Admin portal access issue (2.1.6)

[KamranMammadov]

Hi all,

We upgraded the project from version 1.7.2 to 2.1.6, but now we’re unable to access the /Admin page. I’ve tried various troubleshooting steps but haven’t been able to resolve the issue.

From the logs, it appears the system is attempting to create a "SiteOwner(N)" role, and it seems that my recipe migrations are not being applied correctly. Although the console indicates that the migrations are applied, the database still reflects the old version number.

If anyone has encountered a similar issue or has suggestions, your help would be greatly appreciated.

Here is the logs :

here is the OrchardCore.Roles db record:

{
    "Roles": [
        {
            "RoleName": "Author",
            "RoleDescription": "Author role",
            "NormalizedRoleName": "AUTHOR",
            "RoleClaims": [
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "PublishOwnContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "EditOwnContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "DeleteOwnContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "PreviewOwnContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "CloneOwnContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ManageOwnUserInformation"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ManageOwnMediaContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "AccessAdminPanel"
                }
            ]
        },
        {
            "RoleName": "Contributor",
            "RoleDescription": "Contributor role",
            "NormalizedRoleName": "CONTRIBUTOR",
            "RoleClaims": [
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "EditOwnContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "PreviewOwnContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "CloneOwnContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ManageOwnUserInformation"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ManageOwnMediaContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "AccessAdminPanel"
                }
            ]
        },
        {
            "RoleName": "Editor",
            "RoleDescription": "Editor role",
            "NormalizedRoleName": "EDITOR",
            "RoleClaims": [
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "PublishContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "EditContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "DeleteContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "PreviewContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "CloneContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ListContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ManageOwnUserInformation"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ManageMediaContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ManageOwnMediaContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "AccessAdminPanel"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ManageWorkflows"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ExecuteWorkflows"
                }
            ]
        },
        {
            "RoleName": "Anonymous",
            "RoleDescription": "Anonymous role",
            "NormalizedRoleName": "ANONYMOUS",
            "RoleClaims": []
        },
        {
            "RoleName": "Authenticated",
            "RoleDescription": "Authenticated role",
            "NormalizedRoleName": "AUTHENTICATED",
            "RoleClaims": [
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ListContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ViewContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ViewContentTypes"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ViewMediaOptions"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ViewAnnouncementsList"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ViewProductsList"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ViewProduct"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "View_Announcement"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ViewTrainingList"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "HasProductLicense"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ViewHelpAndSupportPage"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ViewLicense"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ViewLicenseList"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ViewLicensingList"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "View_Product"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ViewReleaseList"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ViewRelease"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "View_Article"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "RequestDemo"
                }
            ]
        },
        {
            "RoleName": "External",
            "RoleDescription": "Externally authenticated role",
            "NormalizedRoleName": "EXTERNAL",
            "RoleClaims": [
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ViewContent"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ViewAnnouncementsList"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "View_Announcement"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "View_Product"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "View_Article"
                }
            ]
        },
        {
            "RoleName": "Moderator",
            "RoleDescription": "Moderator role",
            "NormalizedRoleName": "MODERATOR",
            "RoleClaims": [
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ManageOwnUserInformation"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "AccessAdminPanel"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "HasProductLicense"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ViewAnnouncementsList"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ViewProductsList"
                },
                {
                    "ClaimType": "Permission",
                    "ClaimValue": "ViewLicensingList"
                }
            ]
        },
        {
            "RoleName": "Privileged",
            "RoleDescription": "Users with Privileged role can see more releases.",
            "NormalizedRoleName": "PRIVILEGED",
            "RoleClaims": []
        },
        {
            "RoleName": "Administrator",
            "RoleDescription": "Administrator role",
            "NormalizedRoleName": "ADMINISTRATOR",
            "RoleClaims": []
        },
        {
            "RoleName": "SiteOwner",
            "NormalizedRoleName": "SITEOWNER",
            "RoleClaims": []
        },
        {
            "RoleName": "SiteOwner1",
            "NormalizedRoleName": "SITEOWNER1",
            "RoleClaims": []
        },
        {
            "RoleName": "SiteOwner2",
            "NormalizedRoleName": "SITEOWNER2",
            "RoleClaims": []
        },
        {
            "RoleName": "SiteOwner3",
            "NormalizedRoleName": "SITEOWNER3",
            "RoleClaims": []
        },
        {
            "RoleName": "SiteOwner4",
            "NormalizedRoleName": "SITEOWNER4",
            "RoleClaims": []
        },
        {
            "RoleName": "SiteOwner5",
            "NormalizedRoleName": "SITEOWNER5",
            "RoleClaims": []
        },
        {
            "RoleName": "SiteOwner6",
            "NormalizedRoleName": "SITEOWNER6",
            "RoleClaims": []
        },
        {
            "RoleName": "SiteOwner7",
            "NormalizedRoleName": "SITEOWNER7",
            "RoleClaims": []
        },
        {
            "RoleName": "SiteOwner8",
            "NormalizedRoleName": "SITEOWNER8",
            "RoleClaims": []
        },
        {
            "RoleName": "SiteOwner9",
            "NormalizedRoleName": "SITEOWNER9",
            "RoleClaims": []
        }
    ],
    "MissingFeaturesByRole": {
        "SiteOwner": [
            "OrchardCore.Email",
            "OrchardCore.Users"
        ],
        "SiteOwner1": [
            "OrchardCore.Email",
            "OrchardCore.Users"
        ],
        "SiteOwner2": [
            "OrchardCore.Email",
            "OrchardCore.Users"
        ],
        "SiteOwner3": [
            "OrchardCore.Email",
            "OrchardCore.Users"
        ],
        "SiteOwner4": [
            "OrchardCore.Email",
            "OrchardCore.Users"
        ],
        "SiteOwner5": [
            "OrchardCore.Email",
            "OrchardCore.Users"
        ],
        "SiteOwner6": [
            "OrchardCore.Email",
            "OrchardCore.Users"
        ],
        "SiteOwner7": [
            "OrchardCore.Email",
            "OrchardCore.Users"
        ],
        "SiteOwner8": [
            "OrchardCore.Email",
            "OrchardCore.Users"
        ],
        "SiteOwner9": [
            "OrchardCore.Email",
            "OrchardCore.Users"
        ]
    },
    "Identifier": "4zr6x0mtrbdwxrdb16h9sgj0xv"
}

My user roles : "RoleNames":["Authenticated","External","Administrator","Privileged"]

[gvkries]

There has been a fix related to the site owner permissions in 2.17. But I'm not sure if it fixes your specific problem as well.
Additionally, you should update to 1.8 first, before upgrading to 2.x.

[KamranMammadov]

Hi @gvkries I already did upgrade to 2.17 , didnt help.

[gvkries]

I thought it looks quite similar to issue #17780. Maybe @MikeAlhayek can help you.

[KamranMammadov]

@gvkries I can have call/share screen, whatever you want :D , we already have spent a lot of time on this

[MikeAlhayek]

I am not really sure how this behavior is possible. If I had a copy of your database, I could try it a see what is causing the issue.

The migration that is going it can be found here

OrchardCore/src/OrchardCore.Modules/OrchardCore.Roles/Migrations/RolesMigrations.cs

Line 14 in a31ad48

public sealed class RolesMigrations : DataMigration

It should create SiteOwner role unless it already exists then it would try SiteOwner(N). If this issue is only with one tenant, meanwhile you can manually edit the appsettings.json for their site in the AppData by adding "AdminRoleName": "Administrator" this should give the users with the Administrator access as admin to the site.

[KamranMammadov]

I tried change appsettings.json but every time when I run app in local , it overrides that value to "SiteOwner(N)" , another weird thing it update version number in Document table (yessql.db) for rows
OrchardCore.Roles
OrchardCore.Datamigrations

[MikeAlhayek]

If it creates a new role, I expect it to update the document and appsettings.

Maybe there is an expecting that is preventing that migration step from completing. Did you inspect your log file to see if there is other exception?

You can update your data base migration by manually advancing the counter in the migration step and then set the appsettings manually.

[KamranMammadov]

From the logs what I see, its trying to run migration several times. Here is the one of that logs:

2025-05-27 11:23:05.6995|Default||0HNCT000MQDUF:00000005|OrchardCore.Data.Migration.DataMigrationManager|INF|Applying migration for 'XXXXX.Theme' from version 10.
2025-05-27 11:23:05.7098|Default||0HNCT000MQDUF:00000005|OrchardCore.Users.Services.RecipeEnvironmentSuperUserProvider|WRN|Could not lookup the admin user, user migrations may not have run yet.
2025-05-27 11:23:05.7151|Default||0HNCT000MQDUF:00000005|OrchardCore.Recipes.Services.RecipeExecutor|INF|Executing recipe step 'Roles'.
2025-05-27 11:23:05.7291|Default||0HNCT000MQDUF:00000005|OrchardCore.Recipes.Services.RecipeExecutor|INF|Finished executing recipe step 'Roles'.
2025-05-27 11:23:05.7478|Default||0HNCT000MQDUF:00000005|OrchardCore.Roles.Migrations.RolesMigrations|INF|The Administrator does not contain SiteOwner permission. Creating a new AdminRoleName as the system admin name. The new role name is SiteOwner.
2025-05-27 11:23:05.7591|Default||0HNCT000MQDUF:00000005|OrchardCore.Roles.Migrations.RolesMigrations|INF|The Administrator does not contain SiteOwner permission. Creating a new AdminRoleName as the system admin name and storing it in the tenant app settings provider. The new name is SiteOwner

its appsettings.json:

{
  "AdminRoleName": "SiteOwner46",
  "DatabaseProvider": "Sqlite"
}

If you need , I can share RecipeMigrations class, I registered this as AddScoped

[KamranMammadov]

One more thing to note:
Another teammate upgraded the project and pushed the changes to Git. I then pulled those updates to my local environment. Could this issue be related to some Orchard Core settings? I suspect that the App_Data folder might be misconfigured, and something from there is still attempting to run a migration, even though the RecipeMigration class is already at its latest version.

[KamranMammadov]

[10:21:22 INF] Authorization failed. These requirements were not met:
OrchardCore.Security.PermissionRequirement
[10:21:22 INF] Executing ForbidResult with authentication schemes ([]).
[10:21:22 INF] AuthenticationScheme: Identity.Application was forbidden.

[KamranMammadov]

@MikeAlhayek any help ? :)

[MikeAlhayek]

Unfortunately without having access to the data when I can try it locally to see what is failing, it's going to be hard to pin point the exact issue.

Enable tracing in your logs and see if that gives you more clues on what is failing. I am suspecting another bad migration in your project.

You can manually edit the appsettings.json for their site in the AppData by adding "AdminRoleName": "Administrator" this should give the users with the Administrator access as admin to the site. Then manually update the migrations record in the database by adding or editing the entry for the migration that is causing the issue.