Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-8997

couchbase-cli keeps allowing read-only usr to get created. no validation/restriction in-check

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Major
    • 3.0
    • 2.2.0
    • tools
    • Security Level: Public
    • None
    • MAC OSX BUILD 817 - RC1

    Description

      couchbase-cli set read-only user does not validate after user has been created. see below.
      you can keep creating user after user (same user or different) again and again.

      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls123 --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls123 --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls123 --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2# ./couchbase-cli user-manage -c localhost:8091 --set --ro-username=halls123 --ro-password=password -u Administrator -p password
      SUCCESS: readOnly user created/modified
      bash-3.2#

      Attachments

        For Gerrit Dashboard: MB-8997
        # Subject Branch Project Status CR V
        29283,2 MB-8997: Check if ro user exists or not master couchbase-cli Status: MERGED +2 +1

        Activity

          People

            thuan Thuan Nguyen
            maria Maria McDuff (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty