This repository was archived by the owner on May 9, 2019. It is now read-only.
Description Was able to see "Edit NAI Audit Details" screen after GRANT blackduck user ALL on table vuln_nai_audit.
http://imp-cc04.dc1.lan/AppEdit/editnaiauditdetails?appId=11637
/opt/blackduck/VulnNaiAudit_DB_Create.sql does not contain GRANT command.
Didn't see anything in docs about running GRANT.
[pjalajas@imp-cc04 ~]$ date
Thu Nov 2 10:40:28 EDT 2017
[pjalajas@imp-cc04 ~]$ ls -alrtFh /opt/blackduck/CodeCenter/tomcat/webapps/AppEdit.war
-rw-r--r--. 1 root root 42M Nov 1 18:04 /opt/blackduck/CodeCenter/tomcat/webapps/AppEdit.war
[pjalajas@imp-cc04 ~]$ md5sum /opt/blackduck/CodeCenter/tomcat/webapps/AppEdit.war
0aca502633b98469a914d230c6424b53 /opt/blackduck/CodeCenter/tomcat/webapps/AppEdit.war
[pjalajas@imp-cc04 ~]$ unzip -p /opt/blackduck/CodeCenter/tomcat/webapps/AppEdit.war META-INF/MANIFEST.MF | cat -A
Manifest-Version: 1.0^M$
Implementation-Title: Application Details Edit Webapp^M$
Implementation-Version: 1.4.4^M$
Archiver-Version: Plexus Archiver^M$
Built-By: mmcintyre^M$
Implementation-Build: ^M$
Implementation-Vendor-Id: com.blackducksoftware.tools^M$
Created-By: Apache Maven 3.3.3^M$
Build-Jdk: 1.8.0_77^M$
Implementation-Vendor: Black Duck Software, Inc.^M$
^M$
Exception:
Error getting NAI Audit details.
Make sure the NAI Audit database tables have been created.
Details:
PreparedStatementCallback; bad SQL grammar
[SELECT application_id, componentuse_id, component_id, vulnerability_id, nai_audit_status, nai_audit_comment
FROM vuln_nai_audit
WHERE application_id = ?];
nested exception is
org.postgresql.util.PSQLException:
ERROR: permission denied for relation vuln_nai_audit
[pjalajas@imp-cc04 ~]$ psql -p 55433 -U bds-codecenter -d bds_catalog -c "GRANT ALL ON TABLE vuln_nai_audit TO blackduck ; " | cat
GRANT
[pjalajas@imp-cc04 ~]$ psql -p 55433 -U bds-codecenter -d bds_catalog -c "\z vuln_nai_audit "
Access privileges
Schema | Name | Type | Access privileges | Column access privileges
--------+----------------+-------+-------------------------------------------+--------------------------
public | vuln_nai_audit | table | "bds-codecenter"=arwdDxt/"bds-codecenter"+|
| | | blackduck=arwdDxt/"bds-codecenter" |
(1 row)
Reactions are currently unavailable
Was able to see "Edit NAI Audit Details" screen after GRANT blackduck user ALL on table vuln_nai_audit.
http://imp-cc04.dc1.lan/AppEdit/editnaiauditdetails?appId=11637
/opt/blackduck/VulnNaiAudit_DB_Create.sql does not contain GRANT command.
Didn't see anything in docs about running GRANT.