Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-24319

RBAC : can we make the role names case insensitive

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Major
    • 5.0.0
    • 5.0.0
    • rbac
    • None
    • Untriaged
    • Unknown

    Description

      The RBAC role names seem to be case sensitive when used with command line tools. Can we ignore case for the role names, for simpler usability.

      1) N1QL layer seem to pass role names as is. And, GRANT ROLE doesn't recognize case-insensitive role names
      >> From: Johan Larson <Johan.Larson@couchbase.com
      >> I never transform the role names to deal with case. I’m just passing them on down to the
      >> server. But yes, we have round brackets in N1QL, but square brackets on the server. 
       

      grant role Query_Select(default)  to prasad; 
      [
       {
       "code": 5250,
       "msg": "Role Query_Select is not valid."
       }
      ]
       
      grant role query_select(default)  to prasad; ==> works fine

       
       
      2) command line API fails with error.. so can't verify if it accepts any case
       
      couchbases-MacBook-Pro-5:bin varakurprasad$ ./couchbase-cli user-manage -c 127.0.0.1:8091 -u Administrator -p password --set --rbac-username "prasad"  --rbac-password "password" --rbac-name "Prasad" --roles query_insert[travel-sample]

      ERROR: --auth-type is required with the --set option

      couchbases-MacBook-Pro-5:bin varakurprasad$ ./couchbase-cli user-manage -c 127.0.0.1:8091 -u Administrator -p password --set --rbac-username "prasad"  --rbac-password "password" --rbac-name "Prasad" --roles query_insert[travel-sample] --auth-type 'builtin'

      ERROR: "Unknown user domain."

      couchbases-MacBook-Pro-5:bin varakurprasad$ ./couchbase-cli user-manage -c 127.0.0.1:8091 -u Administrator -p password --set --rbac-username "prasad"  --rbac-password "password" --rbac-name "Prasad" --roles query_insert[travel-sample] --auth-type 'internal'

      ERROR: "Unknown user domain."

      couchbases-MacBook-Pro-5:bin varakurprasad$ ./couchbase-cli user-manage -c 127.0.0.1:8091 -u Administrator -p password --set --rbac-username "prasad"  --rbac-password "password" --rbac-name "Prasad" --roles query_insert[travel-sample] --auth-type internal

      ERROR: "Unknown user domain."

      couchbases-MacBook-Pro-5:bin varakurprasad$ ./couchbase-cli user-manage -c 127.0.0.1:8091 -u Administrator -p password --set --rbac-username "prasad"  --rbac-password "password" --rbac-name "Prasad" --roles query_insert[travel-sample] --auth-type external

      ERROR: password - Found unsupported key password

      couchbases-MacBook-Pro-5:bin varakurprasad$
       

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            artem Artem Stemkovski
            Prasad.Varakur Prasad Varakur
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty