Graylog2 / Graylog2/graylog2-server

Missing Permissions error when User A edits/saves a dashboard tab when User B has the dashboard already open

Open
#25,848 0 comments 0 reactions 1 assignee Claimed by @maxiadlovskii View on GitHub
bug
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

Missing Permissions error when User A edits/saves a dashboard tab when User B has the dashboard already open. See video:

https://github.com/user-attachments/assets/1f134d25-65fc-4cc3-b252-55b01592975b

Error:

```
The permissions check for the following request failed,
while trying to access /dashboards/643db738949d195752fc86dd.
There was an error fetching a resource: Forbidden. Additional information: User test does not have permission to load search 69f0c30af70635609a7e0bc0
```

## Expected Behavior

Software does not show erroneous error pages

## Current Behavior

If user A modifies and then saves a dashboard, while user B has the same dashboard page loaded (but not the same tab) and then user B navigates to the tab that was just changed by user A, an error is shown. See video.

## Possible Solution

## Steps to Reproduce (for bugs)

1. See video
2.
3.
4.

## Context

## Your Environment

* Graylog Version: 7.0.6
* Java Version: Bundled
* OpenSearch Version: Data Node 7.0.6
* MongoDB Version: 8.x
* Operating System: Ubuntu Server 22.04 LTS
* Browser version: Google Chrome Version 147.0.7727.117 (Official Build) (arm64)

## Checklist
[] This issue fix need to be backported.
[] Does this issue have **security** implications?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.