influxdata / influxdata/influxdb

Variable visibility across organizations

Open
#16,581 0 comments 0 reactions 0 assignees View on GitHub
area/api area/ui epic/multi-user team/ui wontfix
Dominant language
Rust
Stars
31.7k
Forks
3.7k
Avg merge
13h 37m
Merged PRs (30d)
8

Description

__Steps to reproduce:__
List the minimal actions needed to reproduce the behavior.

1. Onboard to the GUI and then create a second organization
2. Switch to the first organization
3. Create some variables
4. Switch to the second organization
5. View variables

__Expected behavior:__
Assumed that since
* the variable structure includes orgId
* query variables would refer to buckets specific to the organization
```
{id: "0518e92b53623000", orgID: "b772d84752daf340", name: "Felix", description: "", selected: null,…}

```

... that variables would be visible _per organization_.

__Actual behavior:__
I'm seeing variables created in one organization visible in another.

Question: Is this by design or is this an issue?

I can see a case for having variables visible across organizations, but this raises possible security and stability issues.

__Screencast__

![VariablesAcrossOrgs01](https://user-images.githubusercontent.com/25881301/72615352-cab28080-3934-11ea-9093-a7751930fff7.gif)

__Environment info:__

* System info: Run `uname -srm` and copy the output here
```
Linux 4.15.0-74-generic x86_64
```
* InfluxDB version: Run `influxd version` and copy the output here
Detected in nightly build
```
ts=2020-01-17T08:47:35.390174Z lvl=info msg="Welcome to InfluxDB" log_id=0KOfpHsW000 version=nightly commit=3fa552430 build_date=2020-01-17T08:47:35Z
```
* Other relevant environment details: Container runtime, disk info, etc
browser: __Chrome 79__

__Config:__
Copy any non-default config values here or attach the full config as a gist or file.

started with end to end testing enabled

```
--e2e-testing=true
```

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the behavior through the GUI: create two organizations, add variables in the first, and inspect variables after switching to the second. Compare the observed organization scoping with the variable orgID shown in the report, then determine whether the completed fix should isolate variables per organization and verify the behavior with an appropriate regression test.

Written by the indexing model from the issue text.

Assessment

Domain
authorization, databases, frontend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.