Forum OpenACS Q&A: Re: Naviserver upgrade issue on RHEL 7.9

Collapse
Posted by Gustaf Neumann on
New Insight: Infinite Redirection Caused by Root‑Node Permission Drop

We’ve identified a likely root cause of the infinite redirection issue: when the read permission on the top‑level site node (/) is unintentionally removed, anonymous visitors get stuck in a redirect loop.

What Happened

  1. Navigate to the “/” site‑map permissions form.
  2. Click Confirm Permission Settings without making any changes.
  3. A bug prevented direct (read‑only) permissions from being resubmitted, so they were dropped.
  4. As a result, anonymous users see: “The page isn’t redirecting properly”

This issue can happen, when the read permissions are removed from the top-level site-node entry (/). These permissions were erroneously dropped, when submitting the “/” site‑map permissions form without any changes. There was a bug that removed the permissions in this situation.

Huge thanks to Khy H for reporting this bug, which is already in the OpenACS 5.10.1 release!

The problem is fixed is in the main and oacs-5.10 branches, and is tagged with openacs-5-10-compat. Users upgrading the acs-subsite package from the repository via will automatically receive the patch (starting tomorrow, after the nightly rebuild of the repository archives).

See full details at:
https://openacs.org/bugtracker/openacs/bug?bug_number=3477