Gravatar for

Question by Dan Cruickshank, Mar 25, 2015 8:48 AM

How can I debug permission problems on an index?

I'm working on CES 7.0 x64 Build 6607.0 with a Web Connector and Coveo for Sitecore (May 2014 release)

When sources are coveo-pub-index + web connector, I get coveo-pub-index for results only

When sources are coveo-web-index + web connector, I get both for results.

Both sources are on the same CES, they share a security provider.

Web connector is configured properly (I think) because it's working with the web index. I also have this working in local, test, staging, authoring environments. I'm assuming this is a permissions problem as the code is the same throughout all envs and I've manually tested the query (minus QRE) within CES.

The main differences seems to be nature of "pub index". There are 3 CD servers, so we're using the pub index approach outlined in the coveo docs and the HostNameReplacerProcessor that I believe JP shared.

Side note - the security provider was originally using the user "coveo\admin" to authenticate, as "sitecore\admin" isn't usually available in production. Even though it was a valid user in Sitecore, when I browser security permissions on that user through CES, the user has had no permissions. I've sinced changed the security provider to use "sitecore\admin" and the Permissions on each source has both coveo\admin and sitecore\admin added. But again, only the pub database isn't working with this set up.

Where can I start debugging this? What's so different about accessing the web crawler source + "pub"? Thanks for your help!

Gravatar for

Comment by Dan Cruickshank, Mar 25, 2015 9:57 AM

Here are the effective combined permissions on the web connector content:

- Anonymous [denied]
- coveo\admin    User    Sitecore Security Provider for CALCMSPA-xyz [good]
- everyone    Group   Active Directory [good] 
- extranet\anonymous    User    Sitecore Security Provider for CALCMSPA-xyz [good]
- sitecore\admin           User Sitecore Security Provider for CALCMSPA-xyz [good]
1 Reply
Gravatar for

Answer by Simon, Mar 25, 2015 10:15 AM

It should work for both it it works for one. Is it possible that you did not publish the configuration of your Search page (The components on the Search sublayout)?

I would take a look at the query launched by both interfaces, web and pub, in the CES console. If both of them are similar, then it might be a bug and I would contact support.


Gravatar for

Comment by Dan Cruickshank, Mar 25, 2015 10:19 AM

Same exact queries, structurally. Where "" is the name of the source query.

aq: ($qre(expression:'@IsNewsRoom == 1', modifier:'-100') $qre(expression:'@syssource == "Coveopubindex - CALCMSPA-xyz"', modifier:'100')) (@syssource==("Coveopubindex - CALCMSPA-xyz",""))

cq: (@syssource==("")) (@syslanguage=="English") OR ((@flanguage8033 == "en") (@fz95xlatestversion8033=="1") (@fz95xpath8033="2ed73ec299d34dbfb71adb826168c132") (@fdatabasename8033 == "pub") (NOT(@ftemplateid8033=(…))))

I will contact support. Thank you!

Ask a question