Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-25772

data_backup role cannot write data using memcached / sdk

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Critical
    • 5.0.0
    • 5.0.0
    • ns_server
    • 3497
    • Untriaged
    • Centos 64-bit
    • Unknown

    Description

      Role definition from - https://github.com/couchbase/ns_server/blob/master/src/menelaus_roles.erl

       

      {data_backup, [bucket_name],
        [{name, <<"Data Backup">>},
        {desc, <<"Can backup and restore bucket data">>}],
        [{[\{bucket, bucket_name}, data], [read, write]},
        {[\{bucket, bucket_name}, views], [read, write]},
        {[\{bucket, bucket_name}, fts], [read, write, manage]},
        {[\{bucket, bucket_name}, stats], [read]},
        {[\{bucket, bucket_name}, settings], [read]},
        {[\{bucket, bucket_name}, n1ql, index], [create, list, build]},
        {[pools], [read]}]},

      [{[\{bucket, bucket_name}, data], [read, write]} - the write here should be Insert/Upsert. Currently user with this permission cannot write using SDK 

      https://github.com/couchbaselabs/sdk-qe/blob/automation/functional-tests/java-functional/src/main/java/com/couchbase/sdkqe/test/functional/TestEpRbac.java#L216

      First noticed here MB-25136, for permission to be incorrect. 

      This might be a regression, after a refractor or permission file -

      https://github.com/couchbase/ns_server/blob/fa149eb9ce278c84931a0b5d1eb794e09de552b9/src/memcached_permissions.erl

       

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            ritam.sharma Ritam Sharma
            ritam.sharma Ritam Sharma
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty