when the role is 'root', return * perm.

server/auth/store.go

@@ -43,6 +43,8 @@ var (
 	authEnabled   = []byte{1}
 	authDisabled  = []byte{0}
 
+	rootPerm = authpb.Permission{PermType: authpb.READWRITE, Key: []byte("*")}
+
 	revisionKey = []byte("authRevision")
 
 	authBucketName      = []byte("auth")
@@ -624,6 +626,10 @@ func (as *authStore) UserRevokeRole(r *pb.AuthUserRevokeRoleRequest) (*pb.AuthUs
 }
 
 func (as *authStore) RoleGet(r *pb.AuthRoleGetRequest) (*pb.AuthRoleGetResponse, error) {
+	if rootRole == r.Role {
+		return &pb.AuthRoleGetResponse{Header: &pb.ResponseHeader{}, Perm: []*authpb.Permission{&rootPerm}}, nil
+	}
+
 	tx := as.be.BatchTx()
 	tx.Lock()
 	defer tx.Unlock()