Joseph Percivall created NIFI-3047:
--------------------------------------

             Summary: Viewing Provenance in an unsecure instance shouldn't 
check if the component exists
                 Key: NIFI-3047
                 URL: https://issues.apache.org/jira/browse/NIFI-3047
             Project: Apache NiFi
          Issue Type: Bug
    Affects Versions: 1.0.0
            Reporter: Joseph Percivall
            Priority: Minor


When viewing provenance, the instance checks if the component exists on the 
graph in order to check if the user accessing provenance has the proper rights 
to view provenance for that component. If the component doesn't exist then it 
doesn't return any events (since it can't tell whether or not the user would 
have access to the provenance information). This decision to not show events 
for deleted components makes sense when the instance is secure but if it isn't 
secured then it doesn't. 

In an unsecure instance, all provenance events that exist in the repo should be 
query-able regardless whether the component exists on the graph.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to