Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug]: [privilege_group] The "PrivilegeRenameCollection" is forbidden when login with the user added in the role granted with the built-in privilege group "CollectionReadWrite" #38003

Open
1 task done
binbinlv opened this issue Nov 25, 2024 · 3 comments
Assignees
Labels
kind/bug Issues or changes related a bug needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one.

Comments

@binbinlv
Copy link
Contributor

Is there an existing issue for this?

  • I have searched the existing issues

Environment

- Milvus version: master-20241125-0b9edb62-amd64
- Deployment mode(standalone or cluster): both
- MQ type(rocksmq, pulsar or kafka):    all
- SDK version(e.g. pymilvus v2.0.0rc2): 2.5.0rc126
- OS(Ubuntu or CentOS): 
- CPU/Memory: 
- GPU: 
- Others:

Current Behavior

The "PrivilegeRenameCollection" is forbidden when login with the user added in the role granted with the built-in privilege group "CollectionReadWrite"

Expected Behavior

The "PrivilegeRenameCollection" is not forbidden when login with the user added in the role granted with the built-in privilege group "CollectionReadWrite"

Steps To Reproduce

1. connect with "root" user
2. create a role
2. grant the role with "CollectionReadWrite" privilege group
3. create a user "user1"
4. add this user to the role
5. create the collection "collection_1"
6. disconnect milvus
7. connect with "user1" user
8. rename collection "collection_1"

Milvus Log

No response

Anything else?

No response

@binbinlv binbinlv added kind/bug Issues or changes related a bug needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one. labels Nov 25, 2024
@binbinlv
Copy link
Contributor Author

For the built-in privilege group "CollectionReadWrite":

1 "PrivilegeCompaction" and "PrivilegeRenameCollection" are forbidden, which should not

  1. "PrivilegeUpdateUser" is not forbidden, which should be forbidden

@binbinlv
Copy link
Contributor Author

/assign @shaoting-huang

@sre-ci-robot
Copy link
Contributor

@binbinlv: GitHub didn't allow me to assign the following users: shaoting-huang.

Note that only milvus-io members, repo collaborators and people who have commented on this issue/PR can be assigned. Additionally, issues/PRs can only have 10 assignees at the same time.
For more information please see the contributor guide

In response to this:

/assign @shaoting-huang

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug Issues or changes related a bug needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one.
Projects
None yet
Development

No branches or pull requests

3 participants