Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-52040

RBAC - Assigning 'Manage Scopes' permission for existing buckets to users having documents access as a part of upgrade

    XMLWordPrintable

Details

    • Improvement
    • Resolution: Unresolved
    • Major
    • None
    • 7.0.3
    • ns_server
    • 1

    Description

      With the addition of scope collections in 7.x, a user must have 'Manage Scope' to use the Documents page in order to read Scopes and Collections.

      Current :

      If the Cluster is upgraded from some older version to Couchbase Server to version 7.x. Then all the users which earlier used to have access to Documents(Data read and Data write) in older version of Couchbase(Couchbase Server version < 7.x )  now manually needs to be updated with the additional permission/role 'Manage Scope' to access the documents on existing buckets(which now have _default scope and collection). 

      Without this 'Manage Scope'  permission user would get this error message while accessing Documents on Documents page : "Insufficient permissions to view documents. User must have at least Data Reader on one or more collections, and also the ability to view scopes and collections in that bucket."

      {}

      Expected:  

      In order to avoid this inconvenience of updating all users(which used to have access to documents earlier for the respective buckets) with this new permission 'Manage Scope' for already existing buckets for _default scope after upgrade, the request is to include this step of adding permission as a part of the upgrade itself. So that it doesn't need to be done manually as an extra step and the existing users which used to have access to the documents for existing buckets continue to have the same after upgrade without any issues. It would help in overall smooth transition from older version to new version 7.x.

       

       

       

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            anusha.mathur Anusha Mathur
            anusha.mathur Anusha Mathur
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty