New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

You do not have permission to dismiss this notification #8116

Closed
nodesocket opened this Issue Mar 8, 2017 · 8 comments

Comments

Projects
None yet
4 participants
@nodesocket

nodesocket commented Mar 8, 2017

Digging through my Node.js error log and seeing:

ERROR: You do not have permission to dismiss this notification.

 Error
    at Error.NoPermissionError (/home/node/blog.mydomain.net/core/server/errors/no-permission-error.js:6:18)
    at destroyNotification (/home/node/blog.mydomain.net/core/server/api/notifications.js:169:21)
    at runTask (/home/node/blog.mydomain.net/core/server/utils/pipeline.js:16:24)
    at /home/node/blog.mydomain.net/core/server/utils/pipeline.js:26:20
    at tryCatcher (/home/node/blog.mydomain.net/node_modules/bluebird/js/release/util.js:16:23)
    at Object.gotValue (/home/node/blog.mydomain.net/node_modules/bluebird/js/release/reduce.js:157:18)
    at Object.gotAccum (/home/node/blog.mydomain.net/node_modules/bluebird/js/release/reduce.js:144:25)
    at Object.tryCatcher (/home/node/blog.mydomain.net/node_modules/bluebird/js/release/util.js:16:23)
    at Promise._settlePromiseFromHandler (/home/node/blog.mydomain.net/node_modules/bluebird/js/release/promise.js:510:31)
    at Promise._settlePromise (/home/node/blog.mydomain.net/node_modules/bluebird/js/release/promise.js:567:18)
    at Promise._settlePromise0 (/home/node/blog.mydomain.net/node_modules/bluebird/js/release/promise.js:612:10)
    at Promise._settlePromises (/home/node/blog.mydomain.net/node_modules/bluebird/js/release/promise.js:691:18)
    at Promise._fulfill (/home/node/blog.mydomain.net/node_modules/bluebird/js/release/promise.js:636:18)
    at Promise._resolveCallback (/home/node/blog.mydomain.net/node_modules/bluebird/js/release/promise.js:431:57)
    at Promise._settlePromiseFromHandler (/home/node/blog.mydomain.net/node_modules/bluebird/js/release/promise.js:522:17)
    at Promise._settlePromise (/home/node/blog.mydomain.net/node_modules/bluebird/js/release/promise.js:567:18)
    at Promise._settlePromise0 (/home/node/blog.mydomain.net/node_modules/bluebird/js/release/promise.js:612:10)
    at Promise._settlePromises (/home/node/blog.mydomain.net/node_modules/bluebird/js/release/promise.js:691:18)
    at Promise._fulfill (/home/node/blog.mydomain.net/node_modules/bluebird/js/release/promise.js:636:18)
    at Promise._resolveCallback (/home/node/blog.mydomain.net/node_modules/bluebird/js/release/promise.js:431:57)
    at Promise._settlePromiseFromHandler (/home/node/blog.mydomain.net/node_modules/bluebird/js/release/promise.js:522:17)
    at Promise._settlePromise (/home/node/blog.mydomain.net/node_modules/bluebird/js/release/promise.js:567:18)

What is this related to?

Node: v6.10.0
Ghost: 0.11.4

@kirrg001

This comment has been minimized.

Contributor

kirrg001 commented Mar 9, 2017

Hey @nodesocket 👋 Sorry to hear you are having trouble.

It's possible that notifications can be dismissible.

Do you remember what you did to get this error?Steps to reproduce?
Did you upgrade Ghost before you were getting this error?

@nodesocket

This comment has been minimized.

nodesocket commented Mar 9, 2017

My question is that I am not sure I was the one who triggered it. Wondering if a malicious user may have found a security vulnerability? Also, this goes to stderr and seems to indicate a node crash right?

@kirrg001

This comment has been minimized.

Contributor

kirrg001 commented Mar 13, 2017

Also, this goes to stderr and seems to indicate a node crash right?

This error is handled, Ghost won't crash.

My question is that I am not sure I was the one who triggered it. Wondering if a malicious user may have found a security vulnerability?

No i don't think so. This error can happen if somebody tries to delete a notification, which is not dismissible. To be able to delete a notification the requester need's to pass the authentication.
This error is either a bug or a normal behaviour depending on the use case.

@kirrg001

This comment has been minimized.

Contributor

kirrg001 commented Mar 15, 2017

We can re-open this issue if it turns out it's a bug. Closing for now.

@kirrg001 kirrg001 closed this Mar 15, 2017

@ston3o

This comment has been minimized.

ston3o commented Sep 26, 2017

I have the same error:

ERROR [2017-09-26 12:37:34] "DELETE /ghost/api/v0.1/notifications/59ca49f0af492e00017d2fb5/" 403 115ms           

NAME: NoPermissionError     
MESSAGE: You do not have permission to dismiss this notification.                                                

level:normal                

NoPermissionError: You do not have permission to dismiss this notification.                                      
    at new NoPermissionError (/var/lib/ghost/versions/1.9.0/node_modules/ghost-ignition/lib/errors/index.js:108:23)
    at destroyNotification (/var/lib/ghost/versions/1.9.0/core/server/api/notifications.js:165:21)               
    at runTask (/var/lib/ghost/versions/1.9.0/core/server/utils/pipeline.js:16:24)                               
    at /var/lib/ghost/versions/1.9.0/core/server/utils/pipeline.js:26:20                                         
    at tryCatcher (/var/lib/ghost/versions/1.9.0/node_modules/bluebird/js/release/util.js:16:23)                 
    at Object.gotValue (/var/lib/ghost/versions/1.9.0/node_modules/bluebird/js/release/reduce.js:157:18)         
    at Object.gotAccum (/var/lib/ghost/versions/1.9.0/node_modules/bluebird/js/release/reduce.js:144:25)         
    at Object.tryCatcher (/var/lib/ghost/versions/1.9.0/node_modules/bluebird/js/release/util.js:16:23)          
    at Promise._settlePromiseFromHandler (/var/lib/ghost/versions/1.9.0/node_modules/bluebird/js/release/promise.js:512:31)
    at Promise._settlePromise (/var/lib/ghost/versions/1.9.0/node_modules/bluebird/js/release/promise.js:569:18) 
    at Promise._settlePromise0 (/var/lib/ghost/versions/1.9.0/node_modules/bluebird/js/release/promise.js:614:10)
    at Promise._settlePromises (/var/lib/ghost/versions/1.9.0/node_modules/bluebird/js/release/promise.js:693:18)
    at Promise._fulfill (/var/lib/ghost/versions/1.9.0/node_modules/bluebird/js/release/promise.js:638:18)       
    at Promise._resolveCallback (/var/lib/ghost/versions/1.9.0/node_modules/bluebird/js/release/promise.js:432:57)
    at Promise._settlePromiseFromHandler (/var/lib/ghost/versions/1.9.0/node_modules/bluebird/js/release/promise.js:524:17)
    at Promise._settlePromise (/var/lib/ghost/versions/1.9.0/node_modules/bluebird/js/release/promise.js:569:18) 
    at Promise._settlePromise0 (/var/lib/ghost/versions/1.9.0/node_modules/bluebird/js/release/promise.js:614:10)
    at Promise._settlePromises (/var/lib/ghost/versions/1.9.0/node_modules/bluebird/js/release/promise.js:693:18)
    at Promise._fulfill (/var/lib/ghost/versions/1.9.0/node_modules/bluebird/js/release/promise.js:638:18)       
    at Promise._resolveCallback (/var/lib/ghost/versions/1.9.0/node_modules/bluebird/js/release/promise.js:432:57)
    at Promise._settlePromiseFromHandler (/var/lib/ghost/versions/1.9.0/node_modules/bluebird/js/release/promise.js:524:17)
    at Promise._settlePromise (/var/lib/ghost/versions/1.9.0/node_modules/bluebird/js/release/promise.js:569:18)
@niranjan94

This comment has been minimized.

niranjan94 commented Sep 26, 2017

Same issue on Ghost 1.9.0

Version: 1.9.0
Environment: production
Database: mysql
Mail: SMTP

@kirrg001 I believe this should be opened again

@kirrg001

This comment has been minimized.

Contributor

kirrg001 commented Sep 26, 2017

@niranjan94

Release notifications are not dismissible at the moment. This behaviour exists for a long time now. This will change via #5071 - we overhaul notifications - it's in progress already.

Could you please update to 1.9.1 via the CLI? The blue top bar notification should be gone till the next minor release.

@niranjan94

This comment has been minimized.

niranjan94 commented Sep 26, 2017

Okay thanks for the info @kirrg001 😄

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment