Error 500 on splunkweb using specific user

[splunkreal]

Hello, since upgrade 9.4.11 from 9.3.0 getting error 500 on splunkweb using local user (works with admin account). The user works fine from CLI using API but I wanted to try a query on splunkweb.

Exception observed is:

TypeError: 'NoneType' object is not subscriptable

File ".../util.py", line 1761, in should_use_app_bar_performance_optimizations

optimize_app_bar = splunk_web_optimizations_settings["enable_app_bar_performance_optimizations"]

Tried to recreate same role with limited capabilities and user on another platform and working fine, on same version.

/OPT/splunk/etc/system/local/authorize.conf

[role_monitoring]

get_diag = enabled

get_metadata = enabled

get_typeahead = enabled

rest_access_server_endpoints = enabled

rest_properties_get = enabled

search = enabled

srchIndexesAllowed = _*;linux;oxygene_cmdb;windows

srchJobsQuota = 9

srchMaxTime = 1800

srchTimeEarliest = -1

srchTimeWin = -1

Thanks.

[splunkreal · Accepted solution]

Support solution : "

apply the following stanza in $SPLUNK_HOME/etc/system/metadata/local.meta:

[]

access = read : [ * ], write : [ admin ]

export = system

Because users assigned to role_monitoring lack read access to the system-level web-features.conf configuration, the web server receives an empty/null object (NoneType) when evaluating UI optimizations during login in version 9.4+, resulting in the HTTP 500 error."