Security

Can't set permissions for the navigation menu

mihelic
Path Finder

I am running Splunk version 5.0.2.

I want to add write permissions for the navigation menu to a user role. I go to "Manager » User interface » Navigation menus" as the admin user and click the Permissions link for the entry "default". I check the appropriate user role in the Write column and click Save.
The file /opt/splunk/etc/apps/search/metadata/local.meta show this for the navigation menu file:

[nav/default]
access = read : [ * ], write : [ admin, naviwrite ]
owner = nobody
version = xxxx
modtime = xxxx

Users in naviwrite can't edit/save the content of the navigation menu entry "default".

When I click on the Permissions link again, the only role ticked in the Write column is admin. The content of local.meta still shows

access = read : [ * ], write : [ admin, naviwrite ]

The test setup does not have these problems.
Looks like local.meta is totally ignored.

How can I get this to work?

0 Karma

ecambra_splunk
Splunk Employee
Splunk Employee

I dont expect anyone to respond, but I found a specific problem that was causing similar issues.

If there is a menu shared globally with the same title (usually default) It will override all settings for any local app menus that have the same name.

In my case it all objects for a TA were shared globally, including a default menu.

Runals
Motivator

Interestingly enough we didn't have an issue with the Splunk TA for Linux and Windows shipping out with the Nav bar shared globally UNTIL we attempted to change the permissions of the Nav bar in one of the apps. This created a couple lines in the local.meta file specific to the app level permissions to this object but somehow wasn't handled gracefully by Splunk (aka the globally shared nav bar permissions appeared to kick in ala exambra_splunk's post)

0 Karma

raziasaduddin
Path Finder

I have the same issue in Splunk 6.0.3 on Windows. Once all the global default.xml navs were set to app-only. everything worked. I will submit a bug to Splunk

0 Karma

dirkbaumann
Explorer

I have the same problem! can somebody please answer this question!!!

0 Karma

mihelic
Path Finder

Yes. local.meta and navigation menu are both within the search app context.
local.meta:
/opt/splunk/etc/apps/search/metadata/local.meta
navigaion menu:
/opt/splunk/etc/apps/search/default/data/ui/nav/default.xml
or after the admin user made changes:
/opt/splunk/etc/apps/search/local/data/ui/nav/default.xml

0 Karma

LukeMurphey
Champion

Is the local.meta in the same app where the nav to be edited is?

0 Karma
Get Updates on the Splunk Community!

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...