Create it on fly (it is not there by default). `koji grant-permission --new sign user_xyz`. I've created https://pagure.io/koji/issue/1520 to create it by default.

po 1. 7. 2019 v 11:38 odesílatel didier fabert <didier.fabert@gmail.com> napsal:
Hi all,

I have a personal koji and after upgrade it from 1.14 to 1.17, sigulsign_unsigned.py cannot write signed rpm with the following error
<code>
INFO: Setting up koji session
INFO: Starting new HTTPS connection (1): koji.example.com
INFO: Getting builds from arguments
INFO: Got 1 builds
INFO: Getting build IDs from Koji
INFO: Getting rpms from each build
INFO: Found 3 rpms
INFO: Checking for unsigned rpms in koji
INFO: Signing rpms via sigul
INFO: Calling koji to write 3 rpms
ERROR: Error writing out nagios-plugins-example-1.0.53-1.el7.src.rpm
ERROR:     ActionNotAllowed: sign permission required

ERROR: Error writing out nagios-plugins-example-1.0.53-1.el7.x86_64.rpm
ERROR:     ActionNotAllowed: sign permission required

ERROR: Error writing out nagios-engines-example-1.0.53-1.el7.x86_64.rpm
ERROR:     ActionNotAllowed: sign permission required

ERROR: Errors during Writing:
ERROR:      nagios-plugins-example-1.0.53-1.el7.src.rpm
ERROR:      nagios-plugins-example-1.0.53-1.el7.x86_64.rpm
ERROR:      nagios-engines-example-1.0.53-1.el7.x86_64.rpm
</code>
I found nothing about his permission
<code>
koji list-permissions
admin
build
repo
livecd
maven-import
win-import
win-admin
appliance
image
</code>
I ran every schema-upgrade-*.sql db in /usr/share/doc/koji-1.17.0/docs/ from 1.15 to 1.16.

Am I miss something ?
_______________________________________________
buildsys mailing list -- buildsys@lists.fedoraproject.org
To unsubscribe send an email to buildsys-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/buildsys@lists.fedoraproject.org


--

            Tomas Kopecek <tkopecek@redhat.com>
            Release Engineering Development, RedHat