Log Enrichment of "Forbidden" Errors, especially "Server denied by ACL" #334

Closed
opened 2023-01-11 15:35:17 +00:00 by Aranjedeath · 4 comments
Aranjedeath commented 2023-01-11 15:35:17 +00:00 (Migrated from gitlab.com)

Sometimes when I send a message in a room I get 1, sometimes more,
2023-01-11T15:20:33.683759Z WARN conduit::utils::error: 403 Forbidden: M_FORBIDDEN: Server was denied by ACL
log lines like that. It would be wonderful to know which server, so I can evaluate reaching out to the homeserver admin to be unblocked (or NOT).

I know it's not my ACL, because I've never set one. I don't know how.

Unless it's a room ACL. I don't know. the log does not say :D

Thank you for any additional log detail that can be added.

Sometimes when I send a message in a room I get 1, sometimes more, ` 2023-01-11T15:20:33.683759Z WARN conduit::utils::error: 403 Forbidden: M_FORBIDDEN: Server was denied by ACL ` log lines like that. It would be wonderful to know *which* server, so I can evaluate reaching out to the homeserver admin to be unblocked (or NOT). I know it's not my ACL, because I've never set one. I don't know how. Unless it's a room ACL. I don't know. the log does not say :D Thank you for any additional log detail that can be added.
BartTerpstra commented 2023-07-17 15:10:29 +00:00 (Migrated from gitlab.com)

Per @timokoesters : "The error is defined in the acl handler in src/service/rooms/event_handler/mod.rs and should be easy to improve".

Per anonymous: It’s always room level should be noted for anyone who doesn’t know the spec well enough, which is to say, ACLs are always room level.

Per @timokoesters : "The error is defined in the acl handler in src/service/rooms/event_handler/mod.rs and should be easy to improve". Per anonymous: It’s always room level should be noted for anyone who doesn’t know the spec well enough, which is to say, ACLs are always room level.
girlbossceo commented 2023-07-27 17:09:26 +00:00 (Migrated from gitlab.com)

mentioned in merge request !517

mentioned in merge request !517
girlbossceo commented 2023-07-29 21:47:37 +00:00 (Migrated from gitlab.com)

@Aranjedeath Is there any other additional log enrichment you think should be added? Or do you still see any vague warnings on the latest next branch?

@Aranjedeath Is there any other additional log enrichment you think should be added? Or do you still see any vague warnings on the latest next branch?
Aranjedeath commented 2024-01-25 00:35:46 +00:00 (Migrated from gitlab.com)

This issue (ACL denial errors which can't be investigated due to lack of relevant logging) was resolved by https://gitlab.com/famedly/conduit/-/merge_requests/517 and can be closed.

This issue (ACL denial errors which can't be investigated due to lack of relevant logging) was resolved by https://gitlab.com/famedly/conduit/-/merge_requests/517 and can be closed.
Sign in to join this conversation.
No labels
Android
CS::needs customer feedback
CS::needs follow up
CS::needs on prem installation
CS::waiting
Chrome
Design:: Ready
Design:: in progress
Design::UX
E2EE
Edge
Firefox
GDPR
Iteration 13 IM
Linux
MacOS
Need::Discussion
Need::Steps to reproduce
Need::Upstream fix
Needs:: Planning
Needs::Dev-Team
Needs::More information
Needs::Priority
Needs::Product
Needs::Refinement
Needs::Severity
Priority::1-Critical
Priority::2-Max
Priority::3-Impending
Priority::4-High
Priority::5-Medium
Priority::6-Low
Priority::7-None
Progress::Backlog
Progress::Review
Progress::Started
Progress::Testing
Progress::Triage
Progress::Waiting
Reporter::Sentry
Safari
Target::Community
Target::Customer
Target::Internal
Target::PoC
Target::Security
Team:Customer-Success
Team:Design
Team:Infrastructure
Team:Instant-Messaging
Team:Product
Team:Workflows
Type::Bug
Type::Design
Type::Documentation
Type::Feature
Type::Improvement
Type::Support
Type::Tests
Windows
blocked
blocked-by-spec
cla-signed
conduit
contribution::advanced
contribution::easy
contribution::help needed
from::review
iOS
p::ti-tenant
performance
product::triage
proposal
refactor
release-blocker
s: dart_openapi_codegen
s::Famedly-Patient
s::Org-Directory
s::Passport-Generator
s::Requeuest
s:CRM
s:Famedly-App
s:Famedly-Web
s:Fhiroxide
s:Fhiroxide-cli
s:Fhiroxide-client
s:Fhirs
s:Hedwig
s:LISA
s:Matrix-Dart-SDK
s:Role-Manager
s:Synapse
s:User-Directory
s:WFS-Matrix
s:Workflow Engine
s:dtls
s:famedly-error
s:fcm-shared-isolate
s:matrix-api-lite
s:multiple-tab-detector
s:native-imaging
severity::1
severity::2
severity::3
severity::4
technical-debt
voip
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: Matthias/conduit#334
No description provided.