Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Inability to grant permissions to some users' credentials #71

Open
cnweaver opened this issue Aug 12, 2024 · 2 comments
Open

Inability to grant permissions to some users' credentials #71

cnweaver opened this issue Aug 12, 2024 · 2 comments
Assignees
Labels
bug Something isn't working

Comments

@cnweaver
Copy link
Collaborator

In at least one instance, a user who belongs to a group (and is even a group owner) cannot grant read and write permissions to that group's topics to a credential. Symptoms are that the web UI allows the relevant check boxes to be checked, but the changes vanish later, e.g. when reloading the credential management page. This suggests that the permission is not actually being stored in the backing database. The same problems occur hen an admin tries to add the permissions on the user's behalf.

@cnweaver cnweaver added the bug Something isn't working label Aug 12, 2024
@cnweaver cnweaver self-assigned this Aug 12, 2024
@cnweaver
Copy link
Collaborator Author

There are at least two distinct bugs here:

  • If a CredentialKafkaPermission with operation==All exists, the manage_credential page incorrectly displays it as having neither read nor write permission, and it is unclear how to alter it (or whether there is any working way to do so).
  • If an admin uses the manage_credential page and attempts to alter permission settings on another user's credential, whether those changes are valid is incorrectly checked based on the admin's permissions (permissions granted to groups of which the admin is a member), rather than the target user's permissions

@cmccully
Copy link

#72

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

3 participants