Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Admin user could not roll back ingestion when REST_API_AUTHORIZATION_ENABLED is set to true #9088

Closed
TonyOuyangGit opened this issue Oct 24, 2023 · 1 comment
Labels
bug Bug report

Comments

@TonyOuyangGit
Copy link
Contributor

Describe the bug
In the latest release v0.11.0 with env variable REST_API_AUTHORIZATION_ENABLED is set to true. The ingestion roll back seems failing and the GMS log shows that the user is not authorized to delete entities, even though we are logged in as datahub root user who didn’t touch anything on permissions

To Reproduce
Steps to reproduce the behavior:

  1. Locally deploy a latest Datahub release with env variable REST_API_AUTHORIZATION_ENABLED set to true
  2. log in as datahub user
  3. Run a sample ingestion which will produce some metadata
  4. Roll back ingestion, you'll see the failure

Expected behavior
User with admin role or root user should be able to roll back ingestion

Additional context
GMS log is saying user is unauthorized to delete entities.

Caused by: com.linkedin.restli.server.RestLiServiceException: User is unauthorized to delete entities.
	at com.linkedin.metadata.resources.entity.BatchIngestionRunResource.lambda$rollback$7(BatchIngestionRunResource.java:133)
	at com.linkedin.metadata.restli.RestliUtil.toTask(RestliUtil.java:30)
	at com.linkedin.metadata.restli.RestliUtil.toTask(RestliUtil.java:50)
	at com.linkedin.metadata.resources.entity.BatchIngestionRunResource.rollback(BatchIngestionRunResource.java:112)
@TonyOuyangGit
Copy link
Contributor Author

This is resolved by the #9092

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Bug report
Projects
None yet
Development

No branches or pull requests

1 participant