KV menu still misbehaving even in 1.10.3

[avcercel]

Hello Folks,

As flagged in #10997 , on 1.10.3, while the KV menu is present, its contents are not reachable. Once I click on any of the directories, I end up in tokens.

Am I doing something wrong or is this intended?

Thank you,

Alex

[johncowen]

Hi @avcercel

Thanks for checking in again.

When you say "I end up in tokens", does the menu on the left hand side have "Tokens" highlighted, or does it have "KV" highlighted? Could you post a screengrab of what you are seeing (if you can, please include the browser URL bar, maybe obfuscate the domain name if that's sensitive)?

Thanks,

[avcercel]

Hey @johncowen ,

So when I log in, I end up in the SERVICES section.

Then on the lefthand side, I see this:

I click on Key/Value menu, and it opens it correctly:

Then if I want to go further and click on "deploy", it sends me to the Access Control/Tokens:

[johncowen]

Great stuff thanks Alex, could you let me know what you see in this view when you click on the 'deploy' folder:

(so that is what I see when I click on the deploy folder, but I'm not taken to a 403 page, but note I have read and list permissions as true there ^, I'm guessing your response is slightly different?)

[avcercel]

Hello @johncowen ,

Seems like I don't have Allow:true for List access:

Could this be it?

Cheers,

Alex

[johncowen]

That will be it 🎉 . Not sure if you have access within your environment to give yourself list permissions?

We could be a bit clearer on messaging here overall so its more obvious what's blocking you. There's an issue somewhere detailing this and we've spoken a little more amongst the team about how to improve this. I'll try find that issue and post it here.

Otherwise let me know if you are able to tweak your permissions, if so we can probably go ahead and close this issue. I'll wait to get your reply though before possibly doing that.

[avcercel]

Hello @johncowen ,

I granted the list permissions and it worked. Thank you for your tips and patience so far. You're amazing!

What's a bit strange to me is that we're not using "enable_key_list_policy". We're using anonymous token and while via the CLI I could have read the keys without a problem, in the GUI it's requiring assigning an extra permission.

This doesn't seem totally intuitive or is it something I read wrong?

Cheers,

Alex

[johncowen]

😄 you are equally as amazing!

What's a bit strange to me is that we're not using "enable_key_list_policy". We're using anonymous token and while via the CLI I could have read the keys without a problem, in the GUI it's requiring assigning an extra permission.

^ That is super good info 👏

@dnephin here's another one to add to #11098. Not sure if you want to add a new issue or just keep it all under that 1 umbrella - up to you. Let me know and we can either close this, or rename it or something.

@avcercel thanks for all the help here. Love our userbase, really feels like we are all working together as one big team, thankyou! 🙇