influxdata / influxdata/influxdb
InfluxDB V2 cloud: 2 admin users can't see each others tokens
Open
kind/feature-request
team/compute
team/ui
- Dominant language
- Rust
- Stars
- 31.7k
- Forks
- 3.7k
- Avg merge
- 13h 37m
- Merged PRs (30d)
- 8
Description
__Steps to reproduce:__
List the minimal actions needed to reproduce the behavior.
1. Create 2 admin users
2. Let each user create a token
3. Let each user refresh the token overview
__Expected behavior:__
See all tokens
__Actual behavior:__
I can only see the tokens I created myself, the other user can only see tokens he created
__Environment info:__
* InfluxDB v2.0 cloud
__Config:__
Contributor guide
Research direction
Start with the three reproduction steps in issue #18155 and inspect the token overview and admin-user authorization entry points. Reproduce the behavior in InfluxDB v2 Cloud, then verify that two admin users can see all tokens while preserving appropriate access restrictions.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- authentication, authorization, cloud
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100