Description
The RBAC role names seem to be case sensitive when used with command line tools. Can we ignore case for the role names, for simpler usability.
1) N1QL layer seem to pass role names as is. And, GRANT ROLE doesn't recognize case-insensitive role names
>> From: Johan Larson <Johan.Larson@couchbase.com>
>> I never transform the role names to deal with case. I’m just passing them on down to the
>> server. But yes, we have round brackets in N1QL, but square brackets on the server.
grant role Query_Select(default) to prasad; |
[
|
{
|
"code": 5250, |
"msg": "Role Query_Select is not valid." |
}
|
]
|
|
grant role query_select(default) to prasad; ==> works fine |
2) command line API fails with error.. so can't verify if it accepts any case
couchbases-MacBook-Pro-5:bin varakurprasad$ ./couchbase-cli user-manage -c 127.0.0.1:8091 -u Administrator -p password --set --rbac-username "prasad" --rbac-password "password" --rbac-name "Prasad" --roles query_insert[travel-sample]
ERROR: --auth-type is required with the --set option
couchbases-MacBook-Pro-5:bin varakurprasad$ ./couchbase-cli user-manage -c 127.0.0.1:8091 -u Administrator -p password --set --rbac-username "prasad" --rbac-password "password" --rbac-name "Prasad" --roles query_insert[travel-sample] --auth-type 'builtin'
ERROR: "Unknown user domain."
couchbases-MacBook-Pro-5:bin varakurprasad$ ./couchbase-cli user-manage -c 127.0.0.1:8091 -u Administrator -p password --set --rbac-username "prasad" --rbac-password "password" --rbac-name "Prasad" --roles query_insert[travel-sample] --auth-type 'internal'
ERROR: "Unknown user domain."
couchbases-MacBook-Pro-5:bin varakurprasad$ ./couchbase-cli user-manage -c 127.0.0.1:8091 -u Administrator -p password --set --rbac-username "prasad" --rbac-password "password" --rbac-name "Prasad" --roles query_insert[travel-sample] --auth-type internal
ERROR: "Unknown user domain."
couchbases-MacBook-Pro-5:bin varakurprasad$ ./couchbase-cli user-manage -c 127.0.0.1:8091 -u Administrator -p password --set --rbac-username "prasad" --rbac-password "password" --rbac-name "Prasad" --roles query_insert[travel-sample] --auth-type external
ERROR: password - Found unsupported key password
couchbases-MacBook-Pro-5:bin varakurprasad$