trafficcontrol icon indicating copy to clipboard operation
trafficcontrol copied to clipboard

Internal Sever Error in TP when updating own role to higher role

Open ericholguin opened this issue 2 years ago • 0 comments

When current user has a role with a lower privilege level than the role it is updating itself to, will result in an Internal Server Error in Traffic Portal. In Traffic Ops this is not allowed when using the users/{id} endpoint however Traffic Portal uses the user/current endpoint when updating your self.

This can't be replicated in Traffic Ops due to #3168

This Bug Report affects these Traffic Control components:

  • Traffic Portal

Current behavior:

Try updating your own role to a role with higher privileges in Traffic Portal you should see an Internal Server Error alert.

Expected behavior:

The alert should be: "users cannot update their own role" or something similar.

Steps to reproduce:

Go to Traffic Portal Login as a user with an operations role Try updating your own role to admin you should see an Internal Server Error alert.

ericholguin avatar Jul 26 '22 21:07 ericholguin