You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@iotdb.apache.org by GitBox <gi...@apache.org> on 2021/07/07 14:14:33 UTC

[GitHub] [iotdb] caszhou opened a new issue #3527: 602 when querying a non-existent time series by using a non-root user

caszhou opened a new issue #3527:
URL: https://github.com/apache/iotdb/issues/3527


   **Describe the bug**
   A clear and concise description of what the bug is.
   
   602 when querying a non-existent time series by using a non-root user
   
   **To Reproduce**
   Steps to reproduce the behavior:
   1. Go to '...'
   2. Click on '....'
   3. Scroll down to '....'
   4. See error
   
   **Expected behavior**
   A clear and concise description of what you expected to happen.
   
   **Screenshots**
   If applicable, add screenshots to help explain your problem.
   
   using root:
   ![root](https://user-images.githubusercontent.com/16935178/124774724-9b506300-df70-11eb-85c8-1e2134789fa3.png)
   
   using non-root:
   ![non-root](https://user-images.githubusercontent.com/16935178/124774740-a0151700-df70-11eb-88e2-a40cc11a9c3f.png)
   
   **Desktop (please complete the following information):**
    - OS: [e.g. iOS] masos
    - Browser [e.g. chrome, safari]
    - Version [e.g. 22] 0.12.1
   
   
   
   **Additional context**
   Add any other context about the problem here.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: reviews-unsubscribe@iotdb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [iotdb] caszhou commented on issue #3527: 602 when querying a non-existent time series by using a non-root user

Posted by GitBox <gi...@apache.org>.
caszhou commented on issue #3527:
URL: https://github.com/apache/iotdb/issues/3527#issuecomment-875644769


   After optimizing the physical plan, can the original path be recorded for auth?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: reviews-unsubscribe@iotdb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [iotdb] HTHou commented on issue #3527: 602 when querying a non-existent time series by using a non-root user

Posted by GitBox <gi...@apache.org>.
HTHou commented on issue #3527:
URL: https://github.com/apache/iotdb/issues/3527#issuecomment-876082730


   Run `LIST ROLE` using root account and check if the non-root user has the QUERY privilege?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: reviews-unsubscribe@iotdb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [iotdb] caszhou commented on issue #3527: 602 when querying a non-existent time series by using a non-root user

Posted by GitBox <gi...@apache.org>.
caszhou commented on issue #3527:
URL: https://github.com/apache/iotdb/issues/3527#issuecomment-876142366


   Pretty sure it has permissions


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: reviews-unsubscribe@iotdb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [iotdb] caszhou commented on issue #3527: 602 when querying a non-existent time series by using a non-root user

Posted by GitBox <gi...@apache.org>.
caszhou commented on issue #3527:
URL: https://github.com/apache/iotdb/issues/3527#issuecomment-876142079


   > Run `LIST ROLE` using root account and check if the non-root user has the QUERY privilege?
   
   ![role](https://user-images.githubusercontent.com/16935178/124867826-61737100-dff1-11eb-9a6a-bfe7f09953db.png)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: reviews-unsubscribe@iotdb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [iotdb] caszhou commented on issue #3527: 602 when querying a non-existent time series by using a non-root user

Posted by GitBox <gi...@apache.org>.
caszhou commented on issue #3527:
URL: https://github.com/apache/iotdb/issues/3527#issuecomment-875643596


   Debug server-side code, find that the path is optimized, then check permissions will using root path.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: reviews-unsubscribe@iotdb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [iotdb] caszhou commented on issue #3527: 602 when querying a non-existent time series by using a non-root user

Posted by GitBox <gi...@apache.org>.
caszhou commented on issue #3527:
URL: https://github.com/apache/iotdb/issues/3527#issuecomment-876153597


   After debug the server code, I've adjusted the permissions on role on prod env, as blow,
   
   grant role ivc-pdc privileges 'CREATE_TIMESERIES','INSERT_TIMESERIES','READ_TIMESERIES','DELETE_TIMESERIES' on root;
   
   It works, but the permissions for storage groups between different applications are ineffective.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: reviews-unsubscribe@iotdb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org