Re: "Permission denied" from dired, but not from ido completion in tramp

[Philipp Middendorf]

Hi Michael,

thanks for digging through that giant of a log file. It seems you conclude that 
tramp's behavior is fine as it is. But is it? I can clearly access the files 
and directories, manually via "ssh ...; cd ...;" and even through tramp, as 
demonstrated via ido. But then with dired, tramp can somehow not do it anymore? 
Is tramp doing an extra permissions check here that fails, or what's the deeper 
reason behind the error? In other words, what's different from the way tramp 
accesses files vs. tramp+ido or me ssh'ing into the machine?

PS: I'm in the Hamburg branch of DESY, but we're in close relations with 
Zeuthen. Funny that you know of it. :)

Cheers
Philipp
> Michael Albinus <michael.albinus@gmx.de> hat am 15.06.2024 10:13 CEST 
> geschrieben:
> 
>  
> Philipp Middendorf <pmidden@mailbox.org> writes:
> 
> > Hi,
> 
> Hi Philipp,
> 
> > attached is the gzipped tramp log (I hope file attachments work,
> > otherwise tell me how to give the log to you - uncompressed it's
> > 70MiB, compressed it's 4MiB) of what I did:
> >
> > - via ido-find-file, navigate to
> >   /asap3/petra3/gpfs/p11/2024/data/11019260 (which then presented me
> >   with a list files inside the directory "11019260", proving that you
> >   can access it with ido)
> 
> I cannot say to much about ido; I don't use it.
> 
> > - I then pressed C-j to open the directory "11019260" in dired. This
> >   resulted in a permission denied error.
> 
> Thanks. The error backtrace is
> 
> --8<---------------cut here---------------start------------->8---
>   backtrace()
>   tramp-error((tramp-file-name "ssh" nil nil "max-display.desy.de" nil 
> "/asap3/petra3/gpfs/p11/2024/data/11019260/" nil) permission-denied "Reading 
> directory: Permission denied, /ssh:max-dis...")
>   
> tramp-handle-access-file("/ssh:max-display.desy.de:/asap3/petra3/gpfs/p11/20..."
>  "Reading directory")
>   tramp-sh-file-name-handler(access-file 
> "/ssh:max-display.desy.de:/asap3/petra3/gpfs/p11/20..." "Reading directory")
>   apply(tramp-sh-file-name-handler access-file 
> ("/ssh:max-display.desy.de:/asap3/petra3/gpfs/p11/20..." "Reading directory"))
>   tramp-file-name-handler(access-file 
> "/ssh:max-display.desy.de:/asap3/petra3/gpfs/p11/20..." "Reading directory")
>   access-file("/ssh:max-display.desy.de:/asap3/petra3/gpfs/p11/20..." 
> "Reading directory")
>   
> tramp-sh-handle-insert-directory("/ssh:max-display.desy.de:/asap3/petra3/gpfs/p11/20..."
>  "--dired -alh --group-directories-first" nil t)
>   tramp-sh-file-name-handler(insert-directory 
> "/ssh:max-display.desy.de:/asap3/petra3/gpfs/p11/20..." "--dired -alh 
> --group-directories-first" nil t)
>   apply(tramp-sh-file-name-handler insert-directory 
> ("/ssh:max-display.desy.de:/asap3/petra3/gpfs/p11/20..." "--dired -alh 
> --group-directories-first" nil t))
>   tramp-file-name-handler(insert-directory 
> "/ssh:max-display.desy.de:/asap3/petra3/gpfs/p11/20..." "--dired -alh 
> --group-directories-first" nil t)
>   insert-directory("/ssh:max-display.desy.de:/asap3/petra3/gpfs/p11/20..." 
> "--dired -alh --group-directories-first" nil t)
>   
> dired-insert-directory("/ssh:max-display.desy.de:/asap3/petra3/gpfs/p11/20..."
>  "-alh --group-directories-first" nil nil t)
>   dired-readin-insert()
>   #<subr F616e6f6e796d6f75732d6c616d626461_anonymous_lambda_47>()
>   combine-change-calls-1(1 1 #<subr 
> F616e6f6e796d6f75732d6c616d626461_anonymous_lambda_47>)
>   #<subr dired-readin>()
>   nerd-icons-dired--refresh-advice(#<subr dired-readin>)
>   apply(nerd-icons-dired--refresh-advice #<subr dired-readin> nil)
>   dired-readin()
>   
> dired-internal-noselect("/ssh:max-display.desy.de:/asap3/petra3/gpfs/p11/20..."
>  nil)
>   dired-noselect("/ssh:max-display.desy.de:/asap3/petra3/gpfs/p11/20...")
>   run-hook-with-args-until-success(dired-noselect 
> "/ssh:max-display.desy.de:/asap3/petra3/gpfs/p11/20...")
>   find-file-noselect("/ssh:max-display.desy.de:/asap3/petra3/gpfs/p11/20..." 
> nil nil)
>   ido-file-internal(raise-frame)
>   ido-find-file()
>   funcall-interactively(ido-find-file)
>   #<subr call-interactively>(ido-find-file nil nil)
>   call-interactively@ido-cr+-record-current-command(#<subr 
> call-interactively> ido-find-file nil nil)
>   apply(call-interactively@ido-cr+-record-current-command #<subr 
> call-interactively> (ido-find-file nil nil))
>   call-interactively(ido-find-file nil nil)
>   command-execute(ido-find-file)
> --8<---------------cut here---------------end--------------->8---
> 
> So Tramp tries to do
> 
> --8<---------------cut here---------------start------------->8---
> 'insert-directory("/ssh:max-display.desy.de:/asap3/petra3/gpfs/p11/2024/data/11019260/"
>  "--dired -alh --group-directories-first" nil t)'
> --8<---------------cut here---------------end--------------->8---
> 
> However, this directory has the permissions
> 
> --8<---------------cut here---------------start------------->8---
> (("‘/asap3/petra3/gpfs/p11/2024/data/11019260/’") 6 ("fsdata" . 26666) 
> ("fsdata" . 6666) 1718366406 1717758044 1717758044 4096 "dr-xr-x---" t 
> 11510012908 -1)
> --8<---------------cut here---------------end--------------->8---
> 
> You are the user "pmidden" with group "cfel", being in a lot of other
> groups:
> 
> --8<---------------cut here---------------start------------->8---
> uid=37383(pmidden) gid=3512(cfel) 
> groups=3512(cfel),5536(owncloud),5739(cfeld-cdi),6084(upex),6971(exflswcfel),7348(cfel-c-sc),1000062(hdf-f),1000064(helmholtz-member-f),1000066(desy-f),12101561(BPMusers),110084722(11008472-part),110099992(11009999-part),110100912(11010091-part),110101502(11010150-part),110105772(11010577-part),110107922(11010792-part),110109002(11010900-part),110109012(11010901-part),110109022(11010902-part),110109292(11010929-part),110109352(11010935-part),110109362(11010936-part),110109382(11010938-part),110117282(11011728-part),110118792(11011879-part),110121402(11012140-part),110121722(11012172-part),110122032(11012203-part),110123112(11012311-part),110123182(11012318-part),110123192(11012319-part),110123322(11012332-part),110123852(11012385-part),110125002(11012500-part),110128812(11012881-part),110133492(11013349-part),110136442(11013644-part),110136452(11013645-part),110136472(11013647-part),110136512(11013651-part),110136522(11013652-part),110143762(11014376-part),110143802(11014380-part),110143812(11014381-part),110154022(11015402-part),110154032(11015403-part),110154042(11015404-part),110154052(11015405-part),110154302(11015430-part),110154492(11015449-part),110154902(11015490-part),110155712(11015571-part),110162552(11016255-part),110165652(11016565-part),110165662(11016566-part),110166462(11016646-part),110167702(11016770-part),110167722(11016772-part),110167732(11016773-part),110168102(11016810-part),110168112(11016811-part),110168122(11016812-part),110168132(11016813-part),110168452(11016845-part),110168482(11016848-part),110168532(11016853-part),110168552(11016855-part),110169412(11016941-part),110177572(11017757-part),110179282(11017928-part),110179322(11017932-part),110179352(11017935-part),110179932(11017993-part),110181882(11018188-part),110187322(11018732-part),110192602(11019260-part),110192872(11019287-part),500003233(50000323-clbt),600026962(60002696-part),600027701(60002770-dmgt),600027702(60002770-part),600028191(60002819-dmgt),600028192(60002819-part),600032301(60003230-dmgt),600032302(60003230-part),600032442(60003244-part),600044562(60004456-part),1095811797
> --8<---------------cut here---------------end--------------->8---
> 
> But you are not member of group "fsdata", and that's why Tramp cannot
> access this directory.
> 
> > Cheers
> > Philipp
> 
> Best regards, Michael.
> 
> PS: You are accessing a desy host. Do you happen to work in Zeuthen?