1564309 - Can't connect to interactive tasks anymore

Status: RESOLVED FIXED

(Firefox Build System :: Task Configuration, defect)

Description

[Mike Hommey [:glandium]]

It fails with:

Client ID mozilla-auth0/ad|Mozilla-LDAP|mh does not have sufficient scopes and is missing the following scopes:

queue:get-artifact:private/docker-worker/shell.html


This request requires the client to satisfy the following scope expression:

{
  "AllOf": [
    "queue:get-artifact:private/docker-worker/shell.html"
  ]
}

---

* method:     getArtifact
* errorCode:  InsufficientScopes
* statusCode: 403
* time:       2019-07-09T04:17:44.010Z"

This worked recently. I'll note that I do have queue:get-artifact:private/interactive/* scopes, has something changed?

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

Tom, is this related to recent changes to access level roles?

Comment 2

[Tom Prince [:tomprince]]

Yes.

Comment 3

[Tom Prince [:tomprince]]

Attachment: Bug 1564309: Allow people with level-3 access to use interactive tasks; r?dustin

This used to be granted via the roles for level-3 repos (previously the
moz-tree:level:3 role). Since we don't grant level-3 users the scopes of
level-3 repos anymore, we need to grant this permission directly. Since the
repos don't need to access tasks, remove the scope from them at the same
time.