Skip to content

Search results do not acknowledge workspace roles #66

@scruwys

Description

@scruwys

Bug Report

Search results currently do not honor role-based permissions, such as the Owner role.

Have you read the Contributing Guidelines on issues?

Yes

Actual Behavior

If John Doe is an owner of a workspace, he would have access to the Postgres datastore. If object-level permissions are enabled and he is not explicitly granted the view_datastore permission, the Postgres datastore will not appear in the search results.

This should be a pretty quick fix in the elastic_backend.py if we just allow all datastores within a workspace if the requesting user is an owner.

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions