Uploaded image for project: 'Artifactory Binary Repository'
  1. Artifactory Binary Repository
  2. RTFACT-26945

List Docker Repositories(_catalog) is failing even if user is having access to few of the packages

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: In Progress
    • Resolution: Unresolved
    • Affects Version/s: 7.33.6
    • Fix Version/s: None
    • Component/s: Docker, REST API
    • Labels:
      None
    • Severity:
      Medium
    • Location:
      External

      Description

      Description :

      https://www.jfrog.com/confluence/display/JFROG/Artifactory+REST+API#ArtifactoryRESTAPI-ListDockerRepositories

      Listing docker images under a repository is failing even if a user is having access to a repository. 

      The above listing is working fine when the user is having complete access to the repository. But if a user is having restricted access to few paths via include/exlcude patterns, the listing is failing even for the path he has access to. 

      Replication steps:

      1. Create a user
      2. Create a permission target by giving access to only specific path of a repository using include patterns. Add the above user to this permission target. If the user loginto the UI. he can see the docker images which he has access to. 
      3. Let the user run the list docker images. He will observe 403 forbidden even if he can see the images from UI. 
      curl --user busy-user http://localhost:8082/artifactory/api/docker/docker-local/v2/_catalog
      Enter host password for user 'busy-user':
      {
        "errors" : [ {
          "status" : 403,
          "message" : "Forbidden"
        } ]
      }%
      
      

      Expected behaviour: 

      The user must be get the list of the images for which he has access to and which is able to see from the UI. 

        Attachments

          Activity

              People

              Assignee:
              Unassigned
              Reporter:
              gajapathik Gajapathi Kimidi
              Votes:
              1 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:

                  Sync Status

                  Connection: RTFACT Sync
                  RTMID-26955 -
                  SYNCHRONIZED
                  • Last Sync Date: