Uploaded image for project: 'Percona Monitoring and Management'
  1. Percona Monitoring and Management
  2. PMM-7497

Security Threat Tool: User with viewer role sees 'STT disabled' instead of 'Insufficient access' (even when STT enabled)

Details

    • Yes
    • Yes
    • Yes
    • [obsolete] Portal

    Description

      User impact:
      Insufficient access rights message is not displayed for a user with a viewer role at Database checks page. It always says 'STT disabled'. Even if it is enabled.

      Steps to reproduce:

      1. disable STT as an admin
      2. create a user with the viewer role
      3. login as a viewer
      4. open Database Checks page

      Actual result:
      Security Threat Tool is disabled. You can enable it in PMM Settings message

      Expected result:

      Insufficient access rights. message should be displayed when STT enabled or disabled

      Attachments

        Activity

          People

            nicola.lamacchia Nicola Lamacchia (Inactive)
            vasyl.yurkovych Vasyl Yurkovych
            Tiago Mota Tiago Mota (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Smart Checklist