Complete
Details
Assignee
Vladimir VinogradenkoVladimir VinogradenkoReporter
Vladimir VinogradenkoVladimir VinogradenkoLabels
Original estimate
Time remaining
0mComponents
Affects versions
Priority
High
Details
Details
Assignee
Vladimir Vinogradenko
Vladimir VinogradenkoReporter
Vladimir Vinogradenko
Vladimir VinogradenkoLabels
Original estimate
Time remaining
0m
Components
Affects versions
Priority
Katalon Platform
Katalon Platform
Katalon Platform
Created October 28, 2024 at 6:55 AM
Updated October 31, 2024 at 10:36 AM
Resolved October 31, 2024 at 10:36 AM
occurred when a non-full-admin user attempted to download the logs of
replication.run
This
replication.run
was called by an internalzettarepl
scheduler and thus is an internally ran job. Non-full-admins can only download the logs of the jobs they started themselves.If we take no action, an attempt of a non-full-admin user to download the logs of an automatically ran replication will show
Only users with full administrative privileges can download internal job logs
.I suppose, the same issue will happen with scheduled cloud syncs and cloud backups (they are started by
root
user through cron+midcli).Proposed solution: mark some jobs as “if user has any of these privileges, they can see this job in
core.get_jobs
and download its logs“. I.e.@job(read_privileges=['REPLICATION_READ'])