Query Tab access from Readuser in Couchbase webconsole

[selvi]

Hi,

Can someone kindly suggest whether it is able access Query Tab in couchbase webconsole from any of readuser Priviledges. The couchbase version is 4.5Enterprise.

Thanks,
Selvi

[geraldss]

Hi @eben, question for you.

[eben]

Hello Selvi,

A read-only user is not permitted to use the Query tab, only a full administrator can use it. This problem should be fixed in a future release, until then please try the stand-alone Query Workbench DP, which can be downloaded from the “Tools” section of the Couchbase downloads web page.

Regards,

-Eben

[selvi]

Hi Eben,

Thanks for your response.

I’m getting the below error while accessing Bucket which created with
Password authentication from Query Workbench,

Authorization Failed Keyspace SourcingDispatch - cause: Expecting 200 or
401 from ns_server auth endpoint. Got: 500 Internal Server Error

Can you kindly help on this.

Thanks&Regards,
Mariselvi

[eben]

Hi @selvi,

Can you tell me more about where you see the error you described? Are you using the Couchbase admin console, or the stand-alone query workbench, or the cbq command-line query tool? What are you doing that causes the error to appear?

Thank you,

-Eben

[selvi]

Hi Eben,

This error i’m getting from stand-alone query workbench.

While selecting the bucket i’m getting this error.(Eg select * from
sample_bucket).This bucket created with password.

I’m able to query the bucket which is not created with password during new
bucket creation.

Thanks&Regards,
Mariselvi

[eben]

Hi @selvi,

I haven’t seen that error before. Is the error message appearing in the query results? If so, can you paste the entire JSON of the query result here?

Also, does the “Metadata” panel on the left part of the screen show your password-protected bucket with a a “lock” icon next to it. For example, in the screen shot below the “survey” bucket has a password.

Thank you,

-Eben

[selvi]

Hi Eben,

Yes in metadata panel the password-protected bucket having a “lock” icon
next to it as you shown in sample bucket.

Please find below Json output,

[{“code”:10000,“msg”:“Authorization Failed Keyspace Landing - cause:
Expecting 200 or 401 from ns_server auth endpoint. Got: 500 Internal Server
Error”},{“original_query”:"select cbq_query_workbench_limit. from (select

• from Landing limit 1) cbq_query_workbench_limit limit 500;"}]*

Thanks&Regards,
Mariselvi

[eben]

Hello again @selvi,

If you click on the “lock” icon, does it bring up a dialog box to allow you to enter the password for the bucket? If you enter the password, does the query still fail?

Thank you,

-Eben

[selvi]

Hi Eben,

Thanks for your response.

I’m able to access the bucket by providing the password.I connected the
workbench using ReaduserAdmin credential.

But it is allowing me to update,insert,delete the document from the
bucket.Is there anyway to restrict the user only for select statement alone.

Thanks&Regards,
selvi

[eben]

Hi again @selvi,

In the current release, we do not support fine-grained permissions, if you have any access to a bucket, then you can both read and write.

We are working on separating read/write permissions for the next release.

Regards,

-Eben

[selvi]

Hi Eben,

Thanks for your response.

I tried with joining the cluster in the Couchbase .But it is failing with
rebalancing.

Please find below the log details,

Rebalance exited with reason {unexpected_exit, {‘EXIT’,<0.4353.149>,
{bulk_set_vbucket_state_failed, [{‘ns_1@10.7.10.10’, {‘EXIT’,
{{{{{case_clause, {error, {{{badmatch, {error,
{{badmatch,{error,ehostunreach}}, [{mc_replication,connect,1, [{file,
“src/mc_replication.erl”}, {line,30}]}, {mc_replication,connect,1, [{file,
“src/mc_replication.erl”}, {line,49}]}, {dcp_proxy,connect,4,
[{file,“src/dcp_proxy.erl”}, {line,183}]}, {dcp_proxy,maybe_connect,1,
[{file,“src/dcp_proxy.erl”}, {line,170}]}, {dcp_producer_conn,init,2,
[{file, “src/dcp_producer_conn.erl”}, {line,30}]}, {dcp_proxy,init,1,
[{file,“src/dcp_proxy.erl”}, {line,47}]}, {gen_server,init_it,6,
[{file,“gen_server.erl”}, {line,304}]}, {proc_lib,init_p_do_apply,3,
[{file,“proc_lib.erl”}, {line,239}]}]}}}, [{dcp_replicator,init,1,
[{file,“src/dcp_replicator.erl”}, {line,50}]}, {gen_server,init_it,6,
[{file,“gen_server.erl”}, {line,304}]}, {proc_lib,init_p_do_apply,3,
[{file,“proc_lib.erl”}, {line,239}]}]},

I have tried with Failover and Rebalancing again but still getting the same
error.Please provide your suggestion on this.

Thanks&Regards,
Mariselvi

[eben]

Hi @selvi,

I am not familiar with the problem you are seeing. I suggest you start a new thread in the “Couchbase Server” category where people who know more about that issue will likely see it.

Regards,

-Eben