{"action":"opened","issue":{"url":"https://api.github.com/repos/anxiousmodernman/sjkjmj/issues/171","repository_url":"https://api.github.com/repos/anxiousmodernman/sjkjmj","labels_url":"https://api.github.com/repos/anxiousmodernman/sjkjmj/issues/171/labels{/name}","comments_url":"https://api.github.com/repos/anxiousmodernman/sjkjmj/issues/171/comments","events_url":"https://api.github.com/repos/anxiousmodernman/sjkjmj/issues/171/events","html_url":"https://github.com/anxiousmodernman/sjkjmj/issues/171","id":177618283,"number":171,"title":"TestUpdateObjectMalicious needs fixed","user":{"login":"anxiousmodernman","id":396004,"avatar_url":"https://avatars.githubusercontent.com/u/396004?v=3","gravatar_id":"","url":"https://api.github.com/users/anxiousmodernman","html_url":"https://github.com/anxiousmodernman","followers_url":"https://api.github.com/users/anxiousmodernman/followers","following_url":"https://api.github.com/users/anxiousmodernman/following{/other_user}","gists_url":"https://api.github.com/users/anxiousmodernman/gists{/gist_id}","starred_url":"https://api.github.com/users/anxiousmodernman/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/anxiousmodernman/subscriptions","organizations_url":"https://api.github.com/users/anxiousmodernman/orgs","repos_url":"https://api.github.com/users/anxiousmodernman/repos","events_url":"https://api.github.com/users/anxiousmodernman/events{/privacy}","received_events_url":"https://api.github.com/users/anxiousmodernman/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-09-17T23:46:09Z","updated_at":"2016-09-17T23:46:09Z","closed_at":null,"body":"This test creates and object, and then does an update that attempts to specify a different ID, as well as a different value for createdBy.\r\nWhen the update is attempted, the test checks for \r\n* Status Code - if its 200, treat as failure\r\n* response created by - if its CN=POTUS,C=US, treat as failure\r\n* response id set to deadbeef - if so, treat as failure.\r\n\r\n**The test currently passes, but is not actually getting to the point of several of the issues being tested here**.\r\n\r\nThe ACM provided may be invalid, or invalid for target user.\r\nACM is  presented as `     \"acm\": \"{\\\"version\\\":\\\"2.1.0\\\",\\\"classif\\\":\\\"U\\\"}\",`\r\nError message on server is shown in logs below\r\n\r\n```\r\nodrive_1 | {\"msg\":\"transaction start\",\"level\":\"info\",\"ts\":1467312827954275726,\"fields\":{\"node\":\"4588a6c1\",\"session\":\"c008036f\",\"cn\":\"test tester05\",\"method\":\"POST\",\"uri\":\"/objects/11e63ef3fa53796f869a0242ac110005/stream\",\"dn\":\"cn=test tester05,ou=people,ou=dae,ou=chimera,o=u.s. government,c=us\",\"cn\":\"test tester05\",\"xdn\":\"\",\"sdn\":\"cn=twl-server-generic2,ou=DAE,ou=DIA,ou=twl-server-generic2,o=U.S. Government,c=US\",\"udn\":\"cn=test tester05,ou=people,ou=dae,ou=chimera,o=u.s. government,c=us\",\"dtime\":\"2016-06-30 18:53:47.954269053 +0000 UTC\"}}\r\nodrive_1 | 2016/06/30 18:53:47 Message in AAC Response: User does not have sufficient Clearance\r\nodrive_1 | {\"msg\":\"transaction end\",\"level\":\"warn\",\"ts\":1467312827963313033,\"fields\":{\"node\":\"4588a6c1\",\"session\":\"c008036f\",\"cn\":\"test tester05\",\"method\":\"POST\",\"uri\":\"/objects/11e63ef3fa53796f869a0242ac110005/stream\",\"status\":403,\"message\":\"Unauthorized\",\"err\":\"\",\"file\":\"/go/src/decipher.com/object-drive-server/cmd/odrive/libs/server/uploadDownload.go\",\"line\":87,\"origination\":\"No access to new ACM on Update\",\"acm\":\"{\\\"version\\\":\\\"2.1.0\\\",\\\"classif\\\":\\\"U\\\"}\"}}\r\nodrive_1 | {\"msg\":\"s3 stored\",\"level\":\"info\",\"ts\":1467312828239649641,\"fields\":{\"node\":\"4588a6c1\",\"session\":\"drainprovider\",\"rname\":\"0b1626e4a9dcb4a0c4edda04b0255af36d62d9b65d1b278e8722bc223d494b11\"}}\r\n```\r\n\r\n Message in AAC Response: User does not have sufficient Clearance\r\n\r\nPresumably, tester5 lacks clearance for this ACM, which may be malformed as I believe version 2.1.0 requires other fields."}}
{"actor":{"display_login":"anxiousmodernman"}}