Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-23055

[FTS] RBAC: Unable to create alias on an index created by the same user on sasl bucket

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Critical
    • 5.0.0
    • 5.0.0
    • fts
    • None
    • Untriaged
    • Unknown

    Description

      Build
      5.0.0-2012

      Testcase (not merged yet)
      ./testrunner -i INI_FILE.ini GROUP=P0,cluster=D+F,skip-cleanup=True -t fts.rbac_fts.RbacFTS.test_fts_admin_permissions,users="""[

      {"id": "johnDoe", "name": "Jonathan Downing", "password": "password1", "roles": "fts_admin[sasl_bucket_1]:bucket_admin[sasl_bucket_1]"}

      ]""",sasl_buckets=1,default_bucket=False,GROUP=P0

      Testrunner log- https://gist.github.com/arunapiravi/1741126dd38ba00fa5c6c645d4955330

      Steps

      • Create a Couchbase user with roles FTS admin and Bucket Admin for sasl bucket
      • Login as new user
      • Create an index on sasl bucket - is successful
      • Create an alias on the created sasl index - Fails with error
        "Forbidden. User needs one of the following permissions: cluster.bucket[].fts!write"

      Attached screenshot of UI. Not attaching logs as reproduction is very easy and consistent. Please let me know if you would like to see the logs.

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              apiravi Aruna Piravi (Inactive)
              apiravi Aruna Piravi (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes

                  PagerDuty