Details
-
Bug
-
Resolution: Fixed
-
Critical
-
7.1.0
-
Triaged
-
1
-
Yes
-
UI 2022-Feb
Description
A user with Query Select [*:*:*] can see the Query Workbench Tab from 7.0.x, but not from Neo
In 7.0.x:
The query Tab will always display due to a lexer issue with curly apostrophes, which means the condition will always evaluate to true.
ngShow: "rbac.cluster.collection[‘.:.:.‘].data.docs.read && rbac.cluster.collection[‘.:.:.’].collections.read"
Error: [$parse:lexerr] Lexer Error: Unexpected next character at columns 24-24 [‘] in expression [rbac.cluster.collection[‘.:.:.‘].data.docs.read && rbac.cluster.collection[‘.:.:.’].collections.read]. |
The ngShow will evaluate this as true, displaying the tab regardless of the permissions.
This has since been fixed in Neo, but the Query Tab will no longer show for a user with just Query Select [*:*:*], as they won't have rbac.cluster.collection[‘.:.:.’].collections.read
We need to modify the conditions needed for the ngShow so that a user with just Query Select [*:*:*] will still see the tab.
Attachments
For Gerrit Dashboard: MB-51528 | ||||||
---|---|---|---|---|---|---|
# | Subject | Branch | Project | Status | CR | V |
172631,4 | MB-51528 - Show query workbench for user restricted to single scope | master | query-ui | Status: MERGED | +2 | +1 |