Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-18751

need cleanup policy permissions to view UI repository list

    Details

    • Story Points:
      2

      Description

      I am using OSS nexus-3.14.0-04 version where I have created a user and gave admin privileges, as in the screen shot, to create repositories alone. When I logged in as that user and whenever I navigate to admin repositories page, Danger alert box with 'User is not permitted: nexus:repository-admin' message is getting displayed. If I give full admin privileges like nx-repository-admin-*, then the message is not appearing but for my use I cannot give full admin privileges.

      What should I do to get rid of the alert message or is it a bug in nexus-3.14?

      Thanks in advance.

      Cause

      Related to cleanup policies.

      2018-12-28 11:41:22,242+0530 ERROR [pool-26-thread-5]  crt org.sonatype.nexus.extdirect.internal.ExtDirectServlet - Failed to invoke action method: cleanup_CleanupPolicy.readByFormat, java-method: org.sonatype.nexus.cleanup.storage.CleanupPolicyComponent.readByFormat
      org.apache.shiro.authz.AuthorizationException: User is not permitted: nexus:repository-admin
              at org.sonatype.nexus.security.authz.ExceptionCatchingModularRealmAuthorizer.checkPermission(ExceptionCatchingModularRealmAuthorizer.java:66)
      
      
      Caused by: org.apache.shiro.authz.AuthorizationException: Not authorized to invoke method: public java.util.List org.sonatype.nexus.cleanup.storage.CleanupPolicyComponent.readByFormat(org.sonatype.nexus.extdirect.model.StoreLoadParameters)
              at org.apache.shiro.authz.aop.AuthorizingAnnotationMethodInterceptor.assertAuthorized(AuthorizingAnnotationMethodInterceptor.java:90)
              ... 25 common frames omitted
      

      Expected

      Should not need cleanup policy permissions to view the repository list.

        Attachments

        1. createrepo_role.png
          309 kB
          Arun
        2. nexus3_alert.png
          185 kB
          Arun
        3. nexus3.log
          4 kB
          Arun

          Issue Links

            Activity

              People

              Assignee:
              moncef Moncef Ben-Soula
              Reporter:
              arun25 Arun
              Last Updated By:
              Joe Tom Joe Tom
              Team:
              NXRM - Cypher
              Votes:
              2 Vote for this issue
              Watchers:
              8 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Date of First Response:

                  tigCommentSecurity.panel-title