Graylog Permissions Allow * if Created

[janc (Jan Caster)]

Hello There,

I currently have a use case where a specific Role needs to be able to edit resources (e.g. dashboards, pipelines, pipeline rules) that they created.

It appears that this is achievable with dashboards through the “dashboards:create:" permission without any "dashboards:edit:” permissions.
Is this because of the dashboard’s “creator_user_id” field?

Does this not apply to other resources? like pipelines/pipeline rules?

Thanks and regards,
Jan

[jan (Jan Doberstein)]

Is this because of the dashboard’s “creator_user_id” field?

yes that is the reason. This does currently not apply to any other resources and you might want to create a feature request for that.