Incorrect error message with unauthenticated "create index" request in CE version.

Description

Couchbase CE has many fewer roles than EE. If you try to create an index as an unauthenticated user, e.g.,

curl [http://localhost:9093/query/service] -d 'statement=create primary index on default;'

The error message that comes back is:

[{"code":13014,"msg":"User does not have credentials to run index operations. Add role query_manage_index on default to allow the query to run."}]

Yet the CE version doesn't have a query_manage_index role. The query does work you supply user credentials with the Administrator role, or with the "Bucket Full Access" role.

 

Components

Affects versions

Fix versions

Labels

Environment

None

Link to Log File, atop/blg, CBCollectInfo, Core dump

None

Release Notes Description

None

Activity

CB robot August 7, 2019 at 2:54 PM

Build couchbase-server-6.5.0-3977 contains query commit addbc8d with commit message:
provide different advice about roles for EE and CE

Johan Larson May 16, 2019 at 2:54 PM

Currently unable to use UI to assign roles to users. This is blocking progress on this bug. Filed .

Lynn Straus June 5, 2018 at 11:17 PM

, I have moved this to Mad-Hatter which is the next open release.  As Alice is restricted, please update the ticket if this is approved for Alice.  Sorry for any inconvenience.  

Fixed
Pinned fields
Click on the next to a field label to start pinning.

Details

Assignee

Reporter

Is this a Regression?

Unknown

Triage

Untriaged

Priority

Instabug

Open Instabug

PagerDuty

Sentry

Zendesk Support

Created May 21, 2018 at 9:46 PM
Updated August 7, 2019 at 3:08 PM
Resolved August 7, 2019 at 3:08 PM
Instabug