Details
-
Bug
-
Resolution: Won't Fix
-
Blocker
-
None
-
2.8.0
-
None
-
None
Description
According to spec https://developer.couchbase.com/documentation/server/5.0/security/concepts-rba-for-apps.html#rbac_for_users_roles_and_privileges__table_data_writer_role
Data Writer should be able to read document and subdocument.
However I get
"Not authorized for operation"
for lcb_get3() and lcb_subdoc3()
Attaching cpp code and Makefile to reproduce.
Here is steps.
- Create a cluster (single node would be fine) of 5.0.0-3490
- Create bucket 'default'
- Create user 'datawriter' with bucket write role to 'default' bucket. Password as 'password'
- Checkout libcouchbase 2.8.0 in ../../couchbase/libcouchbase and install litbary under ../../couchbase/libcouchbase/inst
- Build the example app 'cmake -DLCB_ROOT=../../couchbase/libcouchbase/inst -DCMAKE_BUILD_TYPE=DEBUG ./'
- run app './sdk_lcb_feature_test'
Expected : No errors
Actual: "Not authorized for operation" for lcb_get3() and lcb_subdoc3() like this
key: SDLOOKUP...Not authorized for operation
key: GET...Not authorized for operation
Attachments
Issue Links
- depends on
-
MB-25984 Data writer should be able to read but not able to
- Closed