airavata-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Marcus Christie (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AIRAVATA-2866) Remove write access to projects from the group based auth migration script
Date Mon, 13 Aug 2018 20:54:00 GMT

    [ https://issues.apache.org/jira/browse/AIRAVATA-2866?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16578897#comment-16578897
] 

Marcus Christie commented on AIRAVATA-2866:
-------------------------------------------

Ran following in our dev environment:
{code:sql}
MariaDB [sharing_catalog]> delete from SHARING where ENTITY_ID in (select ENTITY_ID from
ENTITY where ENTITY_TYPE_ID = 'seagrid:PROJECT') and GROUP_ID = 'Admin_Users_dc813afe-d39d-4eb9-8723-0e46357a582d'
and DOMAIN_ID = 'seagrid';

MariaDB [sharing_catalog]> delete from SHARING where ENTITY_ID in (select ENTITY_ID from
ENTITY where ENTITY_TYPE_ID = 'seagrid:PROJECT') and GROUP_ID = 'Read_Only_Admin_Users_38ef7c60-bd89-476e-9e36-3491e02c296b'
and DOMAIN_ID = 'seagrid';

delete from SHARING where ENTITY_ID in (select ENTITY_ID from ENTITY where ENTITY_TYPE_ID
= 'scigap:PROJECT') and GROUP_ID = 'Read_Only_Admin_Users_7c33a791-f4c1-4210-a110-dce84dac6653';

delete from SHARING where ENTITY_ID in (select ENTITY_ID from ENTITY where ENTITY_TYPE_ID
= 'scigap:PROJECT') and GROUP_ID = 'Admin_Users_546376b4-d50a-425d-9964-d4dfd5159a07';

MariaDB [sharing_catalog]> delete from SHARING where ENTITY_ID in (select ENTITY_ID from
ENTITY where ENTITY_TYPE_ID = 'default:PROJECT') and GROUP_ID = 'Read_Only_Admin_Users_b9beda12-d42c-4034-80e0-bc1ca82dd742';

MariaDB [sharing_catalog]> delete from SHARING where ENTITY_ID in (select ENTITY_ID from
ENTITY where ENTITY_TYPE_ID = 'default:PROJECT') and GROUP_ID = 'Admin_Users_f479c6f9-2d74-4585-b21e-c975cbee4aae';

MariaDB [sharing_catalog]> delete from SHARING where ENTITY_ID in (select ENTITY_ID from
ENTITY where ENTITY_TYPE_ID = 'AccordGateway:PROJECT') and GROUP_ID = 'Admin_Users_671725ad-c3f2-4415-a145-dd1a4310bef3';

MariaDB [sharing_catalog]> delete from SHARING where ENTITY_ID in (select ENTITY_ID from
ENTITY where ENTITY_TYPE_ID = 'AccordGateway:PROJECT') and GROUP_ID = 'Read_Only_Admin_Users_6e1ac312-7a99-4a22-adb2-98cc1774526a';

{code}

> Remove write access to projects from the group based auth migration script
> --------------------------------------------------------------------------
>
>                 Key: AIRAVATA-2866
>                 URL: https://issues.apache.org/jira/browse/AIRAVATA-2866
>             Project: Airavata
>          Issue Type: Story
>            Reporter: Marcus Christie
>            Assignee: Marcus Christie
>            Priority: Major
>
> Admins don't need read or write access to users projects so that can be removed. It is
cluttering up the list of projects for admin users.
> TODO
> * [x] Remove admin access from the sharing database (manual, one-time thing)
> * [ ] Remove sharing projects with admins in the data migration script
> * [ ] Remove sharing projects with admins in API server



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message