[permission handling] Changing group permissions requires adapter restart

[klein0r]

Describe the bug

1. Create a new user
2. Add the user to group system.group.user
3. Logged in with the new user in another browser
4. Set all object permissions for object to users group with admin

5. Try to create a new object in 0_userdata.0 with user
6. permissionError
7. Reload the browser tab: still permissionError
8. Log out and log in: permissionError

This solves the problem:

iobroker stop admin.0
iobroker start admin.0

Caching issue?

Bonus

This should be hidden if "create object" permission is missing

Versions:

• Adapter version: 6.2.22

[Apollon77]

Does it also needs a restart (and not only logoout/login) when you do a "Shift reload"? (To make sure not certein data are still cached in browser

[klein0r]

@Apollon77 Yes. Seems like permissions are cached on server side?!

[Apollon77]

which js-controller? Yes they are bug shopud be updated on object changes ......

[klein0r]

js-controller 4.0.23 node v16.17.0

[klein0r]

Other way around (revoking object write)

It looks like the permissions are just evaluated on client side?! After removing the "object write" permissions I can still create new objects until the browser is refreshed. At least the server side should prevent that

I was able to create object "ok2"

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs within the next 7 days. Please check if the issue is still relevant in the most current version of the adapter and tell us. Also check that all relevant details, logs and reproduction steps are included and update them if needed. Thank you for your contributions. Dieses Problem wurde automatisch als veraltet markiert, da es in letzter Zeit keine Aktivitäten gab. Es wird geschlossen, wenn nicht innerhalb der nächsten 7 Tage weitere Aktivitäten stattfinden. Bitte überprüft, ob das Problem auch in der aktuellsten Version des Adapters noch relevant ist, und teilt uns dies mit. Überprüft auch, ob alle relevanten Details, Logs und Reproduktionsschritte enthalten sind bzw. aktualisiert diese. Vielen Dank für Eure Unterstützung.

[klein0r]

⬆️