yugabyte/yugabyte-db

[PLATFORM]: Disable "Pause Universe" operation for Read-Only users

Open

#9,261 opened on Jul 12, 2021

View on GitHub
 (4 comments) (0 reactions) (1 assignee)C (1,003 forks)batch import
QAarea/platformarea/uigood first issue

Repository metrics

Stars
 (8,229 stars)
PR merge metrics
 (Avg merge 17d 21h) (92 merged PRs in 30d)

Description

"Pause Universe" operation is enable for Read-Only user. When Read-Only user tries to pause the universe, user gets logged out. Found on Build #2.7.2.0-b176

Steps to Reproduce

  1. Log in with a Read-Only user
  2. Perform pause universe operation.

Contributor guide

Research direction
Investigate the 'Pause Universe' operation in the UI codebase; find where permissions are checked and add a role check to disable for read only users. Trace the API endpoint and its authorization logic.
Tech stack
None
Domain
backend
Issue type
Bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
GitRBAC knowledge
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
75