Listing artifacts is not allowed anymore as non-admin
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 598
- Forks
- 168
- Avg merge
- 1d 4h
- Merged PRs (30d)
- 86
Description
Version
3.64
Describe the bug
When uploading a large file with the procedure stated here https://pulpproject.org/pulpcore/docs/user/guides/upload-publish/?h=chunked#chunked-uploads you will end up with an artifact that is not associated with any repository yet.
The last step where you do a commit will produce a reference to an artifact task.
My current workflow is to verify that the artifact task has completed.
Next step is to list the artifact based on the sha256, just to verify that it is really there (maybe too much paranoia), but that step is no longer allowed. I think it was before change https://github.com/pulp/pulpcore/pull/5669
When artifact is present, i associate it with a repository based on the artifact href obtained from the previous step
I can't find any permission to still allow users to list artifacts (https://pulpproject.org/pulpcore/restapi/#tag/Artifacts/operation/artifacts_list)
To Reproduce
List artifacts as non-admin user
Expected behavior
Allow user to still list artifacts based on rbac
Additional context
None
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the Artifacts list REST operation and compare the permission change in pull request 5669. Reproduce listing artifacts as a non-admin user, then verify that the intended RBAC-based artifact lookup works while preserving the authorization rules introduced by that change.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- api, authorization
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100