Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug]: Create a read-only user in the MI dashboard #3557

Open
tdkmalan90 opened this issue Aug 21, 2024 · 0 comments · May be fixed by wso2/product-mi-tooling#432 or #3759
Open

[Bug]: Create a read-only user in the MI dashboard #3557

tdkmalan90 opened this issue Aug 21, 2024 · 0 comments · May be fixed by wso2/product-mi-tooling#432 or #3759
Labels

Comments

@tdkmalan90
Copy link

Description

Non-admin users in the wso2 mi dashboard can enable and disable runtime artifacts like proxy services, message processors, etc. This behavior should be enabled only for admin users.

Product : wso2mi-4.2.0

Steps to Reproduce

Created an RDBMS user store.
[internal_apis.file_user_store]
enable = false

[user_store]
class = "org.wso2.micro.integrator.security.user.core.jdbc.JDBCUserStoreManager"
type = "database"

[[datasource]]
id = "WSO2CarbonDB"
url= "jdbc:mysql://localhost:3306/userdb"
username="chandima"
password="Chandima"
driver="com.mysql.jdbc.Driver"
pool_options.maxActive=50
pool_options.maxWait = 60000
pool_options.testOnBorrow = true

[[datasource]]
id = "WSO2_TRANSACTION_DB"
url= "jdbc:mysql://localhost:3306/transactiondb"
username="chandima"
password="Chandima"
driver="com.mysql.jdbc.Driver"
pool_options.maxActive=50
pool_options.maxWait = 60000
pool_options.testOnBorrow = true

Created a new role (ReadOnly) and a user (test), and assigned that role to the new user (test).
Created some proxies and Synapse configurations in MI.
Logged into the MI dashboard using the non-admin user and went to the proxies section. Refer to the screenshot: you will see the disable and enable buttons. Disable the proxy and invoke the proxy using the test user (non-admin). The proxy will be disabled, and it will return a 500 error when invoked.

Affected Version(s)

wso2mi-4.2.0

OS, DB, other environment details and versions

No response

Related issue(s) (optional)

No response

Suggested label(s) (optional)

No response

Suggested assignee(s) (optional)

No response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
1 participant