influxdata / influxdata/influxdb

Unable to give secret permissions to non-admin users

Open
#21,603 1 comment 2 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
31.7k
Forks
3.7k
Avg merge
13h 37m
Merged PRs (30d)
8

Description

I'm unable to give read/write secret permissions to authorizations for users via the [auth CLI](https://docs.influxdata.com/influxdb/v2.0/reference/cli/influx/auth/create/) because there is no flag for doing so. However, it appears there is a permission for this under the hood when looking at the allowed permissions for an admin user in the UI. The result is that I can only use secrets for queries that are using the admin token directly (not ideal for reporting/analytics coming from something like Grafana).

Am I missing something or is there another way to give secret read access to different non-admin users?

Contributor guide

Open the contributing guide

Research direction

Start with the auth CLI's authorization-create entry point and the linked auth CLI documentation, then compare its available permissions with those shown for an admin user in the UI. Done means a non-admin authorization can receive secret read/write access without using an admin token, with the CLI behavior and documentation matching.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
authorization, cli, database
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.