apache / apache/iotdb

[Bug] 授权失效

Open
#12,976 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
6.4k
Forks
1.2k
Avg merge
1d 23h
Merged PRs (30d)
115

Description

### Search before asking

- [X] I searched in the [issues](https://github.com/apache/iotdb/issues) and found nothing similar.

### Version

0.13.3

### Describe the bug and provide the minimal reproduce step

![1](https://github.com/user-attachments/assets/f4a89cbb-b15d-4a80-a0af-c08d193fd946)

### What did you expect to see?

可以根据不同路径级别授权

### What did you see instead?

执行两种授权语句后,权限都是授权到了 root 而不是精确到root.test3_tonglian_transactions2021 这个级别
GRANT USER user823 PRIVILEGES ALL on root.test3_tonglian_transactions2021
GRANT USER user824 PRIVILEGES ALL on root.test3_tonglian_transactions2021.**

### Anything else?

_No response_

### Are you willing to submit a PR?

- [X] I'm willing to submit a PR!

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the behavior on IoTDB 0.13.3 with the two GRANT statements in the issue and compare the resulting permissions for root and root.test3_tonglian_transactions2021. Done means path-level authorization distinguishes the exact path from the wildcard path instead of granting both at root.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authorization, database
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.