Graylog2 / Graylog2/graylog2-server

User collaborator with an manager or owner role can not edit shared event definition

Open
#22,027 0 comments 0 reactions 0 assignees View on GitHub
bug test-day triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 21h
Merged PRs (30d)
218

Description

When you share ED with another user and assign the user as owner or manager, the collaborator can't edit ED even if users assigned as an owner

## Expected Behavior
Collaborators Owners and Managers can edit event definition

## Current Behavior
Collaborators Owners and Managers can not edit event definition

## Possible Solution

## Steps to Reproduce (for bugs)

1. Create event definition
2. Share this ED with another user as a collaborator and assign as owner or manager
3. Login with that another user
4. try to edit ED. You can change the name or description
5. You have permission error

Image

## Context

## Your Environment

* Graylog Version: Graylog 6.2.0-beta.1+12da37d on server-2 (Eclipse Adoptium 17.0.14 on Linux 6.8.0-1024-aws)
* Java Version:
* OpenSearch Version:
* MongoDB Version:
* Operating System:
* Browser version:

Contributor guide

Open the contributing guide

Research direction

Reproduce the permission error by following the listed shared event-definition steps, then trace the authorization path used when an owner or manager edits the name or description. Done means collaborators with owner or manager roles can edit the event definition without a permission error.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authorization, backend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.