Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Newly elevated VIEWER/EDITOR -> ADMIN user cannot see members/invite new ones/cannot update retention period settings #4896

Open
ishmam-mahmud opened this issue Apr 22, 2024 · 3 comments

Comments

@ishmam-mahmud
Copy link

Bug description

I am an ADMIN user in our self-hosted signoz, v0.39.1. However, I cannot view the member list nor can I invite new members. Whenever I try to do so, I get an error saying "API needs admin access" or something similar.
I face the same issue with trying to change retention period settings, though in those cases I don't see any changes in the UI, but I can see a 403 Forbidden error in the network tab.

Expected behavior

As an ADMIN user, I should be able to view the member list of my organization, and invite new members or remove existing members using the frontend. I should also be able to update the retention period settings.

How to reproduce

  1. Ask another ADMIN user who does not have these issues to elevate a VIEWER/EDITOR user to ADMIN
  2. Login as the second user (the one who was just VIEWER/EDITOR) and navigate to the organization settings page.
  3. Verify you are an ADMIN by navigating to /my-settings and seeing your role is ADMIN now.
  4. The member list tables shown in the frontend should not be empty.
  5. Trying to invite a new member should not cause an error saying "API needs ADMIN access"
  6. Go to the retention settings page and try to update the retention periods, all of which should fail.

Version information

  • Signoz version: v0.39.1
  • Browser version: Firefox 125.0 (64-bit) for fedora
  • Your OS and version: Fedora Linux 39 (Workstation Edition)
  • Your CPU Architecture(ARM/Intel): AMD Ryzen™ 7 6800HS with Radeon™ Graphics × 16 (x86)

Additional context

The other members of my org who were already ADMIN are not facing these issues. I started facing them only after I got elevated to ADMIN by one of my coworkers.

Thank you for your bug report – we love squashing them!

Copy link

welcome bot commented Apr 22, 2024

Thanks for opening this issue. A team member should give feedback soon. In the meantime, feel free to check out the contributing guidelines.

@ishmam-mahmud
Copy link
Author

Example API response when trying to fetch members at
https://signoz.gitstart.com/api/v1/orgUsers/

{"status":"error","errorType":"forbidden","error":"API is accessible to admins only"}

@ishmam-mahmud
Copy link
Author

Logging out and logging back in fixes all issues

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant