After a product's entitlement set is cleared, extending a grant of it fails with "Failed to save the grant" and no reason #273
Open
opened 2026-10-26 20:58:23 +00:00 by cgalo5758
·
0 comments
Labels
Clear labels
accessibility
area/billing
area/catalog
area/discourse
area/domains
area/entitlements
area/fedwiki
area/identity
area/integrations
area/licensing
area/member-ui
area/meta
area/operator-ui
area/ops
area/testing
duplicate
good-first-issue
invalid
privacy
security
upstream
wontfix
A barrier for people using assistive technology or a keyboard alone.
The Stripe mirror, checkout, subscriptions, invoices, fulfillment.
Products, prices, plan ladders, purchasability.
The Discourse integration.
The domains registry, claims, placements, the certificate ask.
Entitlement sets, rules, grants, pools, provisioning.
The Federated Wiki integration and farm sync.
Sign-in, sessions, persons, organizations, workspaces, roles.
The provider registry, outbox and webhooks in general.
Licenses, the contributor agreement, SPDX headers.
Member pages.
The repository itself, its contributing guide, CI, the tracker and the workflow.
Operator pages, forms, lists, the design system.
Deployment, configuration, migrations, workflows, instance settings.
The test stack, screens, lint, walkthroughs.
Closed because another issue already covers it.
Small, self-contained, and explained enough to be a first contribution.
Closed because it is not a ticket for this repository.
Touches what a person's data reveals.
Touches authentication, authorization, secrets or data exposure.
Waits on another repository or project before it can move.
Closed because it will not be done, with the reason in the last comment.
kind
bug
The software does something other than what it promises; closed when it again does what it promises.
kind
debt
Code, tests or tooling to clean up with nothing visible changing; closed when they are cleaner.
kind
design
A question to settle before work can be defined; closed when the decision is written down.
kind
docs
Documentation that is wrong or missing; closed when it says the right thing.
kind
enhancement
Something the software does not do yet; closed when it does.
priority
critical
Blocks the active milestone or harms members now.
priority
high
Next in line inside the active milestone.
priority
low
Inside the active milestone, when nothing else is left.
priority
medium
Inside the active milestone, after the high ones.
Milestone
No items
No Milestone
Projects
Clear projects
No projects
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: wiki-cafe/member-console#273
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
What happens
Some terms first. A grant is an operator's record that gives an organization a product without payment, optionally until an end date. An entitlement set is what a product delivers. Manage, on a grant's row on the organization page, changes the grant's end date; moving the end date of a grant that delivers issues an extension, which confers the product again (
ExtendGrantTx,internal/entitlements/grant_acts.go:108-215, the conferral at:182-193;docs/models/entitlements.md:51).The product edit form lets an operator set a product's entitlement set to "None" while a grant delivers the product (
UpdateProduct,internal/server/operator_products.go:332-338). The grant keeps delivering, because a delivery keeps the set it was conferred with (docs/models/product-catalog.md:53). The conferral refuses a product with no set (internal/db/migrations/00023_grant_resumption.sql:447-449), so every later extension of that grant fails. Manage answers "Failed to save the grant. Details are in the server logs." (internal/server/operator_enrollment.go:1094-1095), and only the log names the cause: "confer: product … has no entitlement set and confers nothing". Nothing on the grant's row or the product page says the grant can no longer be extended. The grant form leaves out products with no set (internal/server/operator_enrollment.go:1998), so no new grant of the product can be issued either, and the grant ends at its old date.On the same path a retired product, the other product state the conferral refuses, gets a sentence of its own: "… is retired, so the change was refused." (
internal/server/operator_enrollment.go:1059-1069).The change planned for #153 refuses clearing the set of a product that is a ladder tier; this case is a product that is a tier of no ladder. Related: #155.
What should happen
The operator learns the cause before or when the extension fails: Manage refuses it with a sentence that names the missing entitlement set, as it does for a retired product, or the product edit refuses clearing the set while a grant delivers the product.
Where
internal/server/operator_enrollment.go:1094-1095(the generic failure inManageGrant);internal/entitlements/grant_acts.go:182-193;internal/server/operator_products.go:332-338.Steps
Why it matters
An operator cannot extend a grant a member relies on and is not told why, so the member's delivery ends at the old date.