Uploaded image for project: 'Artifactory Binary Repository'
  1. Artifactory Binary Repository
  2. RTFACT-16114

Artifactory Admin rights not persistent



    • Type: Bug
    • Status: Open
    • Priority: Normal
    • Resolution: Unresolved
    • Affects Version/s: 5.3.1, 6.3.3
    • Fix Version/s: None
    • Component/s: Web UI
    • Labels:
    • Environment:

      Linux Centos 7 , test environment



      I have issues with artifactory when providing admin rights to users
      my observations are

      1. When i give users admin access via the group method ie giving the group admin priviledges these users seem to assume admin rights as a one-time, one off login with admin module(tab) enabled Ok

      .However when the user logs out and logs back into the artifactory UI they lose their admin rights ie when they hover their mouse over the admin tab.It shows a red circle (meaning admin access not available or disabled) basically looks like they have been stripped of the admin rights after one time login

      2.In the UI under the admin => groups => Edit groups the user that was once on the right pane side of the "users" section box pane ..seem to automatically move back to the left side pane indicating that they have reverted back to ordinary non-admin user.

      I my case i have added these user groups via AD and imported the groups(s) externally from AD.

      3.I find that when i create a group locally(and not an AD imported/mapped group) and give that group admin rights then any internal or external(Active directory) users that i add to that group can remains consistently adn persistently an admin user with the admin tab rightly enabled forever regardless of how many times they log in and out of the UI

      Is this a bug or a user config error on my part .

      We are running 5.3.1 on Centos 7. Most users that have this issue are normal AD imported users (external) who are assigned to the AD imported artifactory admin groups but the admin rights dont persist ie they lose it upon login in once .

      Also could you kindly send me the right syntax to create a group locally(not from UI) i am a bit new to artifactory but this is a sample format for creating AD groups using the ldap realm ..what is the syntax equivalent for internal or local

      I guess my question is what will the realm and** realmattributes** be for a locally created admin
      This is a redacted json code used to create the external users I have changed the realm from ldap to XXX and realmattributes i dont know what it should be for a local user
      "name": "artifactory_local_admin",
      "description" : "A locally created group with admin access",
      "autoJoin" : "false",
      "adminPrivileges" : "true",
      "realm": "XXXXX",
      "realmAttributes": "XXXXX" }}{{ key "XXXXXXXXXx" }}"




            Dominqs Dominic Simpson
            3 Vote for this issue
            3 Start watching this issue