milvus-io / milvus

A cloud-native vector database, storage for next generation AI applications
https://milvus.io
Apache License 2.0
31.04k stars 2.95k forks source link

[Bug]: Restful API getImportJobProcess will be deny by RBAC #38092

Open weiliu1031 opened 1 day ago

weiliu1031 commented 1 day ago

Is there an existing issue for this?

Environment

- Milvus version: 2.4 and 2.5 and master 
- Deployment mode(standalone or cluster):
- MQ type(rocksmq, pulsar or kafka):    
- SDK version(e.g. pymilvus v2.0.0rc2):
- OS(Ubuntu or CentOS): 
- CPU/Memory: 
- GPU: 
- Others:

Current Behavior

the Restful API getImportJobProcess mock a GetImportProgressAuthPlaceholder request to check auth, but the GetImportProgressAuthPlaceholder use a wrong definition, which define as a Collection Privilege but doesn't pass the collection_name in request, which cause the check auth will always failed for normal user. image

image

Expected Behavior

No response

Steps To Reproduce

No response

Milvus Log

No response

Anything else?

No response

weiliu1031 commented 1 day ago

/assign @bigsheeper