Skip to content
Snippets Groups Projects
New issue look: Off

LFS Error: Access forbidden. Check your access level.

    • Closed Issue created by username-removed-2900 @razer6

    This happens when cloning a public repo with LFS content on which you do not have write access.

    @marin

    git-lfs/1.0.2 (GitHub; darwin amd64; go 1.5.1)
git version 2.5.1

$ git-lfs smudge images/2011-06-27.jpg
Error accessing media: images/2011-06-27.jpg (345560b7d4e8eddc2a1bda60c067c98f4c9ad2ce1c187b65f99bde1aa3beaf72)

Access forbidden. Check your access level.
Docs: https://gitlab.com/help
goroutine 1 [running]:
github.com/github/git-lfs/lfs.Stack(0x0, 0x0, 0x0)
	/private/tmp/git-lfs20151028-50673-dp7qny/git-lfs-1.0.2/src/github.com/github/git-lfs/lfs/errors.go:557 +0x80
github.com/github/git-lfs/commands.logPanicToWriter(0xc641e8, 0xc8204760b0, 0xca1260, 0xc820168880)
	/private/tmp/git-lfs20151028-50673-dp7qny/git-lfs-1.0.2/src/github.com/github/git-lfs/commands/commands.go:184 +0xf7f
github.com/github/git-lfs/commands.logPanic(0xca1260, 0xc820168880, 0x0, 0x0)
	/private/tmp/git-lfs20151028-50673-dp7qny/git-lfs-1.0.2/src/github.com/github/git-lfs/commands/commands.go:148 +0x421
github.com/github/git-lfs/commands.handlePanic(0xca1260, 0xc820168880, 0x0, 0x0)
	/private/tmp/git-lfs20151028-50673-dp7qny/git-lfs-1.0.2/src/github.com/github/git-lfs/commands/commands.go:123 +0x4e
github.com/github/git-lfs/commands.LoggedError(0xca1260, 0xc820168880, 0x4e3700, 0x1e, 0xc8200f3c98, 0x2, 0x2)
	/private/tmp/git-lfs20151028-50673-dp7qny/git-lfs-1.0.2/src/github.com/github/git-lfs/commands/commands.go:73 +0x82
github.com/github/git-lfs/commands.smudgeCommand(0x6bbf20, 0xc820013930, 0x1, 0x1)
	/private/tmp/git-lfs20151028-50673-dp7qny/git-lfs-1.0.2/src/github.com/github/git-lfs/commands/command_smudge.go:80 +0xd89
github.com/github/git-lfs/vendor/_nuts/github.com/spf13/cobra.(*Command).execute(0x6bbf20, 0xc820013880, 0x1, 0x1, 0x0, 0x0)
	/private/tmp/git-lfs20151028-50673-dp7qny/git-lfs-1.0.2/src/github.com/github/git-lfs/vendor/_nuts/github.com/spf13/cobra/command.go:477 +0x403
github.com/github/git-lfs/vendor/_nuts/github.com/spf13/cobra.(*Command).Execute(0x6bcc20, 0x0, 0x0)
	/private/tmp/git-lfs20151028-50673-dp7qny/git-lfs-1.0.2/src/github.com/github/git-lfs/vendor/_nuts/github.com/spf13/cobra/command.go:551 +0x46a
github.com/github/git-lfs/commands.Run()
	/private/tmp/git-lfs20151028-50673-dp7qny/git-lfs-1.0.2/src/github.com/github/git-lfs/commands/commands.go:88 +0x23
main.main()
	/private/tmp/git-lfs20151028-50673-dp7qny/git-lfs-1.0.2/git-lfs.go:34 +0x12e

ENV:
LocalWorkingDir=.
LocalGitDir=.git
LocalGitStorageDir=.git
LocalMediaDir=.git/lfs/objects
TempDir=.git/lfs/tmp
ConcurrentTransfers=3
BatchTransfer=true
GIT_DIR=.git
GIT_WORK_TREE=.

    Designs

      Child items ...

      2. Activity

      • username-removed-2900 Milestone changed to 8.2

        Milestone changed to 8.2

      • username-removed-2900
        username-removed-2900 @razer6 ·
        Author Maintainer

        With export GIT_CURL_VERBOSE=true:

        # ~ → git clone https://gitlab.com/yorickpeterse/cat-pictures.git
Cloning into 'cat-pictures'...
* Couldn't find host gitlab.com in the .netrc file; using defaults
*   Trying 104.210.2.228...
* Connected to gitlab.com (104.210.2.228) port 443 (#0)
* TLS 1.2 connection using TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
* Server certificate: gitlab.com
* Server certificate: COMODO RSA Domain Validation Secure Server CA
* Server certificate: COMODO RSA Certification Authority
* Server certificate: AddTrust External CA Root
> GET /yorickpeterse/cat-pictures.git/info/refs?service=git-upload-pack HTTP/1.1
Host: gitlab.com
User-Agent: git/2.5.1
Accept: */*
Accept-Encoding: gzip
Pragma: no-cache

< HTTP/1.1 200 OK
< Server: nginx
< Date: Thu, 19 Nov 2015 16:15:56 GMT
< Content-Type: application/x-git-upload-pack-advertisement
< Content-Length: 310
< Cache-Control: no-cache
<
* Connection #0 to host gitlab.com left intact
* Couldn't find host gitlab.com in the .netrc file; using defaults
* Found bundle for host gitlab.com: 0x7f9273d00900
* Re-using existing connection! (#0) with host gitlab.com
* Connected to gitlab.com (104.210.2.228) port 443 (#0)
> POST /yorickpeterse/cat-pictures.git/git-upload-pack HTTP/1.1
Host: gitlab.com
User-Agent: git/2.5.1
Accept-Encoding: gzip
Content-Type: application/x-git-upload-pack-request
Accept: application/x-git-upload-pack-result
Content-Length: 140

* upload completely sent off: 140 out of 140 bytes
< HTTP/1.1 200 OK
< Server: nginx
< Date: Thu, 19 Nov 2015 16:15:56 GMT
< Content-Type: application/x-git-upload-pack-result
< Transfer-Encoding: chunked
< Cache-Control: no-cache
<
remote: Counting objects: 104, done.
remote: Compressing objects: 100% (102/102), done.
remote: Total 104 (delta 0), reused 100 (delta 0)
* Connection #0 to host gitlab.com left intact
Receiving objects: 100% (104/104), 377.41 KiB | 304.00 KiB/s, done.
Checking connectivity... done.
Downloading images/2011-06-27.jpg (46.56 KB)
> POST /yorickpeterse/cat-pictures.git/info/lfs/objects/batch HTTP/1.1
> Host: gitlab.com
> Accept: application/vnd.git-lfs+json; charset=utf-8
> Content-Type: application/vnd.git-lfs+json; charset=utf-8
> User-Agent: git-lfs/1.0.2 (GitHub; darwin amd64; go 1.5.1)
>
{"objects":[{"oid":"345560b7d4e8eddc2a1bda60c067c98f4c9ad2ce1c187b65f99bde1aa3beaf72","size":47680}],"operation":"download"}< HTTP/1.1 401 Unauthorized
< Transfer-Encoding: chunked
< Cache-Control: no-cache
< Content-Type: text/plain
< Date: Thu, 19 Nov 2015 16:15:58 GMT
< Server: nginx
< Status: 401 Unauthorized
< X-Request-Id: 1f55ae10-0889-4abb-a4c5-c904c7314081
< X-Runtime: 0.020775
<
UnauthorizedUsername for 'https://gitlab.com': razer6
Password for 'https://razer6@gitlab.com':
> POST /yorickpeterse/cat-pictures.git/info/lfs/objects/batch HTTP/1.1
> Host: gitlab.com
> Accept: application/vnd.git-lfs+json; charset=utf-8
> Authorization: Basic *********
> Content-Type: application/vnd.git-lfs+json; charset=utf-8
> User-Agent: git-lfs/1.0.2 (GitHub; darwin amd64; go 1.5.1)
>
{"objects":[{"oid":"345560b7d4e8eddc2a1bda60c067c98f4c9ad2ce1c187b65f99bde1aa3beaf72","size":47680}],"operation":"download"}< HTTP/1.1 403 Forbidden
< Transfer-Encoding: chunked
< Cache-Control: no-cache
< Content-Type: application/vnd.git-lfs+json
< Date: Thu, 19 Nov 2015 16:16:03 GMT
< Server: nginx
< Status: 403 Forbidden
< X-Request-Id: f8276988-13b8-4980-a8d9-0a6137b40384
< X-Runtime: 0.456737
<
{"message":"Access forbidden. Check your access level.","documentation_url":"https://gitlab.com/help"}Error accessing media: images/2011-06-27.jpg (345560b7d4e8eddc2a1bda60c067c98f4c9ad2ce1c187b65f99bde1aa3beaf72)

Errors logged to .git/lfs/objects/logs/20151119T171603.67396141.log
Use `git lfs logs last` to view the log.
error: external filter git-lfs smudge %f failed 2
error: external filter git-lfs smudge %f failed
fatal: images/2011-06-27.jpg: smudge filter lfs failed
warning: Clone succeeded, but checkout failed.
You can inspect what was checked out with 'git status'
and retry the checkout with 'git checkout -f HEAD'
        Edited by username-removed-2900
      • Kamil Trzcińśki
        Kamil Trzcińśki @ayufan ·
        Maintainer

        https://gitlab.com/gitlab-org/gitlab-ce/blob/master/lib/gitlab/lfs/response.rb#L37 - this method excepts that this is always a „upload“ operation. However, when doing git lfs fetch client sends „download“ request. Rails app should in response send links to download each of oids, but since this supports only upload operation it sends links only when an object doesn’t exist.

        This method also requires push permission, where in case of download only fetch should be sufficient.

      • Marin Jankovski
        Marin Jankovski @marin ·
        Maintainer

        This was my version where all worked:

        git-lfs/1.0.0 (GitHub; darwin amd64; go 1.5.1)
git version 2.6.1

Endpoint=https://gitlab.com/yorickpeterse/cat-pictures.git/info/lfs (auth=none)
  SSH=git@gitlab.com:yorickpeterse/cat-pictures.git
LocalWorkingDir=/tmp/cat-pictures
LocalGitDir=/tmp/cat-pictures/.git
LocalGitStorageDir=/tmp/cat-pictures/.git
LocalMediaDir=/tmp/cat-pictures/.git/lfs/objects
TempDir=/tmp/cat-pictures/.git/lfs/tmp
ConcurrentTransfers=3
BatchTransfer=true
git config filter.lfs.smudge = "git-lfs smudge %f"
git config filter.lfs.clean = "git-lfs clean %f"

        So this seems to be an issue with versions.

      • Marin Jankovski Reassigned to @marin

        Reassigned to @marin

      • Marin Jankovski
        Marin Jankovski @marin ·
        Maintainer

        Fix for stable in !1853 (merged), for master !1842 (merged)

      • Marin Jankovski
        Marin Jankovski @marin ·
        Maintainer

        Both merged, will be in 8.2.0.rc2.

      • Marin Jankovski Status changed to closed

        Status changed to closed

      Please register or sign in to reply