search

Graylog2 / graylog-plugin-pipeline-processor

[DEPRECATED] Graylog Pipeline Message Processor Plugins
https://www.graylog.org/
GNU General Public License v3.0
20 stars 15 forks source link

Problem with read permissions per pipeline rule #250

Open valihanov opened 5 years ago

valihanov commented 5 years ago

Problem description

When I add read permission for particular Pipeline rule to role by REST API, user with that role isn't able to manage this Pipeline rule. Page http://:9000/system/pipelines/rules isn't available. User get error

Could not retrieve processing rules Fetching rules failed with status: cannot GET http://:9000/api/plugins/org.graylog.plugins.pipelineprocessor/system/pipelines/rule (403)

Steps to reproduce the problem

  1. Make sure you have at least one Pipeline rule
  2. Create role with read permission for one Pipeline rule and without permission to read all Pipeline rules. Created role must contain line like this in the permission list:

    "pipeline_rule:read:",

And this role shouldn't contain line:

"pipeline_rule:read",

  1. Add user to created role
  2. Try to open page http://:9000/system/pipelines/rules by created user

Environment