Actions
Bug #20567
closed
It is impossible to read group properties with a read-only account
Pull Request:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
Checked
Regression:
Description
read-only user doesn't have rights to read for
GET secure/api/groups/{id}/displayInheritedProperties
It happens on rudder 6.1.17 and 6.2.12 as well
Issue on the GUI: "Error while fetching group properties"In the webapp logs:
[2022-01-13 11:07:35+0100] ERROR api-processing - Authorization error for 'GET secure/api/groups/87637c7b-1799-4f3f-b6a8-de1e1d7fd719/displayInheritedProperties': User 'toto' is not allowed to access GET secure/api/groups/{id}/displayInheritedProperties
[2022-01-13 11:07:35+0100] ERROR com.normation.rudder.rest.RestUtils - "Authorization error: User 'toto' is not allowed to access GET secure/api/groups/{id}/displayInheritedProperties"
Updated by Elaad FURREEDAN over 2 years ago
- Status changed from New to In progress
Updated by Elaad FURREEDAN over 2 years ago
- Status changed from In progress to Pending technical review
- Assignee changed from Elaad FURREEDAN to François ARMAND
- Pull Request set to https://github.com/Normation/rudder/pull/4107
Updated by Elaad FURREEDAN over 2 years ago
- Related to Bug #19631: It is impossible to read properties with a read-only account added
Updated by Anonymous over 2 years ago
- Status changed from Pending technical review to Pending release
Applied in changeset rudder|aa2caa60861adfbff41e1ffaf35fa4fc35369f70.
Updated by Alexis Mousset about 2 years ago
- Category changed from Relay server or API to API
Updated by Nicolas CHARLES about 2 years ago
- Fix check changed from To do to Checked
Updated by Vincent MEMBRÉ about 2 years ago
- Status changed from Pending release to Released
This bug has been fixed in Rudder 6.1.19, 6.2.13, 7.0.2 and 7.1.0~rc1 which were released today.
Actions