Content
View differences
Updated by Max Mutzge over 5 years ago
### **Environment**:
Your OpenProject Version: 11 (Docker self hosted) - It was detected also in a previous version right before 11.x, that's why I've upgraded.
Operating System / Browser / OpenProject language: Windows 10 / Firefox or Chrome / English
### **Logs**
web\_1 | W, \[2020-10-23T18:55:45.590652 #33\] WARN -- : attack prevented by Rack::Protection::JsonCsrf
web\_1 | W, \[2020-10-23T18:55:45.590709 #33\] WARN -- : attack prevented by Rack::Protection::JsonCsrf
web\_1 | W, \[2020-10-23T18:55:59.036552 #33\] WARN -- : attack prevented by Rack::Protection::JsonCsrf
web\_1 | W, \[2020-10-23T18:55:59.036607 #33\] WARN -- : attack prevented by Rack::Protection::JsonCsrf
web\_1 | /app/app/policies/redirect\_policy.rb:83:in \`preprocess': URI.escape is obsolete (StructuredWarnings::StandardWarning)
web\_1 | W, \[2020-10-23T18:57:30.412456 #33\] WARN -- : attack prevented by Rack::Protection::JsonCsrf
web\_1 | W, \[2020-10-23T18:57:30.412513 #33\] WARN -- : attack prevented by Rack::Protection::JsonCsrf
### **Steps to reproduce:**
1. I've created a new project and went to this new project, clicked into **Members** to try to add existing members;
2. Clicked in the button + Member;
3. Clicked in the dropdown below "Add existing users or groups or invite new users via email".
### **Actual Behavior**
Once I click in the dropdown, the following message appears: "An internal error has occurred. Http failure response for https://projects.\[domain\]/projects/\[project name\]/members/autocomplete\_for\_member.json?q=: https://projects.possible.cx/projects/possible-brasil-internal-test/members/autocomplete\_for\_member.json?q=: 403 Forbidden"
Due to this error, I can't add people to this project.
### **Expected Behavior**
I expect to be able to search or add people that should be populating this dropdown.
Your OpenProject Version: 11 (Docker self hosted) - It was detected also in a previous version right before 11.x, that's why I've upgraded.
Operating System / Browser / OpenProject language: Windows 10 / Firefox or Chrome / English
### **Logs**
web\_1 | W, \[2020-10-23T18:55:45.590652 #33\] WARN -- : attack prevented by Rack::Protection::JsonCsrf
web\_1 | W, \[2020-10-23T18:55:45.590709 #33\] WARN -- : attack prevented by Rack::Protection::JsonCsrf
web\_1 | W, \[2020-10-23T18:55:59.036552 #33\] WARN -- : attack prevented by Rack::Protection::JsonCsrf
web\_1 | W, \[2020-10-23T18:55:59.036607 #33\] WARN -- : attack prevented by Rack::Protection::JsonCsrf
web\_1 | /app/app/policies/redirect\_policy.rb:83:in \`preprocess': URI.escape is obsolete (StructuredWarnings::StandardWarning)
web\_1 | W, \[2020-10-23T18:57:30.412456 #33\] WARN -- : attack prevented by Rack::Protection::JsonCsrf
web\_1 | W, \[2020-10-23T18:57:30.412513 #33\] WARN -- : attack prevented by Rack::Protection::JsonCsrf
1. I've created a new project and went to this new project, clicked into **Members** to try to add existing members;
2. Clicked in the button + Member;
3. Clicked in the dropdown below "Add existing users or groups or invite new users via email".
### **Actual Behavior**
Once I click in the dropdown, the following message appears: "An internal error has occurred. Http failure response for https://projects.\[domain\]/projects/\[project name\]/members/autocomplete\_for\_member.json?q=:
Due to this error, I can't add people to this project.
### **Expected Behavior**
I expect to be able to search or add people that should be populating this dropdown.