influxdata / influxdata/influxdb
Variable visibility across organizations
- Dominant language
- Rust
- Stars
- 31.7k
- Forks
- 3.7k
- Avg merge
- 13h 37m
- Merged PRs (30d)
- 8
Description
__Steps to reproduce:__
List the minimal actions needed to reproduce the behavior.
1. Onboard to the GUI and then create a second organization
2. Switch to the first organization
3. Create some variables
4. Switch to the second organization
5. View variables
__Expected behavior:__
Assumed that since
* the variable structure includes orgId
* query variables would refer to buckets specific to the organization
```
{id: "0518e92b53623000", orgID: "b772d84752daf340", name: "Felix", description: "", selected: null,…}
```
... that variables would be visible _per organization_.
__Actual behavior:__
I'm seeing variables created in one organization visible in another.
Question: Is this by design or is this an issue?
I can see a case for having variables visible across organizations, but this raises possible security and stability issues.
__Screencast__

__Environment info:__
* System info: Run `uname -srm` and copy the output here
```
Linux 4.15.0-74-generic x86_64
```
* InfluxDB version: Run `influxd version` and copy the output here
Detected in nightly build
```
ts=2020-01-17T08:47:35.390174Z lvl=info msg="Welcome to InfluxDB" log_id=0KOfpHsW000 version=nightly commit=3fa552430 build_date=2020-01-17T08:47:35Z
```
* Other relevant environment details: Container runtime, disk info, etc
browser: __Chrome 79__
__Config:__
Copy any non-default config values here or attach the full config as a gist or file.
started with end to end testing enabled
```
--e2e-testing=true
```
Contributor guide
Research direction
Start by reproducing the behavior through the GUI: create two organizations, add variables in the first, and inspect variables after switching to the second. Compare the observed organization scoping with the variable orgID shown in the report, then determine whether the completed fix should isolate variables per organization and verify the behavior with an appropriate regression test.
Written by the indexing model from the issue text.
Assessment
- Domain
- authorization, databases, frontend
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100