The users with user role should NOT submit rebuild and stats jobs

[yixinglu]

./nebula-console -u root -p nebula -addr 192.168.8.6 --port=34249

(root@nebula) [(none)]> create USER y2 WITH PASSWORD 'nebula'
Execution succeeded (time spent 4053/4419 us)

Wed, 25 Aug 2021 17:53:44 CST

(root@nebula) [(none)]> GRANT ROLE USER on nba to y2
Execution succeeded (time spent 4627/4951 us)

Wed, 25 Aug 2021 17:54:34 CST

./nebula-console -u y2 -p nebula -addr 192.168.8.6 --port=34249

(y2@nebula) [(none)]> use nba;
Execution succeeded (time spent 4066/4397 us)

Wed, 25 Aug 2021 17:58:27 CST

(y2@nebula) [nba]> show stats
+---------+------------+-------+
| Type    | Name       | Count |
+---------+------------+-------+
| "Tag"   | "bachelor" | 1     |
+---------+------------+-------+
| "Tag"   | "player"   | 56    |
+---------+------------+-------+
| "Tag"   | "team"     | 30    |
+---------+------------+-------+
| "Edge"  | "like"     | 81    |
+---------+------------+-------+
| "Edge"  | "serve"    | 152   |
+---------+------------+-------+
| "Edge"  | "teammate" | 10    |
+---------+------------+-------+
| "Space" | "vertices" | 86    |
+---------+------------+-------+
| "Space" | "edges"    | 243   |
+---------+------------+-------+
Got 8 rows (time spent 2031/2760 us)

Wed, 25 Aug 2021 17:58:30 CST

(y2@nebula) [nba]> submit job stats
+------------+
| New Job Id |
+------------+
| 36         |
+------------+
Got 1 rows (time spent 4628/5101 us)

Wed, 25 Aug 2021 17:58:59 CST

(y2@nebula) [nba]> show tag indexes;
+---------------------+----------+----------+
| Index Name          | By Tag   | Columns  |
+---------------------+----------+----------+
| "player_age_index"  | "player" | ["age"]  |
+---------------------+----------+----------+
| "player_name_index" | "player" | ["name"] |
+---------------------+----------+----------+
| "team_name_index"   | "team"   | ["name"] |
+---------------------+----------+----------+
Got 3 rows (time spent 3378/3827 us)

Wed, 25 Aug 2021 17:59:16 CST

(y2@nebula) [nba]> REBUILD TAG INDEX player_age_index;
+------------+
| New Job Id |
+------------+
| 37         |
+------------+
Got 1 rows (time spent 4185/4573 us)

Wed, 25 Aug 2021 17:59:26 CST

[panda-sheep]

Have you set enable_authorize=truein graph conf?

My local test is ok, as shown below:

(y3@nebula) [y2]> submit job stats
[ERROR (-1008)]: PermissionError: No permission to write space.

Thu, 26 Aug 2021 09:11:48 CST

(y3@nebula) [y2]> submit job compact
[ERROR (-1008)]: PermissionError: No permission to write space.