influxdata / influxdata/influxdb
General user with read privilege gets different measurements with admin user
Open
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 31.7k
- Forks
- 3.7k
- Avg merge
- 13h 37m
- Merged PRs (30d)
- 8
Description
Step to reproduce:
Step1: Load the attached data
Step2: Create user with read privilege on database
create user abc with password 'abc'
grant read on "business_monitor" to abc
Step3: Login with created user
Step4: Show measurements
If login with admin user or use domain sock will get different result
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No source file or test is named. Start by loading the reported data and reproducing the measurement listing with a read-only user and an admin or domain-socket connection; trace the authorization and measurement-listing entry points that differ. Done means equivalent users see the same measurements when they have the same effective read privilege.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- sql
- Domain
- authorization, databases
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100