify authorizations' in
dummy:00000000-0000-0000-0000-000000000000(Midpoint_Manager_Org_Role) not
applicable for object because of filter is not property-only filter: ORG:
PRV(oid=00000000-0000-0000-0000-000000000000, targetType=null), SUBTREE

                at
com.evolveum.midpoint.schema.util.ObjectQueryUtil.lambda$assertPropertyOnly$1(ObjectQueryUtil.java:208)

                at
com.evolveum.midpoint.prism.impl.query.ObjectFilterImpl.accept(ObjectFilterImpl.java:20)

                at
com.evolveum.midpoint.schema.util.ObjectQueryUtil.assertPropertyOnly(ObjectQueryUtil.java:212)

                at
com.evolveum.midpoint.repo.sql.SqlRepositoryServiceImpl.selectorMatches(SqlRepositoryServiceImpl.java:1170)

                at
jdk.internal.reflect.GeneratedMethodAccessor532.invoke(Unknown Source)

                at
java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

                at
java.base/java.lang.reflect.Method.invoke(Method.java:566)

                at
org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:343)

                at
org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:198)

                at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)

                at
com.evolveum.midpoint.util.aspect.MidpointInterceptor.invoke(MidpointInterceptor.java:32)

                at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186)

                at
org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:212)

                at com.sun.proxy.$Proxy74.selectorMatches(Unknown Source)

                at
com.evolveum.midpoint.repo.cache.RepositoryCache.selectorMatches(RepositoryCache.java:1652)

                at
jdk.internal.reflect.GeneratedMethodAccessor532.invoke(Unknown Source)

                at
java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

                at
java.base/java.lang.reflect.Method.invoke(Method.java:566)

                at
org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:343)

                at
org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:198)

                at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)

                at
com.evolveum.midpoint.util.aspect.MidpointInterceptor.invoke(MidpointInterceptor.java:32)

                at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186)

                at
org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:212)

                at com.sun.proxy.$Proxy131.selectorMatches(Unknown Source)

                at
com.evolveum.midpoint.security.enforcer.impl.SecurityEnforcerImpl.isApplicable(SecurityEnforcerImpl.java:588)

                at
com.evolveum.midpoint.security.enforcer.impl.SecurityEnforcerImpl.isApplicable(SecurityEnforcerImpl.java:565)

                at
com.evolveum.midpoint.security.enforcer.impl.SecurityEnforcerImpl.compileSecurityConstraints(SecurityEnforcerImpl.java:1213)

                at
com.evolveum.midpoint.model.impl.controller.SchemaTransformer.compileSecurityConstraints(SchemaTransformer.java:356)

                at
com.evolveum.midpoint.model.impl.controller.SchemaTransformer.applySchemasAndSecurity(SchemaTransformer.java:189)

                at
com.evolveum.midpoint.model.impl.controller.ModelController.getObject(ModelController.java:222)

                at
jdk.internal.reflect.GeneratedMethodAccessor215.invoke(Unknown Source)

                at
java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

                at
java.base/java.lang.reflect.Method.invoke(Method.java:566)

                at
org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:343)

                at
org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:198)

                at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)

                at
com.evolveum.midpoint.util.aspect.MidpointInterceptor.invoke(MidpointInterceptor.java:32)

                at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186)

                at
org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:212)

                at com.sun.proxy.$Proxy143.getObject(Unknown Source)

                at
jdk.internal.reflect.GeneratedMethodAccessor215.invoke(Unknown Source)

                at
java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

                at
java.base/java.lang.reflect.Method.invoke(Method.java:566)

                at
org.apache.wicket.proxy.LazyInitProxyFactory$JdkHandler.invoke(LazyInitProxyFactory.java:521)

                at com.sun.proxy.$Proxy236.getObject(Unknown Source)

                at
com.evolveum.midpoint.gui.api.util.WebModelServiceUtils.loadObject(WebModelServiceUtils.java:273)

                at
com.evolveum.midpoint.gui.api.util.WebModelServiceUtils.loadObject(WebModelServiceUtils.java:246)

                at
com.evolveum.midpoint.web.page.admin.users.component.OrgTreeProvider.getRoots(OrgTreeProvider.java:250)

                at
com.evolveum.midpoint.web.page.admin.users.component.AbstractTreeTablePanel.getRootFromProvider(AbstractTreeTablePanel.java:102)

                at
com.evolveum.midpoint.web.page.admin.orgs.OrgTreePanel.access$200(OrgTreePanel.java:68)

                at
com.evolveum.midpoint.web.page.admin.orgs.OrgTreePanel$1.load(OrgTreePanel.java:118)

                at
com.evolveum.midpoint.web.page.admin.orgs.OrgTreePanel$1.load(OrgTreePanel.java:96)

                at
com.evolveum.midpoint.gui.api.model.LoadableModel.getObject(LoadableModel.java:59)

                at
com.evolveum.midpoint.web.page.admin.orgs.OrgTreePanel.getSelected(OrgTreePanel.java:128)

                at
com.evolveum.midpoint.web.page.admin.users.component.TreeTablePanel.initLayout(TreeTablePanel.java:154)

                at
com.evolveum.midpoint.web.page.admin.users.component.TreeTablePanel.<init>(TreeTablePanel.java:128)

                at
com.evolveum.midpoint.web.page.admin.users.PageOrgTree$1.createTreePanel(PageOrgTree.java:59)

                at
com.evolveum.midpoint.web.page.admin.orgs.AbstractOrgTabPanel$1$1.getPanel(AbstractOrgTabPanel.java:93)

                at
com.evolveum.midpoint.web.component.TabbedPanel.setCurrentTab(TabbedPanel.java:391)

                at
com.evolveum.midpoint.web.component.TabbedPanel.onBeforeRender(TabbedPanel.java:259)

                at
org.apache.wicket.Component.beforeRender(Component.java:939)

                at
org.apache.wicket.MarkupContainer.onBeforeRenderChildren(MarkupContainer.java:1754)

                at
org.apache.wicket.Component.onBeforeRender(Component.java:3801)

                at
org.apache.wicket.Component.beforeRender(Component.java:939)

                at
org.apache.wicket.MarkupContainer.onBeforeRenderChildren(MarkupContainer.java:1754)

                at
org.apache.wicket.Component.onBeforeRender(Component.java:3801)

                at org.apache.wicket.Page.onBeforeRender(Page.java:789)

                at
com.evolveum.midpoint.gui.api.page.PageBase.onBeforeRender(PageBase.java:783)

                at
org.apache.wicket.Component.beforeRender(Component.java:939)

                at org.apache.wicket.Page.renderPage(Page.java:991)

                at
org.apache.wicket.request.handler.render.WebPageRenderer.renderPage(WebPageRenderer.java:124)

                at
org.apache.wicket.request.handler.render.WebPageRenderer.respond(WebPageRenderer.java:236)

                at
org.apache.wicket.core.request.handler.RenderPageRequestHandler.respond(RenderPageRequestHandler.java:202)

                at
org.apache.wicket.request.cycle.RequestCycle$HandlerExecutor.respond(RequestCycle.java:914)

                at
org.apache.wicket.request.RequestHandlerExecutor.execute(RequestHandlerExecutor.java:65)

                at
org.apache.wicket.request.cycle.RequestCycle.execute(RequestCycle.java:282)

                at
org.apache.wicket.request.cycle.RequestCycle.processRequest(RequestCycle.java:253)

                at
org.apache.wicket.request.cycle.RequestCycle.processRequestAndDetach(RequestCycle.java:221)

                at
org.apache.wicket.protocol.http.WicketFilter.processRequestCycle(WicketFilter.java:275)

                at
org.apache.wicket.protocol.http.WicketFilter.processRequest(WicketFilter.java:206)

                at
org.apache.wicket.protocol.http.WicketFilter.doFilter(WicketFilter.java:299)

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)

                at
com.evolveum.midpoint.web.util.MidPointProfilingServletFilter.doFilter(MidPointProfilingServletFilter.java:85)

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:320)

                at
org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:127)

                at
org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:91)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:119)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:137)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:111)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:170)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.savedrequest.RequestCacheAwareFilter.doFilter(RequestCacheAwareFilter.java:63)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.session.ConcurrentSessionFilter.doFilter(ConcurrentSessionFilter.java:155)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:200)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:116)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.csrf.CsrfFilter.doFilterInternal(CsrfFilter.java:100)

                at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:118)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.header.HeaderWriterFilter.doFilterInternal(HeaderWriterFilter.java:74)

                at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:118)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:105)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter.doFilterInternal(WebAsyncManagerIntegrationFilter.java:56)

                at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:118)

                at
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)

                at
org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:215)

                at
org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:178)

                at
org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:357)

                at
org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:270)

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)

                at
org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:99)

                at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:118)

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)

                at
org.springframework.web.filter.FormContentFilter.doFilterInternal(FormContentFilter.java:92)

                at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:118)

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)

                at
org.springframework.web.filter.HiddenHttpMethodFilter.doFilterInternal(HiddenHttpMethodFilter.java:93)

                at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:118)

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)

                at
org.springframework.boot.actuate.metrics.web.servlet.WebMvcMetricsFilter.filterAndRecordMetrics(WebMvcMetricsFilter.java:114)

                at
org.springframework.boot.actuate.metrics.web.servlet.WebMvcMetricsFilter.doFilterInternal(WebMvcMetricsFilter.java:104)

                at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:118)

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)

                at
org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:200)

                at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:118)

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)

                at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:202)

                at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)

                at
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:526)

                at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:139)

                at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92)

                at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74)

                at
com.evolveum.midpoint.web.boot.TomcatRootValve.invoke(TomcatRootValve.java:60)

                at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343)

                at
org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:408)

                at
org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)

                at
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:860)

                at
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1587)

                at
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)

                at
java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)

                at
java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)

                at
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)

                at java.base/java.lang.Thread.run(Thread.java:834)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.evolveum.com/pipermail/midpoint/attachments/20191024/cc4a2fdc/attachment-0001.html>


More information about the midPoint mailing list