Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

There are two GOD roles in one space #4591

Closed
slimshadylol0303 opened this issue Aug 30, 2022 · 3 comments
Closed

There are two GOD roles in one space #4591

slimshadylol0303 opened this issue Aug 30, 2022 · 3 comments
Assignees
Labels
duplicate Solution: this issue or pull request already exists type/bug Type: something is unexpected wontfix Solution: this will not be worked on recently
Milestone

Comments

@slimshadylol0303
Copy link

Nebula core version: v3.2.0

  1. I login with root user,
  2. then create two users user 2 and user 3,
  3. and create a space test,
  4. and then grant role to them with both GOD in space test, . It is obvious illegal, but it succeed in console.

create user user2
create user user3
CREATE SPACE test(partition_num=15, replica_factor=1, vid_type=fixed_string(30));
GRANT ROLE GOD ON test TO user2;
GRANT ROLE GOD ON test TO user3;
SHOW roles IN test;
image

@slimshadylol0303 slimshadylol0303 added the type/bug Type: something is unexpected label Aug 30, 2022
@Sophie-Xie Sophie-Xie added this to the v3.3.0 milestone Aug 30, 2022
@caton-hpg
Copy link
Contributor

1)GOD cannot be grant. GOD belongs only to root.
2) Only god and admin can execute create user xxx and grant rolexxx
image

@slimshadylol0303
Copy link
Author

1)GOD cannot be grant. GOD belongs only to root. 2) Only god and admin can execute create user xxx and grant rolexxx image

The second one has a little mistake, it should be:
only god can execute create user, and only god and admin can execute grant role

@caton-hpg
Copy link
Contributor

caton-hpg commented Sep 1, 2022

  1. Only god and admin can execute create user xxx and grant rolexxx

The first and second are OK. My config is --enable_authorize=flase. It should be true.

@abby-cyber abby-cyber self-assigned this Sep 27, 2022
@jinyingsunny jinyingsunny added invalid Solution: this issue is invalid and will be closed duplicate Solution: this issue or pull request already exists wontfix Solution: this will not be worked on recently and removed invalid Solution: this issue is invalid and will be closed labels Nov 11, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
duplicate Solution: this issue or pull request already exists type/bug Type: something is unexpected wontfix Solution: this will not be worked on recently
Projects
None yet
Development

No branches or pull requests

5 participants