search

projectkudu / slingshot

This project implements the Deploy To Azure button
http://azure.microsoft.com/blog/2014/11/13/deploy-to-azure-button-for-azure-websites-2/
51 stars 20 forks source link

Cannot load setup page if current sub doesn't have permissions to iterate RGs #45

Open ehamai opened 9 years ago

ehamai commented 9 years ago

See this twitter post: https://twitter.com/oakcool/status/593800861463216128

It's possible that users may hit this issue if they don't own the current subscription, and we try to iterate over their resource groups. This wasn't an issue before because we never used to allow users to choose RGs, though they would have still failed during deploy if they didn't have permissions.

davidebbo commented 9 years ago

Is this an RBAC scenario?

ehamai commented 9 years ago

It seems like it. I need to see if I can reproduce the issue.

ehamai commented 9 years ago

The root cause of this issue is that the users subscription was not properly registered in RDFE. There is an incident logged to correct the entry. In the meantime, I'm wondering if it makes sense to filter out these subs if there are authorization issues. In this users' case it wouldn't help because they only have one subscription and it most cases it would mask a real problem.