Error when attempting to create locations and mapsets

[veroandreo]

Hi,

I try to create a new location and mapset as this is currently needed to create STRDS (#264). However, both using actinia endpoints and ace, I get errors like:

echo '{
  "epsg": "4326"
}' > /tmp/pc_location_epsg4326.json

curl ${AUTH} -H "Content-Type: application/json" -X POST "${actinia}/api/v1/locations/latlong_TEST" -d @/tmp/pc_location_epsg4326.json
{"message": "The server could not verify that you are authorized to access the URL requested. You either supplied the wrong credentials (e.g. a bad password), or your browser doesn't understand how to supply the credentials required."}

and

ace create_location="vero 4326"
Trying to create location vero
{'message': 'The server could not verify that you are authorized to access the '
            'URL requested. You either supplied the wrong credentials (e.g. a '
            "bad password), or your browser doesn't understand how to supply "
            'the credentials required.'}

ace location=latlong_wgs84 create_mapset=vero
Trying to create mapset vero
{'message': 'The server could not verify that you are authorized to access the '
            'URL requested. You either supplied the wrong credentials (e.g. a '
            "bad password), or your browser doesn't understand how to supply "
            'the credentials required.'}

Is this a permission problem? Is it possible for a user to create a location and mapset? I exported my credentials as env vars and they are fine.

[griembauer]

Hi @veroandreo, only admins can create new mapsets and locations, see also here. Which actinia instance are you using here? If you are using your credentials on actinia.mundialis.de (role: user), then this error is currently intended. However if you are running a local actinia instance that you try to access as admin, then there seems to be an issue.

[veroandreo]

Hi @griembauer, I see. I'm using actinia.mundialis.de, username: veroandreo. But I do not know what permissions/resources I have or not (#265). What is the role:user allowed to do?

Are there any plans to create different user levels then? Or users with the role:user must request admins to create location and mapsets and install grass addons (https://github.com/mundialis/ace/issues/6) for them?

[griembauer]

You can see what endpoints you are allowed to access as user from https://actinia.mundialis.de/api/v1/swagger.json --> go to paths --> description or nicely formatted from here. Concerning the allowed GRASS modules per user, this is yet a feature to come (#265).

Different user levels are not envisioned, however you are right that the role user currently has very limited permissions and flexibility. We will try to work on this.

[anikaweinmann]

A user gets the error:

curl -L -u 'demouser:xxx' -X POST "https://actinia.mundialis.de/api/v1/locations/nc_spm_08/mapsets/test_mapset_17"

{"message": "The server could not verify that you are authorized to access the URL requested. You either supplied the wrong credentials (e.g. a bad password), or your browser doesn't understand how to supply the credentials required."}

The tutorial list permissions of the different roles (https://actinia.mundialis.de/tutorial/actinia_concepts.html#user-user-roles-and-user-groups). According to this the user should be allowed to create a new mapset.

In future, it is planned that the user is also allowed to create a new location: https://github.com/mundialis/actinia-stac-plugin/wiki/3-Read#in-which-location-will-be-calculated.

[mmacata]

Waiting for implementation of comment above

[anikaweinmann]

Will be changed in actinia_core version > 4.2.0

[juleshaas]

The user is now allowed to create and delete own mapsets and locations via the respective endpoints. The actinia core version must be > 4.2.0.