Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-8789

blobstores-create privilege gives delete permission

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Cannot Reproduce
    • Affects Version/s: 3.0.0-m4
    • Fix Version/s: 3.0.0-m5
    • Component/s: Security, UI
    • Labels:
      None
    • Environment:
      Chrome MacOSX

      Description

      Checking privileges I noticed that blobstores-create gave delete permission making it indistinguishable (at least from the UI) from blobstores-all.
      No other create permission reviewed gives delete so I'm filing for eval.

      Blobstore is new for NX3 so is not in NX2. I did not eval older NX3 at this time.

      Triage Note: Likely that the UI has the wrong permission.

        Attachments

          Activity

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            jtom Joe Tom
            Last Updated By:
            Peter Lynch Peter Lynch
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                tigCommentSecurity.panel-title