search

Graylog2 / graylog-plugin-pipeline-processor

[DEPRECATED] Graylog Pipeline Message Processor Plugins
https://www.graylog.org/
GNU General Public License v3.0
20 stars 15 forks source link

Problem with read permissions per pipeline connection #251

Open valihanov opened 5 years ago

valihanov commented 5 years ago

Problem description

When I add read permission for particular Pipeline connection to role by REST API, user with that role isn't able to manage this Pipelines. Page http://:9000/system/pipelines isn't available. User get error:

Could not retrieve pipeline connections Fetching pipeline connections failed with status: cannot GET http://graylog:9000/api/plugins/org.graylog.plugins.pipelineprocessor/system/pipelines/connections (403)

Steps to reproduce the problem

  1. Create Stream, Pipeline. Connect them.
  2. Create role with full permission for created Stream, Pipeline and read permission for their Pipeline connection, but without permission to read all Pipeline rules. Created role must contain line like this in the permission list:

    "pipeline_connection:read:",

And this role shouldn't contain line:

"pipeline_connection:read",

  1. Add user to created role
  2. Try to open page http://:9000/system/pipelines by created user

Environment