Validatorless bootstrap is broken for non-admin users
Nobody has claimed this yet.
- Dominant language
- Erlang
- Stars
- 303
- Forks
- 211
- Avg merge
- 1d 8h
- Merged PRs (30d)
- 5
Description
Non-admin users by default do not have permission to create clients which means they cannot perform a validatorless bootstrap of a node.
My suggested workaround is to give the "users" group the "create" permission on the "clients" container. To be consistent with the permissions that the "users" group has on other containers I'm also suggesting that the "users" group be given the "update" permission on the "clients" container.
Does anyone have objections with this workaround?
What do we do for a permanent fix? Do we fix the code that generates new orgs and do we also migrate existing orgs permissions accordingly?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the code that generates new organizations and the permission handling for the clients container, then inspect how existing organization permissions could be migrated. Done means non-admin users can perform validatorless node bootstrap and the intended clients permissions are consistent for both new and existing organizations.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- erlang
- Domain
- authorization, backend
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100