Authenticated user cannot create ticket on GDAL Trac

[rouault]

Reported by user "rtorre":

"""I could log into trac but then after writing the ticket I got a permission error when trying to submit it: "TICKET_CREATE privileges are required to perform this operation on Ticket #None. You don't have the required permissions."."""

According to him there are other users that encounter the same issue.

I'm adding rtorre in Cc, in case he has some other info he can add (and at the same time if he comments here we can at least check commenting still works)

[strk]

According to SQL any authenticated users has permission to create tickets already:

trac_gdal=# select * from permission where action = 'TICKET_CREATE';
   username    |    action     
---------------+---------------
 authenticated | TICKET_CREATE
(1 row)

Could it be he tried to create a ticket while his authentication token was being removed in a spam fight ?

[rouault]

In ​https://trac.osgeo.org/gdal/admin/spamfilter/monitor, there was a newticket entry with a karma of 0 like other. I classified it as ham. But why would that one have been rejected whereas others are successful ?

[strk]

My hypothesis was that the user was NOT recognized as an authenticated user. The message suggests that's the case. I guess authentication is detected via a browser cookie, so messing with the cookies table on the database could have accidentally removed his cookie.

My spam cleanup script only removes sessions and cookies data associated with known spammer users, and "rtorre" is not among them, so if that's the case I don't know how it could have happened.