User not authorized on search page

Graylog Central (peer support)
1

after I grant permission searches on my PowerUser roles

{
“name”: “PowerUser”,
“description”: “PowerUser”,
“permissions”: [
“messages:analyze”,
“messages:read”,
“searches:keyword”,
“searches:relative”,
“searches:absolute”
],
“read_only”: “false”
}

and PowerUser try login but not loading search page and found error messages below:

INFO : org.graylog2.shared.security.ShiroAuthorizationFilter - User [test] not authorized. (GET api/system/cluster_config/org.graylog2.indexer.searches.SearchesClusterConfig)

how to fix it?

please help.

note: graylog 2.1.1

2

you should really update your Graylog.

Your role is missing some rights but I do not have such an ancient version to check what version where given and possible with that version.

3

Don’t It have any way to fix it? Because my graylog has huge of data.

4

you need to check the available access rights yourself. As I said. I do not have such an ancient version to check what rights are needed …

5

Thank you, jan.

Could you guide me for where or what file should i check access rights?

6

you can find that via API

GET https://yourgraylog/api/system/permissions

or via the API browser

7

Thank you.

i found it (via API Browser) but cannot edit/post anythings. How to edit it?

“searches”: [
“relative”,
“absolute”,
“keyword”
],

8

@madieo you can create a new role that has the access rights that you want to have and assign that role to a user.

9

@jan

yes, I already add new role “PowerUser” and add search permission at top topic message that i have this issue. it doesn’t work.

do you have any idea?

10

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.