You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@couchdb.apache.org by GitBox <gi...@apache.org> on 2018/08/13 15:00:51 UTC

[GitHub] greenais opened a new issue #1556: _users: status 403 "You are not allowed to access this db."

greenais opened a new issue #1556: _users:  status 403 "You are not allowed to access this db."
URL: https://github.com/apache/couchdb/issues/1556
 
 
   I'm not sure if it's expected behaviour but I didn't find any traces of such requiremet in docs/issues. 
   
   _users db created, several users in it with roles "stranger" and "registered",
   require_valid_user = true in config.
   In Fauxton in _users I can see default _admin in Member Roles.
   
   ## Current Behavior
   Once I fire GET {{server}}:{{port}}/_users/org.couchdb.user:john (with john's credentials, off cause) 
   I've got 
   error: 'forbidden',
   reason: 'You are not allowed to access this db.',
   status: 403,
   
   When I add john's "registered" role to Member Roles in _users db - everything works as expected, I can get doc.
   
   
   ## Expected Behavior
   Shouldn't user get security doc he owned (according to docs) without specifying in _users Member Roles his role?
   
   
   ## Your Environment
   <!--- Include as many relevant details about the environment you experienced the bug in -->
   * Version used: 2.1.1
   * Postman 6.2.4
   * Windows 8.1
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services