[COMPASS-3180] Read-only users on M0 Atlas clusters receive error connecting with Compass Created: 04/Oct/18  Updated: 03/Oct/23  Resolved: 27/Jan/20

Status: Closed
Project: Compass
Component/s: Connectivity
Affects Version/s: 1.16.0, 1.16.0-beta.7, 1.16.1
Fix Version/s: None

Type: Bug Priority: Minor - P4
Reporter: Brian Blevins Assignee: Unassigned
Resolution: Cannot Reproduce Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Attachments: PNG File Connect_authorization_error_Compass_1_16_1.png     PNG File image-2018-10-04-11-37-36-490.png     PNG File image-2018-10-04-11-38-03-888.png    
Issue Links:
Depends
Related
related to COMPASS-3494 Allowed to connect without auth Closed
related to COMPASS-3173 collection-level read-only users only... Closed
is related to COMPASS-3035 Spike reducing required permissions Closed
Sprint: Iteration Sriracha

 Description   

 

https://jira.mongodb.org/browse/COMPASS-3001 allows users with read-only permission on a database or database.collection to use Compass to connect and review documents in the permitted namespaces.

 

However, this does not work for users on M0 Atlas clusters.

 

When I create a user with read access to a single database in an Atlas free tier, that user is unable to connect with Compass 1.16.0-beta.7 on MacOSX.  The error messsage I'm seeing is:

An error occurred while loading navigation: user is not allowed to do action [listDatabases] on [admin.]

which is show in the attached screenshot:  image-2018-10-04-11-38-03-888.png

 

 



 Comments   
Comment by Massimiliano Marcon [ 27/Jan/20 ]

Looks like this has been gone for a while.

Comment by Durran Jordan [ 03/Dec/18 ]

Have fixed the listDatabases error but the M0 usersInfo result is not as granular as the regular command and Compass cannot tell what collection the user has access to, since we are never told.

Talked with Max and will deprioritise this for now until we find a better solution of allowing the user to enter the collection they have access to.

Comment by Githook User [ 03/Dec/18 ]

Author:

{'name': 'Durran Jordan', 'email': 'durran@gmail.com', 'username': 'durran'}

Message: COMPASS-3180: Handle M0 Authorization errors
Branch: master
https://github.com/10gen/compass/commit/ebefa973c27c8f2b479b67f81d41fa906bd3a75a

Comment by Githook User [ 03/Dec/18 ]

Author:

{'name': 'Durran Jordan', 'email': 'durran@gmail.com', 'username': 'durran'}

Message: COMPASS-3180: Handle M0 Authorization errors
Branch: COMPASS-3180
https://github.com/10gen/compass/commit/c2053445837b249477966ecc6e3b42217a4d68c4

Comment by Githook User [ 03/Dec/18 ]

Author:

{'name': 'Durran Jordan', 'email': 'durran@gmail.com', 'username': 'durran'}

Message: COMPASS-3180: Handle M0 Authorization errors
Branch: master
https://github.com/mongodb-js/data-service/commit/4858be12d89c934762d73adcd57b0b588f036d54

Generated at Wed Feb 07 22:32:24 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.