[multi-user] Operating without sufficient access produces confusing and/or inconsistent errors
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Canonical Juju |
Triaged
|
Low
|
Unassigned |
Bug Description
When a remote Juju user with read access only attempts to deploy a charm (e.g. 'apache2') the following text is printed:
ERROR storing charm for URL "cs:apache2-26": delegatable macaroon cannot be obtained for public entities
This can be improved.
When the user is granted write access the charm is deployed successfully.
Interestingly, when the read-only user attempts to scale an application (`add-unit`) the messaging is more meaningful:
You do not have permission to add a unit.
You may ask an administrator to grant you access with "juju grant".
ERROR permission denied (unauthorized access)
However, when the user attempts to run an action (`run-action`), remove an application (`remove-
ERROR permission denied (unauthorized access)
When trying to remove a model (`destroy-model`) the error is:
Destroying model
ERROR failed to destroy model "admin/aws-alpha"
ERROR cannot destroy model: permission denied
When trying to remove a controller (`destroy-
ERROR getting controller environ: getting model config from API: permission denied (unauthorized access)
So we might want to be more consistent and direct with all this messaging.
Changed in juju: | |
status: | New → Triaged |
importance: | Undecided → Medium |
milestone: | none → 2.6-beta1 |
Changed in juju: | |
milestone: | 2.6-beta1 → 2.6-beta2 |
Changed in juju: | |
milestone: | 2.6-beta2 → 2.6-rc1 |
Changed in juju: | |
milestone: | 2.6-rc1 → 2.6-rc2 |
Changed in juju: | |
milestone: | 2.6-rc2 → 2.6.1 |
Changed in juju: | |
milestone: | 2.6.1 → 2.6.2 |
Changed in juju: | |
milestone: | 2.6.2 → 2.6.3 |
Changed in juju: | |
milestone: | 2.6.3 → 2.6.4 |
Changed in juju: | |
milestone: | 2.6.4 → 2.6.5 |
Changed in juju: | |
milestone: | 2.6.5 → 2.6.6 |
Changed in juju: | |
milestone: | 2.6.6 → 2.6.7 |
Changed in juju: | |
milestone: | 2.6.7 → 2.7-beta1 |
Changed in juju: | |
milestone: | 2.7-beta1 → 2.7-rc1 |
tags: | added: multi-user |
Changed in juju: | |
milestone: | 2.7-rc1 → none |
See also bug 1571855.