Uploaded image for project: 'MariaDB MaxScale'
  1. MariaDB MaxScale
  2. MXS-6462

MaxScale 25 does not allow 'type=basic' users run 'maxctrl list users' command

    XMLWordPrintable

Details

    • Bug
    • Status: In Review (View Workflow)
    • Major
    • Resolution: Unresolved
    • 25.10.0
    • 25.10.3
    • None
    • None
    • MXS-SPRINT-269

    Description

      The maxctrl list users command for a 'type=basic' user does not work in maxscale version 25.10 onwards.
      Error returned "Insufficient permissions".
      It only works for 'type=admin' users.

      [root@localhost ~]# maxscale --version
      MaxScale 23.08.13
      [root@localhost ~]# maxctrl create user test1 smss0030 --type=basic
      OK
      [root@localhost ~]# maxctrl -u test1 -p smss0030 list users
      ┌───────┬──────┬────────────┬───────────────────────────────┬──────────────┬───────────────────────┐
      │ Name  │ Type │ Privileges │ Created                       │ Last Updated │ Last Login            │
      ├───────┼──────┼────────────┼───────────────────────────────┼──────────────┼───────────────────────┤
      │ test1 │ inet │ basic      │ Tue, 21 Apr 2026 06:22:11 GMT │              │ 4/21/2026, 4:23:15 PM │
      ├───────┼──────┼────────────┼───────────────────────────────┼──────────────┼───────────────────────┤
      │ admin │ inet │ admin      │ Tue, 21 Apr 2026 06:21:56 GMT │              │ 4/21/2026, 4:22:11 PM │
      └───────┴──────┴────────────┴───────────────────────────────┴──────────────┴───────────────────────┘
       
      [root@localhost ~]# maxscale --version
      MaxScale 24.02.9
      [root@localhost ~]# maxctrl create user test1 smss0030 --type=basic
      OK
      [root@localhost ~]# maxctrl -u test1 -p smss0030 list users
      ┌───────┬──────┬────────────┬───────────────────────────────┬──────────────┬───────────────────────┐
      │ Name  │ Type │ Privileges │ Created                       │ Last Updated │ Last Login            │
      ├───────┼──────┼────────────┼───────────────────────────────┼──────────────┼───────────────────────┤
      │ test1 │ inet │ basic      │ Tue, 21 Apr 2026 06:29:46 GMT │              │ 4/21/2026, 4:29:54 PM │
      ├───────┼──────┼────────────┼───────────────────────────────┼──────────────┼───────────────────────┤
      │ admin │ inet │ admin      │ Tue, 21 Apr 2026 06:29:12 GMT │              │ 4/21/2026, 4:29:46 PM │
      └───────┴──────┴────────────┴───────────────────────────────┴──────────────┴───────────────────────┘
       
       
      [root@localhost ~]# maxscale --version
      MaxScale 25.10.2
      [root@localhost ~]# maxctrl create user test1 smss0030 --type=basic
      OK
      [root@localhost ~]# maxctrl -u test1 -p smss0030 list users
      Error: Server at http://127.0.0.1:8989 responded with 403 Forbidden to `GET users`
      {
          "errors": [
              {
                  "detail": "Insufficient permissions"
              }
          ]
      }
      

      This is probably a side-effect of the access control improvements in 25.10 where the administrative endpoints for managing users now require the 'admin' permission.

      Attachments

        Activity

          People

            markus makela markus makela
            susmeet.khaire Susmeet Khaire
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

            Dates

              Created:
              Updated:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.