Give the users in "auth.administrators" the member node admin privileges

[taojing2002]

Now the users on dataone.subject have the member node admin privileges, such as delete, reindex. We decided that users in auth.administrators should have the same privileges besides configuring Metacat instances.

Matthew said they had now. But this morning, I found they didn't when I test the MN.delete method.

[artntek]

Matthew said they had now. But this morning, I found they didn't when I test the MN.delete method.

I think this was a misunderstanding - what I meant was, the code already adds dataone.subject to the auth.administrators list at runtime. This means that dataone.subject would then have the same privileges as the auth admins currently do, but it appears the reverse is not true.

[taojing2002]

Aha! Makes sense now.

…

On Thu, Feb 29, 2024 at 2:13 PM Matthew B ***@***.***> wrote: Matthew said they had now. But this morning, I found they didn't when I test the MN.delete method. I think this was a misunderstanding - what I meant was, the code already adds dataone.subject to the auth.administrators list at runtime. This means that dataone.subject would then have the same privileges as the auth admins currently do, but it appears the reverse is not true. — Reply to this email directly, view it on GitHub <#1816 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AB5QQDF3FJE5WGUATETYEWTYV6T2BAVCNFSM6AAAAABEAU2GGWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSNZSGA2TSOBZHE> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[doulikecookiedough]

This has been completed via: Feature-1816: Metacat Admin MN Privileges (auth.administrators)

[doulikecookiedough]

This has been completed via Feature-1816: Metacat Admin MN Privileges (auth.administrators) - Resolve Broken Tests. Note: The previous PR left MNodeAccessControlTest and CNodeAccessControlTest in a failing state due to null values relating to a session and its related subject values. This has been resolved by first checking for a valid session before attempting to check for authorization as a Local Node Admin, CN Admin or a Metacat Admin. Additionally, new junit tests were added.