Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-25614

[N1QL RBAC System Catalog] Delete not allowed on system:completed_requests by bucket_admin

    XMLWordPrintable

Details

    • Untriaged
    • No

    Description

      According to latest changes in edited permission matrix:
      https://docs.google.com/spreadsheets/d/1f-wR5KBlBEkuTzOVHOhSaUCpMPyEvZ63PKer-TnWOMw/edit?ts=597a7a02#gid=0

      Delete should be allowed on system:completed_requests by bucket_admin.
      1. create a user johnDoe3 with bucket_admin permissions on default.
      2. curl -u johnDoe3:password1 http://172.23.107.182:8093/query/service -d 'statement=delete from system:completed_requests'
      {
      "requestID": "5ea2e2f7-c291-4d41-9ff4-ab217c283841",
      "signature": null,
      "results": [
      ],
      "errors": [

      {"code":13014,"msg":"User does not have credentials to run DELETE queries on the completed_requests bucket. Add role query_delete on completed_requests to allow the query to run."}

      ],
      "status": "stopped",
      "metrics":

      {"elapsedTime": "8.047095ms","executionTime": "7.974546ms","resultCount": 0,"resultSize": 0,"errorCount": 1}

      }

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            johan.larson Johan Larson (Inactive)
            Prerna.Manaktala Prerna Manaktala (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty