Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug: SuperAdmin could not perform actions over entities #2609

Open
arvindh123 opened this issue Dec 19, 2024 · 1 comment
Open

Bug: SuperAdmin could not perform actions over entities #2609

arvindh123 opened this issue Dec 19, 2024 · 1 comment
Assignees
Labels

Comments

@arvindh123
Copy link
Contributor

What were you trying to achieve?

Trying to perform some actions as super admin

What are the expected results?

Perform action without authorization error

What are the received results?

I could not preform the actions , Not Authorized

Steps To Reproduce

No response

In what environment did you encounter the issue?

Docker

Additional information you deem important

It is happened due to removal of domain login and the polici

At present in spicedb we have userid prefixed with domain
Example : 0c883527-8316-4711-b7e9-ded734bf96ed_84319f2a-046a-44d7-b24c-06b15d38ac74
Here 0c883527-8316-4711-b7e9-ded734bf96ed is domain ID,
we should store without domain id prefix.

We should remove the EncodeDomainUserID at

resp.DomainUserID = auth.EncodeDomainUserID(domain, resp.UserID)

image

And then remove DomainUserID from authn.Session
at

DomainUserID string

Then we need to perform all authorization with UserID

This creates another problem of listing domain specific entities directly from spicedb

@arvindh123 arvindh123 added the bug label Dec 19, 2024
@arvindh123 arvindh123 self-assigned this Dec 19, 2024
@arvindh123
Copy link
Contributor Author

arvindh123 commented Dec 20, 2024

The proposed solution is doable only after implementing clients and channels listing without depending on SpiceDB #2606 #2605

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant