We are seeing ‘Unauthorized’

Sorry, you are not authorized to access this page.

on all assets after upgrading to 0.9.5. all content appears to be unaccessible with a “Unauthorized” message. Even the admin user is not able to access any entities. We use OICD for authentication when we try look at policies on the

<datahub-url>/policies

only to get a

Unauthorized to perform this action. Please contact your DataHub administrator. (code 403)

It was all working fine before the upgrade

A similar issue reported here https://datahubspace.slack.com/archives/C029A3M079U/p1674457028467349

Are you able to upgrade to 0.9,6.1? There have been some fixes around OIDC in the recent releases and you may be hitting some of the cookie issues here

Our issue is slightly different than above. All datahub users don’t have any access, including admin, not able to browse policies or user/group sections. It looks like datahub is not loading/finding existing policies or privileges will check on upgrading to 0.9.6.1

Hey can you check GMS logs?

Policies were not accessible to datahub, caused by a misconfiguration in our deployment. There was not much information in the GMS logs to indicate it is a policies loading issue. We redeployed it, it is working fine now Thank you all for your support on this issue.

CC : @thankful-morning-85093

@gray-ocean-32209 may I know what was the misconfiguration? I am too not seeing issues in GMS

@thankful-morning-85093 Issue was caused due Policies were not accessible/not loaded to datahub on the upgrade. In our case, they were not loaded because of user and secretes were not accessible on deployment, params are renamed but were not updated in the deployment code. Check your GSM booting logs on deployment it may have an indicator of why policies are not loading. One other reason I can think of in elasticsearch health, it is worth trying out to restore indecies. https://datahubproject.io/docs/how/restore-indices

Sounds good, thanks