Internal Server Exception 500: when trying to access api or app from url

[exalate-issue-sync]

Describe the bug :

When a non admin user tries to load a application or api, an No value present error message appears

This throws exceptions that are not mapped to any readable error.

This leads to non admin user to have in the console-ui a “No Value”

To Reproduce :

Steps to reproduce the behaviour:

1. Created an app and api with admin account
2. Logged out, logged in with user account
3. Tried to access the app/api with the link copied previously [http://localhost:8084/#!/environments/default/apis/XXXXsomething/portal](http://localhost:8084/#!/environments/default/apis/XXXXsomething/portal "http://localhost:8084/#!/environments/default/apis/XXXXsomething/portal "http://localhost:8084/#!/environments/default/apis/XXXXsomething/portal"") [http://localhost:8084/#!/environments/default/applications/XXXXX](http://localhost:8084/#!/environments/default/applications/XXXXX "http://localhost:8084/#!/environments/default/applications/XXXXX "http://localhost:8084/#!/environments/default/applications/XXXXX"")
4. See error in the logs

10:26:04.858 [gravitee-listener-57] ERROR i.g.r.a.m.r.provider.ThrowableMapper - Internal error gio_apim_management_api-3.18.26 | java.util.NoSuchElementException: No value present gio_apim_management_api-3.18.26 | at java.base/java.util.Optional.orElseThrow(Unknown Source) gio_apim_management_api-3.18.26 | at io.gravitee.rest.api.service.impl.MembershipServiceImpl.getUserMember(MembershipServiceImpl.java:1291) gio_apim_management_api-3.18.26 | at io.gravitee.rest.api.service.impl.MembershipServiceImpl.getUserMemberPermissions(MembershipServiceImpl.java:1416) gio_apim_management_api-3.18.26 | at jdk.internal.reflect.GeneratedMethodAccessor699.invoke(Unknown Source) gio_apim_management_api-3.18.26 | at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) gio_apim_management_api-3.18.26 | at java.base/java.lang.reflect.Method.invoke(Unknown Source) gio_apim_management_api-3.18.26 | at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:344) gio_apim_management_api-3.18.26 | at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:198) gio_apim_management_api-3.18.26 | at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163) gio_apim_management_api-3.18.26 | at org.springframework.transaction.interceptor.TransactionInterceptor$1.proceedWithInvocation(TransactionInterceptor.java:123) gio_apim_management_api-3.18.26 | at org.springframework.transaction.interceptor.TransactionAspectSupport.invokeWithinTransaction(TransactionAspectSupport.java:388) gio_apim_management_api-3.18.26 | at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:119) gio_apim_management_api-3.18.26 | at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186) gio_apim_management_api-3.18.26 | at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:215) gio_apim_management_api-3.18.26 | at jdk.proxy3/jdk.proxy3.$Proxy44.getUserMemberPermissions(Unknown Source) gio_apim_management_api-3.18.26 | at io.gravitee.rest.api.service.impl.PermissionServiceImpl.hasPermission(PermissionServiceImpl.java:90) gio_apim_management_api-3.18.26 | at io.gravitee.rest.api.service.impl.PermissionServiceImpl.hasPermission(PermissionServiceImpl.java:72) gio_apim_management_api-3.18.26 | at jdk.internal.reflect.GeneratedMethodAccessor409.invoke(Unknown Source) gio_apim_management_api-3.18.26 | at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) gio_apim_management_api-3.18.26 | at java.base/java.lang.reflect.Method.invoke(Unknown Source) gio_apim_management_api-3.18.26 | at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:344) gio_apim_management_api-3.18.26 | at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:198) gio_apim_management_api-3.18.26 | at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163) gio_apim_management_api-3.18.26 | at org.springframework.transaction.interceptor.TransactionInterceptor$1.proceedWithInvocation(TransactionInterceptor.java:123) gio_apim_management_api-3.18.26 | at org.springframework.transaction.interceptor.TransactionAspectSupport.invokeWithinTransaction(TransactionAspectSupport.java:388) gio_apim_management_api-3.18.26 | at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:119) gio_apim_management_api-3.18.26 | at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186) gio_apim_management_api-3.18.26 | at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:215) gio_apim_management_api-3.18.26 | at jdk.proxy3/jdk.proxy3.$Proxy37.hasPermission(Unknown Source) gio_apim_management_api-3.18.26 | at io.gravitee.rest.api.management.rest.filter.PermissionsFilter.hasPermission(PermissionsFilter.java:93) gio_apim_management_api-3.18.26 | at io.gravitee.rest.api.management.rest.filter.PermissionsFilter.hasPermission(PermissionsFilter.java:82) gio_apim_management_api-3.18.26 | at io.gravitee.rest.api.management.rest.filter.PermissionsFilter.lambda$filter$1(PermissionsFilter.java:68) gio_apim_management_api-3.18.26 | at java.base/java.util.stream.ReferencePipeline$2$1.accept(Unknown Source) gio_apim_management_api-3.18.26 | at java.base/java.util.Spliterators$ArraySpliterator.tryAdvance(Unknown Source) gio_apim_management_api-3.18.26 | at java.base/java.util.stream.ReferencePipeline.forEachWithCancel(Unknown Source) gio_apim_management_api-3.18.26 | at java.base/java.util.stream.AbstractPipeline.copyIntoWithCancel(Unknown Source) gio_apim_management_api-3.18.26 | at java.base/java.util.stream.AbstractPipeline.copyInto(Unknown Source) gio_apim_management_api-3.18.26 | at java.base/java.util.stream.AbstractPipeline.wrapAndCopyInto(Unknown Source) gio_apim_management_api-3.18.26 | at java.base/java.util.stream.FindOps$FindOp.evaluateSequential(Unknown Source) gio_apim_management_api-3.18.26 | at java.base/java.util.stream.AbstractPipeline.evaluate(Unknown Source) gio_apim_management_api-3.18.26 | at java.base/java.util.stream.ReferencePipeline.findAny(Unknown Source) gio_apim_management_api-3.18.26 | at io.gravitee.rest.api.management.rest.filter.PermissionsFilter.filter(PermissionsFilter.java:69) gio_apim_management_api-3.18.26 | at io.gravitee.rest.api.management.rest.filter.PermissionsFilter.lambda$filter$0(PermissionsFilter.java:61) gio_apim_management_api-3.18.26 | at java.base/java.util.Optional.ifPresent(Unknown Source) gio_apim_management_api-3.18.26 | at io.gravitee.rest.api.management.rest.filter.PermissionsFilter.filter(PermissionsFilter.java:59) gio_apim_management_api-3.18.26 | at org.glassfish.jersey.server.ContainerFilteringStage.apply(ContainerFilteringStage.java:108) gio_apim_management_api-3.18.26 | at org.glassfish.jersey.server.ContainerFilteringStage.apply(ContainerFilteringStage.java:44) gio_apim_management_api-3.18.26 | at org.glassfish.jersey.process.internal.Stages.process(Stages.java:173) gio_apim_management_api-3.18.26 | at org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:247) gio_apim_management_api-3.18.26 | at org.glassfish.jersey.internal.Errors$1.call(Errors.java:248) gio_apim_management_api-3.18.26 | at org.glassfish.jersey.internal.Errors$1.call(Errors.java:244) gio_apim_management_api-3.18.26 | at org.glassfish.jersey.internal.Errors.process(Errors.java:292) gio_apim_management_api-3.18.26 | at org.glassfish.jersey.internal.Errors.process(Errors.java:274) gio_apim_management_api-3.18.26 | at org.glassfish.jersey.internal.Errors.process(Errors.java:244) gio_apim_management_api-3.18.26 | at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:265) gio_apim_management_api-3.18.26 | at org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:234) gio_apim_management_api-3.18.26 | at org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:684) gio_apim_management_api-3.18.26 | at org.glassfish.jersey.servlet.WebComponent.serviceImpl(WebComponent.java:394) gio_apim_management_api-3.18.26 | at org.glassfish.jersey.servlet.WebComponent.service(WebComponent.java:346) gio_apim_management_api-3.18.26 | at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:366) gio_apim_management_api-3.18.26 | at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:319) gio_apim_management_api-3.18.26 | at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:205) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:799) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1631) gio_apim_management_api-3.18.26 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:327) gio_apim_management_api-3.18.26 | at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:115) gio_apim_management_api-3.18.26 | at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:81) gio_apim_management_api-3.18.26 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) gio_apim_management_api-3.18.26 | at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:121) gio_apim_management_api-3.18.26 | at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:115) gio_apim_management_api-3.18.26 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) gio_apim_management_api-3.18.26 | at org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:126) gio_apim_management_api-3.18.26 | at org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:81) gio_apim_management_api-3.18.26 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) gio_apim_management_api-3.18.26 | at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:105) gio_apim_management_api-3.18.26 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) gio_apim_management_api-3.18.26 | at org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:149) gio_apim_management_api-3.18.26 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) gio_apim_management_api-3.18.26 | at org.springframework.security.web.savedrequest.RequestCacheAwareFilter.doFilter(RequestCacheAwareFilter.java:63) gio_apim_management_api-3.18.26 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) gio_apim_management_api-3.18.26 | at org.springframework.security.web.authentication.www.BasicAuthenticationFilter.doFilterInternal(BasicAuthenticationFilter.java:149) gio_apim_management_api-3.18.26 | at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117) gio_apim_management_api-3.18.26 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) gio_apim_management_api-3.18.26 | at io.gravitee.rest.api.security.filter.TokenAuthenticationFilter.doFilter(TokenAuthenticationFilter.java:163) gio_apim_management_api-3.18.26 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) gio_apim_management_api-3.18.26 | at io.gravitee.rest.api.security.filter.RecaptchaFilter.doFilter(RecaptchaFilter.java:97) gio_apim_management_api-3.18.26 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) gio_apim_management_api-3.18.26 | at org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:103) gio_apim_management_api-3.18.26 | at org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:89) gio_apim_management_api-3.18.26 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) gio_apim_management_api-3.18.26 | at io.gravitee.rest.api.security.filter.CsrfIncludeFilter.doFilter(CsrfIncludeFilter.java:39) gio_apim_management_api-3.18.26 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) gio_apim_management_api-3.18.26 | at org.springframework.security.web.csrf.CsrfFilter.doFilterInternal(CsrfFilter.java:117) gio_apim_management_api-3.18.26 | at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117) gio_apim_management_api-3.18.26 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) gio_apim_management_api-3.18.26 | at org.springframework.web.filter.CorsFilter.doFilterInternal(CorsFilter.java:91) gio_apim_management_api-3.18.26 | at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117) gio_apim_management_api-3.18.26 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) gio_apim_management_api-3.18.26 | at org.springframework.security.web.header.HeaderWriterFilter.doHeadersAfter(HeaderWriterFilter.java:90) gio_apim_management_api-3.18.26 | at org.springframework.security.web.header.HeaderWriterFilter.doFilterInternal(HeaderWriterFilter.java:75) gio_apim_management_api-3.18.26 | at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117) gio_apim_management_api-3.18.26 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) gio_apim_management_api-3.18.26 | at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:110) gio_apim_management_api-3.18.26 | at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:80) gio_apim_management_api-3.18.26 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) gio_apim_management_api-3.18.26 | at org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter.doFilterInternal(WebAsyncManagerIntegrationFilter.java:55) gio_apim_management_api-3.18.26 | at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117) gio_apim_management_api-3.18.26 | at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:336) gio_apim_management_api-3.18.26 | at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:211) gio_apim_management_api-3.18.26 | at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:183) gio_apim_management_api-3.18.26 | at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:354) gio_apim_management_api-3.18.26 | at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:267) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:548) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:233) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:1624) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:233) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1434) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:188) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:501) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:1594) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:186) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1349) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:234) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.server.Server.handle(Server.java:516) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.server.HttpChannel.lambda$handle$1(HttpChannel.java:400) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:645) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:392) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:277) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:311) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:105) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.io.ChannelEndPoint$1.run(ChannelEndPoint.java:104) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.runTask(EatWhatYouKill.java:338) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.doProduce(EatWhatYouKill.java:315) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.tryProduce(EatWhatYouKill.java:173) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.run(EatWhatYouKill.java:131) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:409) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:883) gio_apim_management_api-3.18.26 | at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1034) gio_apim_management_api-3.18.26 | at java.base/java.lang.Thread.run(Unknown Source)

noticed after this change: gravitee-io/gravitee-api-management@3.18.24...3.18.25#diff-05c8b637cd17e407cc2cb9463d56b4c50e596a6fc0f6a11bec393a83633a2983

tested in 3.18.26

_{* Please see Zendesk Support tab for further comments and attachments.}