I am trying to push image to gcr.io accroding to: https://cloud.google.com/container-registry/docs/advanced-authentication (Using a JSON key file part). But i receive error: "denied: Unable to access the repository, please check that you have permission to access it."
I have tryied with default service account and created new account(with Editor and Storage Admin roles) - no result. Do i miss something?
UPD: reason was json key file was corrupted.
Could you send an email to gcr-contact#google.com with the image that you're trying to push (including projectID)?
Related
I am trying to create bulk Azure users from Portal.
I created a CSV file like My csv file format
When I am trying to upload, I got this error Error1
I found this Document useful Bulk create users in the Azure Active Directory portal - Microsoft Entra | Microsoft Docs and got rid of the error.
File uploaded successfully
But bulk operation status is still pending. After some time, it failed with error like:
Error2
Did anyone face the same issue? Any suggestion is appreciated.
EDIT:
I am getting failure reason as below and status as bad request:
The domain portion of the userPrincipalName property is invalid. You must use one of the verified domain names in your organization.
The error usually occurs if you are trying to add users with unverified domain. Check whether the userPrincipalName property is valid or not.
You can check this MsDoc which states the same:
I tried to reproduce the same in my environment by creating a csv file of users with unverified domain like below:
I got the same error when I tried to upload CSV file like below:
Make sure whether the users are having the same domain in their _userPrincipalName_ property like below:
After modifying the _userPrincipalName_ property with verified domain, bulk users created successfully like below:
I'm trying to publish https://bintray.com/mvysny/github/com.github.kaributesting onto JCenter, but the process fails with "Failed to send a message: The version control git returns 404.". Any tips on this please? Bintray, could you please make your error messages a bit more specific?
The reason was that I simply had "git" stated in the Version control field. The field's hint says it should be URL but the field is not validated, so git was accepted. I think it's supposed to point to the sources of the project. When I changed that to https://github.com/mvysny/karibu-testing it worked.
I have installed a standalone instance of wso2 API Manager 1.10.0 with the CARBON-PATCH-4.4.0-0084 installed. I am walking through the PhoneVerification tutorial and have published the API as instructed. I created a new user for the store and am trying to subscribe to the PhoneVerification-2.0.0 API but cannot because there is no DefaultApplication in the Applications dropdown list. It is missing from the list. I tried to add and application and get an error dialog saying Missing Parameters. I am stuck and cannot go any further. One additional piece of information, I am using mysql instead of the h2 default. I followed all the instructions to setup mysql and had no problems. Also I changed the admin password as well.
I have tried API Manager 1.10 with security patch CARBON-PATCH-4.4.0-0084 with no issues. I can create APIs and subscribe using the DefaultApplication. I tried with default database and a new user who is assigned to 'Internal/subscriber' role.
Please check if you have any other changes for Store Web app at 'wso2am-1.10.0/repository/deployment/server/jaggeryapps/store'. You have to replace 'store' and 'publisher' apps as instructed in the Readme of patch.
(iii) Merge and Replace resource/store to /repository/deployment/server/jaggeryapps/store
(iv) Merge and Replace resource/publisher to /repository/deployment/server/jaggeryapps/publisher
To check if the Mysql configuration worked properly, please check if there are any errors in Carbon log, at 'repository/logs/wso2carbon.log' file related to that. And double check if userstore and api-manager database tables are created properly and configured in 'repository/conf/datasources/master-datasources.xml' properly.
I created new user - 'exampleuser' and new role - 'examplerole' in JasperReports Server version 5.6.
The new user - 'exampleuser' has 2 roles: 'examplerole' and 'ROLE_USER' that is attached to the user by default in the JR Server.
For every folder in jasper I gave the 'examplerole' and 'ROLE_USER' the permissions - Execute only.
According to my understanding, if I will login with the 'exampleuser' user I won't be able to see any folder, of course not be able to delete any file inside that folder.
What actually happens is that I'm able to see all the files inside any folder, add and delete files as I wish and change permissions to the files.
Could not find any information about it - according to the JasperReports Server manual I'm not doing anything wrong or do I?
The 'exampleuser' doesn't have any permissions to the folder e.g. 'NO ACCESS' permission.
And there were no errors in the logs.
Is someone ran into this situation before? Is it fixable or it is some bug of JasperReports Server?
-----------------------------EDIT---------------------------------------
I've found out that this situation happens only in Google chrome browser. If I use IE for example, everything is as it should be.
Anyone? Any idea?
Edit user(exampleuser) and assign only new role(examplerole) which you created for new user remove ROLE_USER and save.
Now right click on the folder on which you want to give permission to new user(exampleuser) and select "Permission" , there you can see all the roles and there access permission.
Change permission No Access to Read only for examplerole and remove the access form other roles i.e. select No Access option.
Now after that you need to check remaining other directories whether they have ROLE_USER access or not , if they have remove permission from ROLE USER i.e set it to No Access.
I'm trying to make a bucket with Read/Write permissions for bucket/objects for particular users and Read permissions for objects only for AllUsers.
I've:
created a bucket,
added this to default acl list:
<Entry>
<Scope type="AllUsers"/>
<Permission>
READ
</Permission>
</Entry>
via: gsutil setdefacl <f> gs://bucket
added an object (test.png)
Now I'm trying to access this from browser with the url http[s]://storage.cloud.google.com/bucket/test.png but it takes me to the google account sign in page. When I signing in with another google acc (not that I've used to create project/bucket/object), which has no explicit rights set, it shows the pic.
gsutil getacl on the new object shows that READ permission is in place for AllUsers, but it works like AllAuthenticatedUsers.
Any ideas on what to do with permissions to work as expected?
When you say you added that Entry to the default ACL, you mean you added it as an element within AccessControlList.Entries, correct?
It's somewhat difficult to know what happened without seeing the full ACL text.
But also, since you're making objects publicly readable (READ permission grated for scope AllUsers), you don't need additional scopes in the bucket's default object ACL; you could simply do:
gsutil setdefacl public-read gs://bucket
and then upload objects to the bucket.
I realize you want to grant read/write permission for particular users, but write permission is controlled by the bucket ACL, not the object ACL (and thus also not by the default object ACL on the bucket).
Please try the above and let us know if you're still unable to access objects via a browser without first authenticating.
Mike Schwartz,
Google Cloud Storage team