Project

General

Profile

Actions
Copy link

Bug #20567

closed

It is impossible to read group properties with a read-only account

Added by Elaad FURREEDAN almost 3 years ago. Updated over 2 years ago.

Status:
Released
Priority:
N/A
Assignee:
François ARMAND
Category:
API
Target version:
6.1.19
Pull Request:
https://github.com/Normation/rudder/p...
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
Checked
Regression:

Description

read-only user doesn't have rights to read for 

GET secure/api/groups/{id}/displayInheritedProperties

It happens on rudder 6.1.17 and 6.2.12 as well

Issue on the GUI: "Error while fetching group properties"

In the webapp logs:

[2022-01-13 11:07:35+0100] ERROR api-processing - Authorization error for 'GET secure/api/groups/87637c7b-1799-4f3f-b6a8-de1e1d7fd719/displayInheritedProperties': User 'toto' is not allowed to access GET secure/api/groups/{id}/displayInheritedProperties
[2022-01-13 11:07:35+0100] ERROR com.normation.rudder.rest.RestUtils - "Authorization error: User 'toto' is not allowed to access GET secure/api/groups/{id}/displayInheritedProperties"

Related issues 1 (0 open — 1 closed)

Related to Rudder - Bug #19631: It is impossible to read properties with a read-only accountReleasedAlexis MoussetActions
Actions
Copy link

Also available in: Atom PDF