Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

not found the privilege name #734

Open
abdsyafiq opened this issue Dec 27, 2024 · 4 comments
Open

not found the privilege name #734

abdsyafiq opened this issue Dec 27, 2024 · 4 comments

Comments

@abdsyafiq
Copy link

abdsyafiq commented Dec 27, 2024

Currently, I am just starting to use Milvus and Attu, and I'm trying to explore and understand the configurations. The versions I am using are:

  • Milvus: v2.5.1/milvus-standalone-docker-compose-gpu.yml
  • Attu: zilliz/attu:v2.5.0
  • Configurations: v2.5.1/configs/milvus.yaml

In the configuration, there are Privileges:

  • ListPrivilegeGroups
  • UpdateResourceGroups
  • BackupRBAC
  • RestoreRBAC
  • etc. (I haven't checked them one by one)

However, when trying to create a role with Attu, none of the privileges mentioned above appear. Then, in the logs, an warning appears like this:
[WARN] [rootcoord/step_executor.go:75] ["failed to execute step, wait for reschedule"] [error="not found the privilege name"] [errorVerbose="not found the privilege name\n(1) attached stack trace\n -- stack trace:\n | ...... not found the privilege name\nError types: (1) *withstack.withStack (2) *errutil.leafError"] [step="operate privilege cache"]

Please assist with checking and troubleshooting this issue, if this is an issue.

Thank you.

@shanghaikid
Copy link
Collaborator

Attu is not rbac ready yet, I think there are some bugs related to RBAC in the version. I will try solve them all in the next release, thanks.

@abdsyafiq
Copy link
Author

abdsyafiq commented Dec 27, 2024

Thank you for your response, @shanghaikid ! I appreciate it.

I think one more thing, though I’m not sure if it's related. I did the following steps:

  1. Connected as the root user.
  2. Created a role with all privileges except * and User Privileges (UpdateUser and SelectUser).
  3. Created a user and assigned the role from step 2.

Then, I tried to connect with the user I created in step 3 (with the assigned privileges). I tested changing the role privileges, and as expected, I couldn’t change them because the user doesn't have the required permissions. However, I noticed that the role assigned to this user was modified, and only a few privileges remained assigned to this role (even though previously, I only excluded the * and User Privileges from the role).

Is this also a bug? Because I think that when the update/change of privileges fails, no privileges should be altered.

The error occurs when I try to change the privileges of the role with the user I created in step 3, because the user doesn't have the required permissions:
image

Before:
image

After:
image

@shanghaikid
Copy link
Collaborator

maybe it's a bug, I need to test it。 I think you'd better to do RBAC via SDK until I fix these problems.

@abdsyafiq
Copy link
Author

I see, alright, I will try with the SDK. Thank you.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants