influxdata / influxdata/influxdb
Unable to give secret permissions to non-admin users
- Dominant language
- Rust
- Stars
- 31.7k
- Forks
- 3.7k
- Avg merge
- 13h 37m
- Merged PRs (30d)
- 8
Description
I'm unable to give read/write secret permissions to authorizations for users via the [auth CLI](https://docs.influxdata.com/influxdb/v2.0/reference/cli/influx/auth/create/) because there is no flag for doing so. However, it appears there is a permission for this under the hood when looking at the allowed permissions for an admin user in the UI. The result is that I can only use secrets for queries that are using the admin token directly (not ideal for reporting/analytics coming from something like Grafana).
Am I missing something or is there another way to give secret read access to different non-admin users?
Contributor guide
Research direction
Start with the auth CLI's authorization-create entry point and the linked auth CLI documentation, then compare its available permissions with those shown for an admin user in the UI. Done means a non-admin authorization can receive secret read/write access without using an admin token, with the CLI behavior and documentation matching.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- authorization, cli, database
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100