https://dev.arvados.org/https://dev.arvados.org/favicon.ico?15576888422022-05-18T18:50:49ZArvadosArvados - Bug #19139: Regular users should not be able to create user records; creating a user does not make admin the "owner" of that userhttps://dev.arvados.org/issues/19139?journal_id=1037012022-05-18T18:50:49ZPeter Amstutzpeter.amstutz@curii.com
<ul><li><strong>Description</strong> updated (<a title="View differences" href="/journals/103701/diff?detail_id=100278">diff</a>)</li></ul> Arvados - Bug #19139: Regular users should not be able to create user records; creating a user does not make admin the "owner" of that userhttps://dev.arvados.org/issues/19139?journal_id=1037022022-05-18T18:54:02ZPeter Amstutzpeter.amstutz@curii.com
<ul><li><strong>Target version</strong> changed from <i>2022-05-25 sprint</i> to <i>2022-06-08 sprint</i></li></ul> Arvados - Bug #19139: Regular users should not be able to create user records; creating a user does not make admin the "owner" of that userhttps://dev.arvados.org/issues/19139?journal_id=1037062022-05-18T18:59:22ZPeter Amstutzpeter.amstutz@curii.com
<ul><li><strong>Subject</strong> changed from <i>Regular users should not be able to create user records; creating a user should not "own" that user</i> to <i>Regular users should not be able to create user records; creating a user does not make admin the "owner" of that user</i></li></ul> Arvados - Bug #19139: Regular users should not be able to create user records; creating a user does not make admin the "owner" of that userhttps://dev.arvados.org/issues/19139?journal_id=1038692022-05-24T19:10:04ZPeter Amstutzpeter.amstutz@curii.com
<ul><li><strong>Target version</strong> changed from <i>2022-06-08 sprint</i> to <i>2022-06-22 Sprint</i></li></ul> Arvados - Bug #19139: Regular users should not be able to create user records; creating a user does not make admin the "owner" of that userhttps://dev.arvados.org/issues/19139?journal_id=1042532022-06-08T15:27:51ZPeter Amstutzpeter.amstutz@curii.com
<ul><li><strong>Target version</strong> changed from <i>2022-06-22 Sprint</i> to <i>2022-07-06</i></li></ul> Arvados - Bug #19139: Regular users should not be able to create user records; creating a user does not make admin the "owner" of that userhttps://dev.arvados.org/issues/19139?journal_id=1044732022-06-22T15:33:12ZLucas Di Pentimalucas.dipentima@curii.com
<ul><li><strong>Assigned To</strong> set to <i>Lucas Di Pentima</i></li></ul> Arvados - Bug #19139: Regular users should not be able to create user records; creating a user does not make admin the "owner" of that userhttps://dev.arvados.org/issues/19139?journal_id=1046842022-07-05T21:44:06ZPeter Amstutzpeter.amstutz@curii.com
<ul><li><strong>Target version</strong> changed from <i>2022-07-06</i> to <i>2022-07-20</i></li></ul> Arvados - Bug #19139: Regular users should not be able to create user records; creating a user does not make admin the "owner" of that userhttps://dev.arvados.org/issues/19139?journal_id=1048622022-07-14T13:24:22ZLucas Di Pentimalucas.dipentima@curii.com
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>In Progress</i></li></ul> Arvados - Bug #19139: Regular users should not be able to create user records; creating a user does not make admin the "owner" of that userhttps://dev.arvados.org/issues/19139?journal_id=1048692022-07-14T14:29:34ZLucas Di Pentimalucas.dipentima@curii.com
<ul></ul><p>Updates at <a class="changeset" title="19139: Fixes bug by always setting owner_uuid to the system root user's UUID. Arvados-DCO-1.1-Si..." href="https://dev.arvados.org/projects/arvados/repository/arvados/revisions/70d97b98ddf977505069795ef08236fb439b18e1">70d97b9</a> - branch <code>19139-user-creation-fixes</code><br />Test run: <a class="external" href="https://ci.arvados.org/job/developer-run-tests/3233/"<a href="https://ci.arvados.org/job/developer-run-tests/3233/">developer-run-tests: #3233 <img src="https://ci.arvados.org/buildStatus/icon?job=developer-run-tests&build=3233" alt="" /></a></a><br />WB1 integration re-run: <a class="external" href="https://ci.arvados.org/job/developer-run-tests-apps-workbench-integration/3475/"<a href="https://ci.arvados.org/job/developer-run-tests-apps-workbench-integration/3475/">developer-run-tests-apps-workbench-integration: #3475 <img src="https://ci.arvados.org/buildStatus/icon?job=developer-run-tests-apps-workbench-integration&build=3475" alt="" /></a></a></p>
<ul>
<li>Adds tests, one confirming that already non-admins cannot create users, the other exposing the bug about <code>owner_uuid</code> being assigned to non-system root users.</li>
<li>Fixes the bug by forcing that <code>owner_uuid</code> is always set to <code><a href="https://arvadosapi.com/clsid-tpzed-000000000000000">clsid-tpzed-000000000000000</a></code></li>
</ul> Arvados - Bug #19139: Regular users should not be able to create user records; creating a user does not make admin the "owner" of that userhttps://dev.arvados.org/issues/19139?journal_id=1048712022-07-14T14:41:27ZTom Cleggtom@curii.com
<ul></ul><p>(medium) looks like the code handles this correctly, but still seems worthwhile to also test the case where the client specifies an owner_uuid, and it is ignored / replaced with the root uuid.</p>
<p>Rest LGTM, thanks!</p> Arvados - Bug #19139: Regular users should not be able to create user records; creating a user does not make admin the "owner" of that userhttps://dev.arvados.org/issues/19139?journal_id=1048742022-07-14T14:49:16ZLucas Di Pentimalucas.dipentima@curii.com
<ul></ul><p>Thanks for the suggestion! Added at <a class="changeset" title="19139: Adds test confirming that provided owner_uuid is ignored on create calls Arvados-DCO-1.1-..." href="https://dev.arvados.org/projects/arvados/repository/arvados/revisions/e07a9786ff1fa6e53f4429e301ea866e886eb649">e07a978</a> -- merging to main!</p> Arvados - Bug #19139: Regular users should not be able to create user records; creating a user does not make admin the "owner" of that userhttps://dev.arvados.org/issues/19139?journal_id=1048782022-07-14T21:26:58ZLucas Di Pentimalucas.dipentima@curii.com
<ul><li><strong>Status</strong> changed from <i>In Progress</i> to <i>Resolved</i></li></ul><p>Applied in changeset arvados-private:commit:arvados|e16ee88755436818cbed44dabb784d1d3254d469.</p> Arvados - Bug #19139: Regular users should not be able to create user records; creating a user does not make admin the "owner" of that userhttps://dev.arvados.org/issues/19139?journal_id=1090402022-12-13T15:32:08ZPeter Amstutzpeter.amstutz@curii.com
<ul><li><strong>Release</strong> set to <i>47</i></li></ul>