Details
Major Description
STEPS
Create user x having following roles.
Data Writer [metadata:*:*] , Data Writer [dst_bucket:*:*] , Data Reader [*:*:*] , Data DCP Reader [*:*:*],Manage Scope Functions [src_bucket:_default]
|
Create eventing handler having owner x.
Remove Manage Scope Functions [src_bucket:_default] role for user x.
Try to deploy handler using full admin user.
OBSERVATION
Deployment fails silently via UI as well as REST without throwing any error.
On 172.23.106.67
grep "\[Error\]" ns_server.eventing.log |
2021-10-28T04:47:50.443-07:00 [Error] util::ReadAppContent Function: advance_bucket_op app content doesn't exist or is empty |
2021-10-28T04:47:50.444-07:00 [Error] util::ReadAppContent Function: advance_bucket_op app content doesn't exist or is empty |
2021-10-28T04:50:09.587-07:00 [Error] SuperSupervisor::SettingsChangeCallback [0] Function advance_bucket_op is not deployable: One or more requested permissions missing |
2021-10-28T04:50:09.598-07:00 [Error] util::ReadAppContent Function: advance_bucket_op metakv get data is empty, fragment number: 0 fragment count: 1 |
2021-10-28T04:50:09.598-07:00 [Error] ServiceMgr::tempStoreAppsPathCallback Reading function: advance_bucket_op from metakv failed, err: Reading stale data |
2021-10-28T04:51:08.141-07:00 [Error] SuperSupervisor::SettingsChangeCallback [0] Function advance_bucket_op is not deployable: One or more requested permissions missing |
2021-10-28T04:51:08.153-07:00 [Error] util::ReadAppContent Function: advance_bucket_op metakv get checksum mismatch, fragment number: 0 fragment count: 1 |
2021-10-28T04:51:08.153-07:00 [Error] ServiceMgr::tempStoreAppsPathCallback Reading function: advance_bucket_op from metakv failed, err: checksum mismatch for payload fragments |
2021-10-28T04:51:13.770-07:00 [Error] SuperSupervisor::SettingsChangeCallback [0] Function advance_bucket_op is not deployable: One or more requested permissions missing |
2021-10-28T04:52:38.881-07:00 [Error] SuperSupervisor::SettingsChangeCallback [0] Function advance_bucket_op is not deployable: One or more requested permissions missing |
Attachments
| For Gerrit Dashboard: MB-49209 | ||||||
|---|---|---|---|---|---|---|
| # | Subject | Branch | Project | Status | CR | V |
| 165137,2 | MB-49209: Check function scope permission of owner before deployment | unstable | eventing | Status: MERGED | +2 | +1 |