Page MenuHomePhabricator

Error trying to edit Herald rules: Undefined class constant in SecurityPolicyEnforcerAction.php
Closed, ResolvedPublic

Description

STEPS:

  1. (As an admin,) Go to https://phabricator.wikimedia.org/herald/
  2. Choose any rule that is listed
  3. Click "Edit Rule"

ACTUAL RESULT:

>>> UNRECOVERABLE FATAL ERROR <<<
Undefined class constant &#039;VALUE_NONE&#039;
/srv/phab/libext/security/src/policy/SecurityPolicyEnforcerAction.php:28

EXPECTED RESULT:
Able to adjust Herald rules.

Event Timeline

Aklapper assigned this task to mmodell.
Aklapper raised the priority of this task from to High.
Aklapper updated the task description. (Show Details)
Aklapper added a project: Phabricator.
Aklapper added subscribers: Aklapper, mmodell.

Change 227205 had a related patch set uploaded (by Aklapper):
Adjust Herald field values to upstream changes

https://gerrit.wikimedia.org/r/227205

Aklapper changed the visibility from "Public (No Login Required)" to "Administrators".Jul 27 2015, 11:28 AM
Aklapper set Security to None.

Thinking a bit more about this, I'm not entirely sure about the consequences, so I'm temporarily restricting view access to admins. Please feel free to revert.

Aklapper changed the visibility from "Administrators" to "Public (No Login Required)".Jul 27 2015, 11:51 AM

Change 227205 merged by 20after4:
Adjust Herald field values to upstream changes

https://gerrit.wikimedia.org/r/227205

There was not any significant security consequence from this since we are no longer relying on herald for the security policy setting. The herald rule just does some sanity checking on task edits that affect the security policy. Also, this bug appears to have only affected the edit interface, not herald itself.

At any rate, thanks for catching this @Aklapper, and thanks for providing the correct patch. Very well done!