Internal Server Error when posting a permission while being authenticated with another permission
@deepjyoti30 已经在做这个了。
开始于 2023年1月23日。
评估
这个 Issue 还没有评估数据。
描述
What version of ReactiveSearch API are you using ?
8.9.0
What issue did you run into?
- Create a permission (API Credentials) with a read-write access to the "permissions" category.
- Use the credentials of the just created permission in HTTP Basic Auth to send a
POST /_permissionrequest, trying to create another permission object.
What did you expect to see?
A created permission.
What did you see instead?
Internal server error saying "*user.User" not found in request context.
From what I was able to find in the code as a non-Go developer, looks like the user is being read from the context right here for the only purpose to check if it's admin or not, which decides the permission's default settings. And if the user not found, the error is being thrown.
Looking at the auth middleware I can see it being assigned only when the request is authenticated on behalf of a user. When you use API Credentials to authenticate the request, the permission is being assigned to the context instead.
I haven't found anywhere in the documentation that you can only create permissions when authenticated as a user. So I think it's a bug.
Would it be possible to fix it by assuming the user is not an admin if the request is authenticated with the API Credentials?
- 主要语言
- Go
- 星标
- 212
- 派生
- 30
- 平均合并
- 13 分钟
- 30 天内合并 PR
- 2
环境准备
- 提供 Dockerfile 或 Docker Compose 文件
- 有 Pull Request 模板
- 没有贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
appbaseio/reactivesearch-api 的其他 Issue
-
AI Answer stops working on 23 October: the gpt-3.5-turbo default shuts down, and its replacement rejects max_tokens可能已有人在做 @Lakshya-0910 于 1 天前认领。 未关闭
难度 2/5 1-3 小时 新手友好度 82/100
appbaseio/reactivesearch-api#402 · 2 条评论 ·
-
难度 3/5 1-2 天 新手友好度 30/100
appbaseio/reactivesearch-api#382 ·
-
难度 3/5 1-2 天 新手友好度 35/100
appbaseio/reactivesearch-api#377 ·
-
难度 4/5 3-5 天 新手友好度 25/100
appbaseio/reactivesearch-api#151 · 4 条评论 ·
-
Add test cases for the users plugin可能重新可做 @harsh-2711 于 2585 天前认领，目前没有进行中的 PR。 未关闭
appbaseio/reactivesearch-api#19 · 1 条评论 · 已指派 1 人 ·
查看 appbaseio/reactivesearch-api 的全部 Issue
相似的 Issue
-
status:approved type:bug
难度 2/5 1-3 小时 新手友好度 85/100
Gentleman-Programming/gentle-ai#5326 ·
维护者通常 1 天内回复
-
area/testing kind/cleanup priority/backlog triage/accepted
难度 2/5 1-3 小时 新手友好度 78/100
lexfrei/cloudflare-tunnel-gateway-controller#999 ·
维护者通常 1 天内回复
-
automation models
难度 2/5 1-3 小时 新手友好度 75/100
维护者通常 1 天内回复
-
bug
难度 2/5 1-3 小时 新手友好度 72/100
维护者通常 1 天内回复
-
Can the search results with Year Released be in enclosed in the ( ) like Movie/TV(Year Released)未关闭
难度 2/5 1-3 小时 新手友好度 85/100
Dhairya3391/kari#32 ·