Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-49209

Eventing RBAC: After deleting manage function scope privilege for a user, deployment fails silently without any error for full admin

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Major
    • 7.1.0
    • 7.1.0
    • eventing
    • Enterprise Edition 7.1.0 build 1587

    Description

      STEPS
      Create user x having following roles.

      Data Writer [metadata:*:*] , Data Writer [dst_bucket:*:*] , Data Reader [*:*:*] , Data DCP Reader [*:*:*],Manage Scope Functions [src_bucket:_default]
      

      Create eventing handler having owner x.
      Remove Manage Scope Functions [src_bucket:_default] role for user x.
      Try to deploy handler using full admin user.

      OBSERVATION
      Deployment fails silently via UI as well as REST without throwing any error.

      On 172.23.106.67

      grep "\[Error\]" ns_server.eventing.log
      2021-10-28T04:47:50.443-07:00 [Error] util::ReadAppContent Function: advance_bucket_op app content doesn't exist or is empty
      2021-10-28T04:47:50.444-07:00 [Error] util::ReadAppContent Function: advance_bucket_op app content doesn't exist or is empty
      2021-10-28T04:50:09.587-07:00 [Error] SuperSupervisor::SettingsChangeCallback [0] Function advance_bucket_op is not deployable: One or more requested permissions missing
      2021-10-28T04:50:09.598-07:00 [Error] util::ReadAppContent Function: advance_bucket_op metakv get data is empty, fragment number: 0 fragment count: 1
      2021-10-28T04:50:09.598-07:00 [Error] ServiceMgr::tempStoreAppsPathCallback Reading function: advance_bucket_op from metakv failed, err: Reading stale data
      2021-10-28T04:51:08.141-07:00 [Error] SuperSupervisor::SettingsChangeCallback [0] Function advance_bucket_op is not deployable: One or more requested permissions missing
      2021-10-28T04:51:08.153-07:00 [Error] util::ReadAppContent Function: advance_bucket_op metakv get checksum mismatch, fragment number: 0 fragment count: 1
      2021-10-28T04:51:08.153-07:00 [Error] ServiceMgr::tempStoreAppsPathCallback Reading function: advance_bucket_op from metakv failed, err: checksum mismatch for payload fragments
      2021-10-28T04:51:13.770-07:00 [Error] SuperSupervisor::SettingsChangeCallback [0] Function advance_bucket_op is not deployable: One or more requested permissions missing
      2021-10-28T04:52:38.881-07:00 [Error] SuperSupervisor::SettingsChangeCallback [0] Function advance_bucket_op is not deployable: One or more requested permissions missing
      

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            ankit.prabhu Ankit Prabhu
            sujay.gad Sujay Gad
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty