# "Job Composer" Permissions issue

**URL:** <https://discourse.openondemand.org/t/job-composer-permissions-issue/2135>\
**Category:** Get Help\
**Tags:** ondemand2\
**Created:** [June 24, 2022, 9:53am UTC](https://discourse.openondemand.org/t/job-composer-permissions-issue/2135 "2022-06-24T09:53:11Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![liu-shaobo](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/liu-shaobo/32/1152_2.png) [@liu-shaobo](https://discourse.openondemand.org/u/liu-shaobo)\
**Post date:** [June 24, 2022, 9:53am UTC](https://discourse.openondemand.org/t/job-composer-permissions-issue/2135/1 "2022-06-24T09:53:11Z")

</div>

hi，please help me ,thanks.

CentOS-6.7 x64  
LDAP  
ondemand 2.9

**Create New Job and upload file**  
Shows as follows：

" Error occurred when attempting to create new file  
Unprocessable Entity"  
 ![image](https://us1.discourse-cdn.com/flex015/uploads/osc/original/2X/2/27a58e8abfb12720ce2e69c6edef1396907d4691.png)

" The change you wanted was rejected.  
Maybe you tried to change something you didn’t have access to.  
If you are the application owner check the logs for more information."  
 ![image](https://us1.discourse-cdn.com/flex015/uploads/osc/original/2X/2/2abc3e1fc6d965abc357893f61d287c078c56759.png)

apache access log as follows:

```auto
106.75.220.2 - user01 [24/Jun/2022:18:00:22 +0800] "PUT /pun/sys/dashboard/files/fs//home/user01/ondemand/data/sys/myjobs/templates/Basic_ABAQUS_Job_Owens/tst?touch=true HTTP/1.1" 422 - "http://ood.hpc.edu/pun/sys/dashboard/files/fs/home/user01/ondemand/data/sys/myjobs/templates/Basic_ABAQUS_Job_Owens" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36"

```

apache error log as follows:

```auto
[Fri Jun 24 18:00:22.753890 2022] [lua:debug] [pid 16786] lua_request.c(1839): [client 106.75.220.2:61282] AH01486: request_rec->dispatching headers_out -> apr table, referer: http://ood.hpc.edu/pun/sys/dashboard/files/fs/home/user01/ondemand/data/sys/myjobs/templates/Basic_ABAQUS_Job_Owens
[Fri Jun 24 18:00:22.753906 2022] [lua:debug] [pid 16786] lua_request.c(1849): [client 106.75.220.2:61282] AH01487: request_rec->dispatching clock -> lua_CFunction, referer: http://ood.hpc.edu/pun/sys/dashboard/files/fs/home/user01/ondemand/data/sys/myjobs/templates/Basic_ABAQUS_Job_Owens
[Fri Jun 24 18:00:22.753961 2022] [lua:debug] [pid 16786] lua_request.c(1849): [client 106.75.220.2:61282] AH01487: request_rec->dispatching info -> lua_CFunction, referer: http://ood.hpc.edu/pun/sys/dashboard/files/fs/home/user01/ondemand/data/sys/myjobs/templates/Basic_ABAQUS_Job_Owens
[Fri Jun 24 18:00:22.753975 2022] [lua:info] [pid 16786] [client 106.75.220.2:61282] req_protocol="HTTP/1.1" req_handler="proxy-server" req_method="PUT" req_accept="*/*" req_user_agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36" res_content_length="0" req_content_type="" res_content_encoding="" req_status="422" req_origin="http://ood.hpc.edu" time_user_map="0.008" local_user="user01" req_referer="http://ood.hpc.edu/pun/sys/dashboard/files/fs/home/user01/ondemand/data/sys/myjobs/templates/Basic_ABAQUS_Job_Owens" res_content_language="" req_port="80" req_is_websocket="false" req_server_name="ood.hpc.edu" log_hook="ood" req_accept_charset="" req_hostname="ood.hpc.edu" log_id="YrWLNoMwO@vOuwAPuCoySwAAAAg" res_content_location="" res_location="" log_time="2022-06-24T10:00:22.753675Z" remote_user="user01" req_user_ip="106.75.220.2" res_content_disp="" req_is_https="false" req_filename="proxy:http://localhost/pun/sys/dashboard/files/fs//home/user01/ondemand/data/sys/myjobs/templates/Basic_ABAQUS_Job_Owens/tst?touch=true" req_uri="/pun/sys/dashboard/files/fs/home/user01/ondemand/data/sys/myjobs/templates/Basic_ABAQUS_Job_Owens/tst" time_proxy="4.309" res_content_type="text/html; charset=utf-8" req_accept_language="zh-cn,zh;q=0.9" req_cache_control="" req_accept_encoding="gzip, deflate", referer: http://ood.hpc.edu/pun/sys/dashboard/files/fs/home/user01/ondemand/data/sys/myjobs/templates/Basic_ABAQUS_Job_Owens

```

---

<div class="post-metadata">

**Author:** ![jeff.ohrstrom](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/jeff.ohrstrom/32/136_2.png) [@jeff.ohrstrom](https://discourse.openondemand.org/u/jeff.ohrstrom)\
**Post date:** [June 24, 2022, 12:43pm UTC](https://discourse.openondemand.org/t/job-composer-permissions-issue/2135/2 "2022-06-24T12:43:36Z")

</div>

We require SSL by default. If you enable SSL on your apache, it’ll resolve this.

Alternatively you can follow these instructions to add an initializer. These instructions are for the `dashboard` (which you’ll also need) so you can substitute that with `myjobs` and it’d be the same for the job composer.

> <https://github.com/OSC/ondemand/issues/1193>
>
> After a fresh installation of OOD-2.0.9 on CentOS-7.9, I'm unable to use batch c…onnect applications.
> The navigation through the dashboard (file explorer, shell, etc.) is working well though.
> But every time I try to submit a job in an interactive session, I'm getting a HTTP 422 Error.
> 
> In the /var/log/ondemand-nginx/\<user\>/error.log, I'm seeing this error message:
> 
> \`\`\`
> App 19736 output: \[2021-05-31 09:51:01 +0200 \] WARN "Can't verify CSRF token authenticity."
> App 19736 output: \[2021-05-31 09:51:01 +0200 \] INFO "method=POST path=/pun/sys/dashboard/batch\_connect/sys/bc\_desktop\_3d/session\_contexts format=html controller=BatchConnect::SessionContextsController action=create status=422 error='ActionController::InvalidAuthenticityToken: ActionController::InvalidAuthenticityToken' duration=0.73 view=0.00"
> App 19736 output: \[2021-05-31 09:51:01 +0200 \] FATAL ""
> App 19736 output: \[2021-05-31 09:51:01 +0200 \] FATAL "ActionController::InvalidAuthenticityToken (ActionController::InvalidAuthenticityToken):"
> App 19736 output: \[2021-05-31 09:51:01 +0200 \] FATAL ""
> App 19736 output: \[2021-05-31 09:51:01 +0200 \] FATAL "actionpack (5.2.6) lib/action\_controller/metal/request\_forgery\_protection.rb:215:in \`handle\_unverified\_request'\\nactionpack (5.2.6) lib/action\_controller/metal/request\_forgery\_protection.rb:247:in \`handle\_unverified\_request'\\nactionpack (5.2.6) lib/action\_controller/metal/request\_forgery\_protection.rb:242:in \`verify\_authenticity\_token'\\nactivesupport (5.2.6) lib/active\_support/callbacks.rb:426:in \`block in make\_lambda'\\nactivesupport (5.2.6) lib/active\_support/callbacks.rb:198:in \`block (2 levels) in halting'\\nactionpack (5.2.6) lib/abstract\_controller/callbacks.rb:34:in \`block (2 levels) in \<module:Callbacks\>'\\nactivesupport (5.2.6) lib/active\_support/callbacks.rb:199:in \`block in halting'\\nactivesupport (5.2.6) lib/active\_support/callbacks.rb:513:in \`block in invoke\_before'\\nactivesupport (5.2.6) lib/active\_support/callbacks.rb:513:in \`each'\\nactivesupport (5.2.6) lib/active\_support/callbacks.rb:513:in \`invoke\_before'\\nactivesupport (5.2.6) lib/active\_support/callbacks.rb:131:in \`run\_callbacks'\\nactionpack (5.2.6) lib/abstract\_controller/callbacks.rb:41:in \`process\_action'\\nactionpack (5.2.6) lib/action\_controller/metal/rescue.rb:22:in \`process\_action'\\nactionpack (5.2.6) lib/action\_controller/metal/instrumentation.rb:34:in \`block in process\_action'\\nactivesupport (5.2.6) lib/active\_support/notifications.rb:168:in \`block in instrument'\\nactivesupport (5.2.6) lib/active\_support/notifications/instrumenter.rb:23:in \`instrument'\\nactivesupport (5.2.6) lib/active\_support/notifications.rb:168:in \`instrument'\\nactionpack (5.2.6) lib/action\_controller/metal/instrumentation.rb:32:in \`process\_action'\\nactionpack (5.2.6) lib/action\_controller/metal/params\_wrapper.rb:256:in \`process\_action'\\nactionpack (5.2.6) lib/abstract\_controller/base.rb:134:in \`process'\\nactionview (5.2.6) lib/action\_view/rendering.rb:32:in \`process'\\nactionpack (5.2.6) lib/action\_controller/metal.rb:191:in \`dispatch'\\nactionpack (5.2.6) lib/action\_controller/metal.rb:252:in \`dispatch'\\nactionpack (5.2.6) lib/action\_dispatch/routing/route\_set.rb:52:in \`dispatch'\\nactionpack (5.2.6) lib/action\_dispatch/routing/route\_set.rb:34:in \`serve'\\nactionpack (5.2.6) lib/action\_dispatch/journey/router.rb:52:in \`block in serve'\\nactionpack (5.2.6) lib/action\_dispatch/journey/router.rb:35:in \`each'\\nactionpack (5.2.6) lib/action\_dispatch/journey/router.rb:35:in \`serve'\\nactionpack (5.2.6) lib/action\_dispatch/routing/route\_set.rb:840:in \`call'\\nrack (2.2.3) lib/rack/tempfile\_reaper.rb:15:in \`call'\\nrack (2.2.3) lib/rack/etag.rb:27:in \`call'\\nrack (2.2.3) lib/rack/conditional\_get.rb:40:in \`call'\\nrack (2.2.3) lib/rack/head.rb:12:in \`call'\\nactionpack (5.2.6) lib/action\_dispatch/http/content\_security\_policy.rb:18:in \`call'\\nrack (2.2.3) lib/rack/session/abstract/id.rb:266:in \`context'\\nrack (2.2.3) lib/rack/session/abstract/id.rb:260:in \`call'\\nactionpack (5.2.6) lib/action\_dispatch/middleware/cookies.rb:670:in \`call'\\nactionpack (5.2.6) lib/action\_dispatch/middleware/callbacks.rb:28:in \`block in call'\\nactivesupport (5.2.6) lib/active\_support/callbacks.rb:98:in \`run\_callbacks'\\nactionpack (5.2.6) lib/action\_dispatch/middleware/callbacks.rb:26:in \`call'\\nactionpack (5.2.6) lib/action\_dispatch/middleware/debug\_exceptions.rb:61:in \`call'\\nactionpack (5.2.6) lib/action\_dispatch/middleware/show\_exceptions.rb:33:in \`call'\\nlograge (0.11.2) lib/lograge/rails\_ext/rack/logger.rb:15:in \`call\_app'\\nrailties (5.2.6) lib/rails/rack/logger.rb:26:in \`block in call'\\nactivesupport (5.2.6) lib/active\_support/tagged\_logging.rb:71:in \`block in tagged'\\nactivesupport (5.2.6) lib/active\_support/tagged\_logging.rb:28:in \`tagged'\\nactivesupport (5.2.6) lib/active\_support/tagged\_logging.rb:71:in \`tagged'\\nrailties (5.2.6) lib/rails/rack/logger.rb:26:in \`call'\\nactionpack (5.2.6) lib/action\_dispatch/middleware/remote\_ip.rb:81:in \`call'\\nrequest\_store (1.5.0) lib/request\_store/middleware.rb:19:in \`call'\\nactionpack (5.2.6) lib/action\_dispatch/middleware/request\_id.rb:27:in \`call'\\nrack (2.2.3) lib/rack/method\_override.rb:24:in \`call'\\nrack (2.2.3) lib/rack/runtime.rb:22:in \`call'\\nactivesupport (5.2.6) lib/active\_support/cache/strategy/local\_cache\_middleware.rb:29:in \`call'\\nactionpack (5.2.6) lib/action\_dispatch/middleware/executor.rb:14:in \`call'\\nrack (2.2.3) lib/rack/sendfile.rb:110:in \`call'\\nrailties (5.2.6) lib/rails/engine.rb:524:in \`call'\\n/opt/rh/ondemand/root/usr/share/ruby/vendor\_ruby/phusion\_passenger/rack/thread\_handler\_extension.rb:107:in \`process\_request'\\n/opt/rh/ondemand/root/usr/share/ruby/vendor\_ruby/phusion\_passenger/request\_handler/thread\_handler.rb:157:in \`accept\_and\_process\_next\_request'\\n/opt/rh/ondemand/root/usr/share/ruby/vendor\_ruby/phusion\_passenger/request\_handler/thread\_handler.rb:110:in \`main\_loop'\\n/opt/rh/ondemand/root/usr/share/ruby/vendor\_ruby/phusion\_passenger/request\_handler.rb:416:in \`block (3 levels) in start\_threads'\\n/opt/rh/ondemand/root/usr/share/ruby/vendor\_ruby/phusion\_passenger/utils.rb:113:in \`block in create\_thread\_and\_abort\_on\_exception'"
> \`\`\`
> 
> Any idea what's causing this ?
> I have this exact same installation with ondemand-1.8.20 and it's working fine.

---

<div class="post-metadata">

**Author:** ![liu-shaobo](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/liu-shaobo/32/1152_2.png) [@liu-shaobo](https://discourse.openondemand.org/u/liu-shaobo)\
**Post date:** [June 24, 2022, 11:54pm UTC](https://discourse.openondemand.org/t/job-composer-permissions-issue/2135/3 "2022-06-24T23:54:55Z")

</div>

thanks，Apache adds SSL, which can be accessed normally；

---

<div class="post-metadata">

**Author:** ![nwallin1](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/nwallin1/32/1072_2.png) [@nwallin1](https://discourse.openondemand.org/u/nwallin1)\
**Post date:** [July 11, 2022, 9:18pm UTC](https://discourse.openondemand.org/t/job-composer-permissions-issue/2135/4 "2022-07-11T21:18:42Z")

</div>

Hi Jeff, I’ve been setting up a proof of concept OpenOndemand server for a couple weeks and things have been going pretty good. This discourse has been very helpful with answering several questions I have had

Something small that has caused me a few problems throughout my installation has been not having SSL setup from the start. I did not set it up right away because I am newer to this kind of stuff and when I was going through the steps it said setting up SSL was “Optional, but recommended”, so I pushed off adding it ([5. Add SSL Support — Open OnDemand 2.0.20 documentation](https://osc.github.io/ood-documentation/latest/installation/add-ssl.html))

After looking around at some questions on the forum and some of the documentation there are mentions that it is a “Requirement” to have SSL. I think it would be helpful to change the wording of “Optional” to avoid confusion, or at maybe add a warning that says “We require SSL by default” so readers will know that things may not work as intended without SSL

Thanks

---

<div class="post-metadata">

**Author:** ![jeff.ohrstrom](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/jeff.ohrstrom/32/136_2.png) [@jeff.ohrstrom](https://discourse.openondemand.org/u/jeff.ohrstrom)\
**Post date:** [July 12, 2022, 12:12am UTC](https://discourse.openondemand.org/t/job-composer-permissions-issue/2135/5 "2022-07-12T00:12:38Z")

</div>

Hi and welcome! Yes we think the same. We’re overhauling our documentation for the same.

Here’s how that reads now (notice the FIXME link, because well, it’s still in flight.)  
[https://osc.github.io/ood-documentation/develop/installation/add-ssl.html](https://osc.github.io/ood-documentation/develop/installation/add-ssl.html)

---

<div class="post-metadata">

**Author:** ![nwallin1](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/nwallin1/32/1072_2.png) [@nwallin1](https://discourse.openondemand.org/u/nwallin1)\
**Post date:** [July 12, 2022, 6:47pm UTC](https://discourse.openondemand.org/t/job-composer-permissions-issue/2135/6 "2022-07-12T18:47:46Z")

</div>

Very cool, thanks for sharing!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex015/uploads/osc/original/2X/b/bae70bd0ed39a3ae769c2108155f4cb3e9da8385.png) [@system](https://discourse.openondemand.org/u/system)\
**Post date:** [January 8, 2023, 6:48pm UTC](https://discourse.openondemand.org/t/job-composer-permissions-issue/2135/7 "2023-01-08T18:48:38Z")

</div>

This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.