Uploaded image for project: 'Jira Align'
  1. Jira Align
  2. JIRAALIGN-4577

Capabilities Grid: Whoops error due to malformed SQL query

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • High
    • 10.115.3
    • 10.113.2
    • Capabilities
    • 2
    • Severity 2 - Major
    • No

    Description

      Issue Summary

      Users are experiencing a Whoops Error in the Capabilities Grid (CapabalitiesGrid.asp)

      Steps to Reproduce

      1. Non-"Super Admin" user
      2. Tries to navigate to capabilitiesgrid.asp with 2 Releases selected (more info in comments)

      Expected Results

      Can view Capabilities list

      Actual Results

      Whoops error, and cannot view Capabilities List

       

      { [-]
         ASP_function: OOFunctionsSql.SetRSParamsCursor
         correlationid: J69gSb1t54LbUJTAsfOjZrs7WQmXEr3nzz5S/HWEdSA=
         customer_db: <customer>
         error_description: Incorrect syntax near the keyword 'And'.
         error_id: 58223
         error_number: -2147217900
         error_source: Microsoft SQL Server Native Client 11.0
         log_type: exception
         logfrom_location: Website-ASP
         sql: EXEC RPM_GET_FEATURE_GRP_LIST 30, 1,N'%%',N' AND  And ((EpicObjectID = xx) or (EpicObjectID is null and parentid is not Null)) ','p.FeatureGroupID DESC','xxxx',xx,NULL,NULL,NULL,'xx,xx',NULL,xx,NULL,0,NULL, N'',N'ParentEpic,AcceptanceCount,FeatureCount,ParentID,CommentCount,BubbleColor,FullName,UID,TotalBlockedFeatures,Split,State,GroupName,FeatureGroupID',N'',43
         timestamp: 2022-10-27T13:28:45.351000-04:00
         url: https://customername.jiraalign.com:443/CapabilitiesGrid.asp?FirstTime=True
         urlverb: GET
         user: 1086
         version: 10.112.3.25668
      }
      

      Note the SQL has "AND" duplicated

      N'%%',N' AND And ((EpicObjectID

      As the "And" has two lowercase letters, it appears to be coming from Grids.asp lines 965 and 967

      Workaround

      Impersonate a user that can access the Capabilities Grid

      • Navigate to Capabilities
      • Apply a Filter, eg Primary Program = "Program A"
      • Collect the URL
      • Provide the URL to the user that cannot access the Capabilities Grid
        As long as they keep using a filter from the "Apply Filters" section, the Capabilities Grid will load correctly.

      Attachments

        Issue Links

          Activity

            People

              dfuller@atlassian.com Don Fuller
              81fb6d9e7236 Heidi Hendry (Inactive)
              Votes:
              1 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Backbone Issue Sync