seqeralabs / tower-cli

Nextflow Tower CLI tool
Apache License 2.0
43 stars 9 forks source link

View users unable to use 'tw runs view -i [id]' #371

Closed markpanganiban closed 11 months ago

markpanganiban commented 11 months ago

Seeing the following error when using tw runs view -i.

tower-backend-1      | Dec-11 21:43:44.839 [io-executor-thread-3] 104.28.208.123 DEBUG i.s.t.s.r.AbstractAuthRequiredInterceptor - Operation 'DescribeLaunch' rejected
tower-backend-1      | Request URI: /launch/3pUuGa7dlgQmXb7EoktpKd?workspaceId=40141464937493
tower-backend-1      | Request data: {authenticatedUserId=3, roles=[user], launchId=3pUuGa7dlgQmXb7EoktpKd, workspaceId=40141464937493, sourceWorkspaceId=null}
tower-backend-1      | User scopes: [usr:user, wsp:view]
tower-backend-1      | Context: {scope="usr:user", checkers=[LaunchBelongsToUserChecker], result="Rejected: Launch belongs to a workspace"}
tower-backend-1      | Context: {scope="wsp:owner", checkers=[LaunchBelongsToWorkspaceChecker], result="Rejected: Scope 'wsp:owner' not found among user scopes"}
tower-backend-1      | Context: {scope="wsp:admin", checkers=[LaunchBelongsToWorkspaceChecker], result="Rejected: Scope 'wsp:admin' not found among user scopes"}
tower-backend-1      | Context: {scope="wsp:maintain", checkers=[LaunchBelongsToWorkspaceChecker], result="Rejected: Scope 'wsp:maintain' not found among user scopes"}
tower-backend-1      | Context: {scope="wsp:launch", checkers=[LaunchBelongsToWorkspaceChecker], result="Rejected: Scope 'wsp:launch' not found among user scopes"}
tower-backend-1      | Dec-11 21:43:44.843 [io-executor-thread-9] 104.28.208.123 WARN  i.s.t.c.GlobalErrorController - Operation 'DescribeLaunch' not allowed to user 3 with roles usr:user,wsp:view
mark@ubuntu:~/scripts/tw$ ./tw runs view -i 37iBJYsvHoamxx

 ERROR: Pipeline run '37iBJYsvHoamxx' not found at [longs / department] workspace

Upgrading the permission to Launch enables the use of the command.

markpanganiban commented 11 months ago

Expected Behavior: User with view roles can view runs using tower-cli Version: 0.9.0 Steps to reproduce: