[GitHub] [trafficcontrol] shamrickus opened a new issue #6603: Missing Permissions in DB seed/migration

[GitBox <gi...@apache.org>]

shamrickus opened a new issue #6603:
URL: https://github.com/apache/trafficcontrol/issues/6603


   <!--
   ************ STOP!! ************
   If this issue identifies a security vulnerability, DO NOT submit it! Instead, contact
   the Apache Traffic Control Security Team at security@trafficcontrol.apache.org and follow the
   guidelines at https://apache.org/security regarding vulnerability disclosure.
   
   - For *SUPPORT QUESTIONS*, use the #traffic-control channel on the ASF slack (https://s.apache.org/tc-slack-request)
   or the Traffic Control Users mailing list (send an email to users-subscribe@trafficcontrol.apache.org to subscribe).
   - Before submitting, please **SEARCH GITHUB** for a similar issue or PR
       * https://github.com/apache/trafficcontrol/issues
       * https://github.com/apache/trafficcontrol/pulls
   -->
   
   <!-- Do not submit security vulnerabilities or support requests here - see above -->
   ## This Bug Report affects these Traffic Control components:
   <!-- delete all those that don't apply -->
   - Traffic Ops
   
   ## Current behavior:
   Currently the `DNS-SEC:READ` and `DNS-SEC:DELETE` permissions are not seeded in the db. As a result non admin users will never have the permissions to query `GET/DELETE: cdns/name/{name}/dnsseckeys`
   <!-- Describe how the bug happens -->
   
   
   ## Expected behavior:
   Those permissions should be created and appropriately assigned to the correct existing roles.
   <!-- Describe what the behavior would be without the bug -->
   
   
   ## Steps to reproduce:
   Create a user whose `role` has the following `role_capabiltity`: `CDN:READ, DELIVERY-SERVICE:READ, DELIVERY-SERVICE:UPDATE, CDN:UPDATE` and see that the user is not able to query the `dnsseckeys` endpoints.
   <!-- If the current behavior is a bug, please provide the *STEPS TO REPRODUCE* and
   include the applicable TC version.
   -->
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@trafficcontrol.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [trafficcontrol] shamrickus closed issue #6603: Missing Permissions in DB seed/migration

[GitBox <gi...@apache.org>]

shamrickus closed issue #6603:
URL: https://github.com/apache/trafficcontrol/issues/6603


   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@trafficcontrol.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org