Graylog2 / Graylog2/graylog2-server

Deletion of a required role (Admin or Reader) on user edit page sometimes only works as expected after page reload

Open
#9,466 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

## Current Behavior
A user needs to have at least the Reader or Admin role. When a user has e.g. only the Reader role and an admin tires to remove this role on the user edit page, we do not allow the deletion and display a warning. This does not work as expected under the following circumstances:

User 1 = normal user with Reader role
User 2 = admin user

1. User 2 adds Admin role for User 1
2. User 2 tires to delete Reader role for User 1
3. User 1 still has the Reader role and User 2 sees warning "Roles must at least contain Admin or Reader role."

Removing the Reader role only works after a page reload.

## Expected Behavior
Step 2 should be possible and we should not display the warning.

* Graylog Version: 4.0rc1

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.