Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-49227

[UDF] RBAC when user does not have execute function role message says: Add role admin to allow

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Major
    • 7.1.0
    • 7.1.0
    • query
    • 7.1.0-1592
    • Untriaged
    • 1
    • Unknown

    Description

      To repro:

      • create global function as Administrator
      • execute udf as another user without query_execute_global_functions role

      cbq> execute function add(1,2);
      {
          "requestID": "1b1b13d0-9977-4627-87d4-a1fc26587fdd",
          "signature": null,
          "results": [
          ],
          "errors": [
              {
                  "code": 13014,
                  "msg": "User does not have credentials to run this type of query. Add role admin to allow the query to run."
              }
          ],
          "status": "errors", 

      Error should say add query_execute_global_functions role instead of Admin.

      Same applies to external function (query_execute_global_external_functions).

      Attachments

        Activity

          People

            pierre.regazzoni Pierre Regazzoni
            pierre.regazzoni Pierre Regazzoni
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              PagerDuty