Defect #25207
closedCannot assign users to project of projects to user
0%
Description
I cannot assign users to projects, after updating to the latest git update. When I click on add "New member" or assign project to user, the configuration window doesn't open, just appears a glimpse of spinner and then nothing happen.
At git master: r16340
Environment:
  Redmine version                3.3.2.devel
  Ruby version                   2.4.0-p0 (2016-12-24) [i686-linux]
  Rails version                  4.2.8
  Environment                    production
  Database adapter               Mysql2
SCM:
  Subversion                     1.9.3
  Git                            2.7.4
  Filesystem                     
Redmine plugins:
  no plugin installed
      
      Updated by Jean-Philippe Lang over 8 years ago
      
    
    - Status changed from New to Needs feedback
 
Make sure that your browser has fetch the latest js files (CTRL+F5). Please post the error that you should find in your log file when this problem occurs.
      
      Updated by Bruno Silva over 8 years ago
      
    
    I, [2017-03-08T23:05:55.536894 #25783]  INFO -- : Started GET "/projects/hartes/settings/members" for 1xx.xx.xx.xx at 2017-03-08 23:05:55 +0000
I, [2017-03-08T23:05:55.539368 #25783]  INFO -- : Processing by ProjectsController#settings as HTML
I, [2017-03-08T23:05:55.539456 #25783]  INFO -- :   Parameters: {"id"=>"hartes", "tab"=>"members"}
I, [2017-03-08T23:05:55.547453 #25783]  INFO -- :   Current user: xxxxxxxxxxx (id=1)
I, [2017-03-08T23:05:55.593479 #25783]  INFO -- :   Rendered projects/_form.html.erb (28.0ms)
I, [2017-03-08T23:05:55.594171 #25783]  INFO -- :   Rendered projects/_edit.html.erb (29.4ms)
I, [2017-03-08T23:05:55.600635 #25783]  INFO -- :   Rendered projects/settings/_modules.html.erb (6.2ms)
I, [2017-03-08T23:05:55.622220 #25783]  INFO -- :   Rendered projects/settings/_members.html.erb (21.2ms)
I, [2017-03-08T23:05:55.625358 #25783]  INFO -- :   Rendered projects/settings/_versions.html.erb (2.7ms)
I, [2017-03-08T23:05:55.627841 #25783]  INFO -- :   Rendered projects/settings/_issue_categories.html.erb (2.0ms)
I, [2017-03-08T23:05:55.629945 #25783]  INFO -- :   Rendered projects/settings/_wiki.html.erb (1.7ms)
I, [2017-03-08T23:05:55.635192 #25783]  INFO -- :   Rendered projects/settings/_repositories.html.erb (5.0ms)
I, [2017-03-08T23:05:55.637714 #25783]  INFO -- :   Rendered projects/settings/_boards.html.erb (2.3ms)
I, [2017-03-08T23:05:55.647839 #25783]  INFO -- :   Rendered projects/settings/_activities.html.erb (9.9ms)
I, [2017-03-08T23:05:55.648021 #25783]  INFO -- :   Rendered common/_tabs.html.erb (87.3ms)
I, [2017-03-08T23:05:55.648237 #25783]  INFO -- :   Rendered projects/settings.html.erb within layouts/base (88.3ms)
I, [2017-03-08T23:05:55.709403 #25783]  INFO -- : Completed 200 OK in 170ms (Views: 138.7ms | ActiveRecord: 15.1ms)
I, [2017-03-08T23:06:00.796801 #25783]  INFO -- : Started GET "/projects/hartes/memberships/new" for 1xx.xx.xx.xx at 2017-03-08 23:06:00 +0000
I, [2017-03-08T23:06:00.798541 #25783]  INFO -- : Processing by MembersController#new as JS
I, [2017-03-08T23:06:00.798625 #25783]  INFO -- :   Parameters: {"project_id"=>"hartes"}
I, [2017-03-08T23:06:00.805669 #25783]  INFO -- :   Current user: xxxxxxxxxxxx (id=1)
I, [2017-03-08T23:06:00.825106 #25783]  INFO -- :   Rendered members/_new_form.html.erb (12.4ms)
I, [2017-03-08T23:06:00.825649 #25783]  INFO -- :   Rendered members/_new_modal.html.erb (13.6ms)
I, [2017-03-08T23:06:00.826381 #25783]  INFO -- :   Rendered members/new.js.erb (14.5ms)
I, [2017-03-08T23:06:00.826707 #25783]  INFO -- : Completed 200 OK in 28ms (Views: 14.3ms | ActiveRecord: 4.7ms)
I, [2017-03-08T23:06:04.381882 #25783]  INFO -- : Started GET "/projects/hartes/memberships/new" for 1xx.xx.xx.xx at 2017-03-08 23:06:04 +0000
I, [2017-03-08T23:06:04.383514 #25783]  INFO -- : Processing by MembersController#new as JS
I, [2017-03-08T23:06:04.383599 #25783]  INFO -- :   Parameters: {"project_id"=>"hartes"}
I, [2017-03-08T23:06:04.390486 #25783]  INFO -- :   Current user: xxxxxxxx (id=1)
I, [2017-03-08T23:06:04.408528 #25783]  INFO -- :   Rendered members/_new_form.html.erb (12.1ms)
I, [2017-03-08T23:06:04.409044 #25783]  INFO -- :   Rendered members/_new_modal.html.erb (13.4ms)
      
      Updated by Bruno Silva over 8 years ago
      
    
    No errors appear in logs, as it seems, this is a log for 3 clicks on add New member in project settings. The member list doesn't show, instead just a glimpse of the spinner and return to the same settings page.
      
      Updated by Bruno Silva over 8 years ago
      
    
    I just realised that if I open in a new tab the "add New member" ctr+ New member click the window opens and I can add or remove users to the project.
      
      Updated by Bruno Silva over 8 years ago
      
    
    Update: found the source of the problem, was related to a strict CSP policy at apache. Nothing to do with Redmine. CSP was blocking 'eval'.
{
    "csp-report": {
        "document-uri": "https://<redmine_url>/projects/hartes/settings/members",
        "violated-directive": "script-src",
        "effective-directive": "script-src",
        "original-policy": "default-src 'self'; script-src 'self' 'unsafe-inline'; child-src 'self'; object-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' https://www.gravatar.com; report-uri https://url.report-uri.io/r/default/csp/enforce",
        "disposition": "enforce",
        "blocked-uri": "eval",
        "line-number": 2,
        "column-number": 2620,
        "source-file": "https://<redmine_url>/javascripts/jquery-1.11.1-ui-1.11.0-ujs-3.1.4.js",
        "status-code": 0
    }
}
      
      Updated by Toshi MARUYAMA over 8 years ago
      
    
    - Category deleted (
UI) - Status changed from Needs feedback to Closed
 - Priority changed from High to Normal
 
      
      Updated by Paweł Szmigiel about 6 years ago
      
    
    Hi, I have the same issue on Redmine 4.0.4, but I don't have CSP enabled. It happens on all the browsers. Can't find the resolution anywhere. Would appreciate any hints. It is happening after upgrade from 3.4 to 4.0.