Lacking permissions on the created schema
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 24
- Forks
- 27
- PR merge metrics
- No merged PRs in 30d
Description
Mesh version
- 1.7.1
Steps to reproduce
-
Create the user "user" without "Administrator permissions"
-
Create the role "schema editor" and assign "Can create new schemas" permission to that role
-
Create the group "editor" and assign it the "schema editor" role
-
Assign the "editor" group to the "user" user.
-
Log in as "user" and create a new schema.
Expected results
User should be able to read, modify and delete the created schema
Actual results
User cannot read, modify or delete the created schema
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the issue in Mesh 1.7.1 with the stated user, role, group, and schema-creation permission setup. Trace the permission handling for schema creation and subsequent read, modify, and delete operations; done means the creating user can perform all three actions without Administrator permissions.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- angular, typescript
- Domain
- authorization
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100