Details
-
Bug
-
Resolution: Fixed
-
Medium
-
3.14.0
-
2
Description
I am using OSS nexus-3.14.0-04 version where I have created a user and gave admin privileges, as in the screen shot, to create repositories alone. When I logged in as that user and whenever I navigate to admin repositories page, Danger alert box with 'User is not permitted: nexus:repository-admin' message is getting displayed. If I give full admin privileges like nx-repository-admin-*, then the message is not appearing but for my use I cannot give full admin privileges.
What should I do to get rid of the alert message or is it a bug in nexus-3.14?
Thanks in advance.
Cause
Related to cleanup policies.
2018-12-28 11:41:22,242+0530 ERROR [pool-26-thread-5] crt org.sonatype.nexus.extdirect.internal.ExtDirectServlet - Failed to invoke action method: cleanup_CleanupPolicy.readByFormat, java-method: org.sonatype.nexus.cleanup.storage.CleanupPolicyComponent.readByFormat
org.apache.shiro.authz.AuthorizationException: User is not permitted: nexus:repository-admin
at org.sonatype.nexus.security.authz.ExceptionCatchingModularRealmAuthorizer.checkPermission(ExceptionCatchingModularRealmAuthorizer.java:66)
Caused by: org.apache.shiro.authz.AuthorizationException: Not authorized to invoke method: public java.util.List org.sonatype.nexus.cleanup.storage.CleanupPolicyComponent.readByFormat(org.sonatype.nexus.extdirect.model.StoreLoadParameters)
at org.apache.shiro.authz.aop.AuthorizingAnnotationMethodInterceptor.assertAuthorized(AuthorizingAnnotationMethodInterceptor.java:90)
... 25 common frames omitted
Expected
Should not need cleanup policy permissions to view the repository list.
Attachments
Issue Links
- fixes
-
-
- Closed
-
- relates
-
-
- Closed
-
