Graylog2 / Graylog2/graylog2-server
User collaborator with an manager or owner role can not edit shared event definition
- Dominant language
- Java
- Stars
- 8.1k
- Forks
- 1.1k
- Avg merge
- 1d 21h
- Merged PRs (30d)
- 218
Description
When you share ED with another user and assign the user as owner or manager, the collaborator can't edit ED even if users assigned as an owner
## Expected Behavior
Collaborators Owners and Managers can edit event definition
## Current Behavior
Collaborators Owners and Managers can not edit event definition
## Possible Solution
## Steps to Reproduce (for bugs)
1. Create event definition
2. Share this ED with another user as a collaborator and assign as owner or manager
3. Login with that another user
4. try to edit ED. You can change the name or description
5. You have permission error
## Context
## Your Environment
* Graylog Version: Graylog 6.2.0-beta.1+12da37d on server-2 (Eclipse Adoptium 17.0.14 on Linux 6.8.0-1024-aws)
* Java Version:
* OpenSearch Version:
* MongoDB Version:
* Operating System:
* Browser version:
Contributor guide
Research direction
Reproduce the permission error by following the listed shared event-definition steps, then trace the authorization path used when an owner or manager edits the name or description. Done means collaborators with owner or manager roles can edit the event definition without a permission error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- authorization, backend
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100