ActionNotAllowed: policy violation - but why?

[Mike Bonnet]

Steve Traylen wrote:
> On Fri, May 8, 2009 at 11:52 AM, Steve Traylen <steve at traylen.net> wrote:
>> Hi,
>>
>>  I was reliably  building on a tag before but now receive
>>  ActionNotAllowed: policy violation
> 
> A little bit more.
> 
> ActionNotAllowed: policy violation -- all  :: deny

What version of Koji are you running?  I believe there was a bug in 
earlier versions that caused a missing "policy" entry in 
/etc/koji-hub/hub.conf to result in denials of everything.  That should 
be fixed in 1.3.1.  Alternately you could add a policy entry to allow 
building from srpm into the dist-centos4 tag:

[policy]
build_from_srpm =
      tag dist-centos4 :: allow
      has_perm admin :: allow
      all :: deny

>   Steve
> 
>>  and can't seem shake it or understand why for a particular package
>> Is is possible
>>  to get an explanation?
>>
>>  http://skoji.cern.ch/koji/taskinfo?taskID=2918
>>
>>  This is following a build as CN=straylen
>>
>>  koji build --nowait dist-centos4 ../SRPMS/mpich-1.2.7p1-2.el4.src.rpm
>>
>>  My permissions.
>>
>>  id |   name   | password | status | usertype | krb_principal
>> ----+----------+----------+--------+----------+---------------
>>  1 | straylen |          |      0 |        0 |
>>
>> and  user_id=1 does not appear in user_perms . i.e I am
>>  a boring user.
>>
>> The package has been added.
>>
>>  koji list-pkgs --tag=dist-centos4 --package=mpich
>> Package                 Tag                     Extra Arches     Owner
>> ----------------------- ----------------------- ---------------- ---------------
>> mpich                   dist-centos4                             straylen
>>
>>
>> Thanks again for the help.