superuser unable to show status of users models
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Canonical Juju |
Fix Released
|
High
|
Horacio Durán |
Bug Description
As seen at
http://
Given a superuser admin who creates a user, if that user add-models a model the admin is able to list the model (using juju list-models) but is unable to show the status of the model (get: ERROR permission denied (unauthorized access)).
To reproduce:
# As admin
$ juju bootstrap --constraints mem=2G lxd/localhost listmodelstest
$ juju add-user newuser1 -c listmodelstest
User "newuser1" added
Please send this command to newuser1:
... snip ...
$ juju grant newuser1 addmodel -c listmodelstest
# Now as new user
$ JUJU_DATA=
$ JUJU_DATA=
$ JUJU_DATA=
Controller: listmodelstest
Model Cloud/Region Status Access Last connection
mysweetmodel* localhost/localhost available admin never connected
# Back as admin
$ juju list-models -c listmodelstest
Controller: listmodelstest
Model Cloud/Region Status Machines Cores Access Last connection
controller localhost/localhost available 1 - admin just now
default localhost/localhost available 0 - admin 11 hours ago
newuser1/
$ juju show-status -m listmodelstest:
ERROR permission denied (unauthorized access)
Changed in juju: | |
assignee: | nobody → Horacio Durán (hduran-8) |
Changed in juju: | |
importance: | Critical → High |
status: | New → Triaged |
tags: | added: status |
tags: |
added: ci removed: regression |
Changed in juju: | |
milestone: | 2.1-rc1 → none |
Changed in juju: | |
milestone: | none → 2.1.0 |
description: | updated |
Changed in juju: | |
status: | Triaged → Fix Committed |
Changed in juju: | |
status: | Fix Committed → Fix Released |
I proposed https:/ /github. com/juju/ juju/pull/ 6967