Restring the database list to unauthorized users from seeing it.

[kish5430]

HI Team,
Show the database list to users which are having privileges to that user

Reproduce the issue as below:

1. Create two databases, 'db_1' and 'db_2', with the root user.
2. Select database 'db_1' from the database list and create a role called 'role_1'. Add all collection level privileges to that role and add a few global privileges (Create Collection, Drop Collection, Describe Collection, Show Collections, List Databases).
3. Create a user named 'user_1' and assign the role 'role_1'.
4. Select the database 'db_2' from the database list and create a role called 'role_2'. Add all collection level privileges to that role and add a few global privileges (Create Collection, Drop Collection, Describe Collection, Show Collections, List Databases).
5. Create a user named 'user_2' and assign the role 'role_2'.
   Log out from the root user and log in using the details below.
   username: user_1
   password: xxxxxxx
   database: db_1
6. User 'user_1' is able to log in and database 'db_1' is being selected in the drop-down list by default. Here, 'user_1' is able to see all the remaining databases.
7. User 1 may not be able to access the collections, but he can still view all the databases.
8. The goal is for 'user_1' to only see the database, regardless of their privileges.

Thanks

[shanghaikid]

next release 😀 I hope next week.

[kish5430]

HI @shanghaikid The above issue has been resolved. However, we found new issues in the Attu 2.4.0 version:

1. User 'user_1' can only see his details, but in the users section, 'user_1' can see all users and roles. It should not display other users and roles.

Provided privileges:
role.grant("Global", "", "CreateCollection", db_name=db_name)
role.grant("Global", "", "DropCollection", db_name=db_name)
role.grant("Global", "", "DescribeCollection", db_name=db_name)
role.grant("Global", "", "ShowCollections", db_name=db_name)
role.grant("Global", "", "SelectOwnership", db_name=db_name)
role.grant("Global", "", "ManageOwnership", db_name=db_name)
role.grant("Collection", "", "", db_name=db_name)

Thanks

[kish5430]

HI @shanghaikid Can you plz address above issue

[kish5430]

Issue 2# When i tried to udpate the privileges, its removing the existing privileges.

Reproduce steps:
step1: Create a user 'user-a' and role 'role-a' and provide the below privileges to role-a
role.grant("Global", "", "CreateCollection", db_name=db_name)
role.grant("Global", "", "DropCollection", db_name=db_name)
role.grant("Global", "", "DescribeCollection", db_name=db_name)
role.grant("Global", "", "ShowCollections", db_name=db_name)
role.grant("Global", "", "SelectOwnership", db_name=db_name)
role.grant("Global", "", "ManageOwnership", db_name=db_name)
role.grant("Collection", "", "", db_name=db_name)

Step2: Assign role-a to user-a.
Step3: Login with 'user-a' and try to add a new privilege to the 'role-a'
Step4: It will give the error message that "you dont have privilege to udpate role.....' and delete the existing privileges.

Thanks