apache / apache/hugegraph

HugeGraphServer开启权限认证,admin没问题,hugegraph创建PK失败

Open
#918 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Java
Stars
3.2k
Forks
636
Avg merge
3d 11h
Merged PRs (30d)
14

Description

### Expected behavior 期望表现
可以使用admin或者跟图名字一样的username及其token访问该图的schema和graphs接口

### Actual behavior 实际表现
- 当使用admin时,可以访问所有接口
- 当使用跟图的名字一样的username时,报错”permission denied“

### Steps to reproduce the problem 复现步骤

按照[官网](https://hugegraph.github.io/hugegraph-doc/config/config-authentication.html)配置权限,当使用跟图名字一样的username时,报错”permission denied“。

下图是使用loader导入时的报错,loader设置了--token为图的名字对应的token

![image](https://user-images.githubusercontent.com/17330028/77916338-8136c800-72cb-11ea-9cf6-60d99089f95d.png)

> 注:使用RESTful API创建PropertyKey也是一样的错误

Contributor guide

Open the contributing guide

Research direction

Start with the linked authentication configuration and reproduce the failure using the loader's --token option and the RESTful API PropertyKey creation request. Compare access as admin with access as the graph-named user. Done means that user can access the graph's schema and graphs interfaces and create a PropertyKey without a permission-denied error.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
api, authentication, databases
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.