search

confluentinc / cp-docker-images

[DEPRECATED] Docker images for Confluent Platform.
Apache License 2.0
1.14k stars 704 forks source link

control-center authentication - Restricted user allowed to edit/start/pause/delete connector #791

Open flowms-peter opened 5 years ago

flowms-peter commented 5 years ago

With login.properties set as user: userpwd,Administrators readonlyuser: ropassword,Restricted disallowed: no_access

and control-center CONTROL_CENTER_REST_AUTHENTICATION_METHOD: 'BASIC' CONTROL_CENTER_REST_AUTHENTICATION_REALM: 'c3' CONTROL_CENTER_REST_AUTHENTICATION_ROLES: 'Administrators,Restricted' CONTROL_CENTER_AUTH_RESTRICTED_ROLES: 'Restricted' CONTROL_CENTER_OPTS: "-Djava.security.auth.login.config=/tmp/confluent/propertyfile.jaas"

Logging in with readonlyuser greys out most "edit" functionality, but in connectors, still allows to edit, pause, start and delete connectors.

In restricted mode it should not allow these functions.