Details
-
Improvement
-
Resolution: Fixed
-
Critical
-
5.5.0
Description
Currently eventing runs as system user which gives it all privileges. We need to support running with fewer privileges. Perhaps we can allow specifying the user eventing should run handlers as.
Attachments
Issue Links
- causes
-
MB-49099 Identical function definitions can't be exported/imported in succession
- Closed
- depends on
-
MB-47010 Add support for user impersonation
- Closed
- is cloned by
-
MB-46880 Add Eventing RBAC roles to manage functions
- Closed
- is duplicated by
-
MB-33034 CB eventing needs to support RBAC
- Closed
-
CBEVT-58 CB Eventing needs to support RBAC
- Done
- relates to
-
MB-48969 [Couchbase-cli] Eventing RBAC changes cause keyerror to be thrown for certain eventing operations when user has insufficient privileges.
- Closed
-
MB-45362 [BP of MB-42835] - RBAC: Eventing Full Admin role
- Open
-
MB-42835 RBAC: Eventing Full Admin role
- Closed
For Gerrit Dashboard: MB-29224 | ||||||
---|---|---|---|---|---|---|
# | Subject | Branch | Project | Status | CR | V |
160276,5 | MB-47817,MB-29224: Update libcouchbase to 3.2.2 | master | manifest | Status: MERGED | +2 | +1 |
160923,26 | MB-29224: libcouchbase on behlaf of | unstable | eventing | Status: MERGED | +2 | +1 |
160924,8 | MB-29224: libcouchbase on behalf of | unstable | eventing-ee | Status: MERGED | +2 | +1 |
161054,9 | MB-29224: Refactor http function handler | unstable | eventing | Status: MERGED | +2 | +1 |
161067,14 | MB-29224: Rbac api | unstable | eventing | Status: MERGED | +2 | +1 |
161144,13 | MB-29224: Add function group and owner field to app | unstable | eventing | Status: MERGED | +2 | +1 |
161159,13 | MB-29224: Validation for function group | unstable | eventing | Status: MERGED | +2 | +1 |
161471,19 | MB-29224: Store owner and function group info in metakv | unstable | eventing | Status: MERGED | +2 | +1 |
161601,31 | MB-29224: Changes to http layer | unstable | eventing | Status: MERGED | +2 | +1 |
161829,23 | MB-29224: Fix response error codes | unstable | eventing | Status: MERGED | +2 | +1 |
161926,23 | MB-29224: Pass owner and function group information to producer | unstable | eventing | Status: MERGED | +2 | +1 |
161935,24 | MB-29224: Undeploy handler when owners lose their privilege | unstable | eventing | Status: MERGED | +2 | +1 |
162043,23 | MB-29224: Undeploy handler on function manage scope delete | unstable | eventing | Status: MERGED | +2 | +1 |
162047,5 | MB-29224: Handle upgraded handlers from previous versions | unstable | eventing-ee | Status: MERGED | +2 | +1 |
162068,26 | MB-29224: Handle upgraded handlers from previous versions | unstable | eventing | Status: MERGED | +2 | +1 |
162329,24 | MB-29224: Ui changes for rbac | unstable | eventing | Status: MERGED | +2 | +1 |
162351,19 | MB-29224: Add function group schema to handler schema | unstable | eventing | Status: MERGED | +2 | +1 |
162352,17 | MB-29224: Add function group for unit test | unstable | eventing | Status: MERGED | +2 | +1 |
163451,3 | MB-29224: Use api/v1 for delete | unstable | eventing | Status: MERGED | +2 | +1 |
163572,2 | MB-29224: Return forbidden list in response | unstable | eventing | Status: MERGED | +2 | +1 |
163575,2 | MB-29224, CCBC-1510: Update libcouchbase | master | manifest | Status: MERGED | +2 | +1 |
163634,3 | MB-29224: Fix export of handlers | unstable | eventing | Status: MERGED | +2 | +1 |