Strapi Roles and Permission plugin doesnt exist in side bar? - strapi

I setted up Strapi through NPX and ran
npx create-strapi-app my-project --quickstart
I am using strapi and here is my side bar
Normally i expected it to be like the following:
I dont know why but I cannot access Roles & Permission tab as it is not there. I need this tab for API permission customization.
I checked the docs and it says that is should be there following:
"This plugin provides a way to protect your API with a full
authentication process based on JWT. This plugin comes also with an
ACL strategy that allows you to manage the permissions between the
groups of users.
To access the plugin admin panel, click on the Roles & Pemissions link
in the left menu."
I have no idea what is wrong with my dashboard. How may i access this plugin?

Okay, strange enough I wasted 30 minutes on this, so it turns out they decided to change their UI in version 3.x and somehow when you search for "Roles & Permissions strapi" on google, it leads you to old documents, which is frustrating and misleading :))))
New docs link here
Roles & Permissions. This plugin provides a way to protect your API
with a full authentication process based on JWT. This plugin comes
also with an ACL strategy that allows you to manage the permissions
between the groups of users.
To access the plugin admin panel, click on the Settings link in the
left menu and then everything will be under the USERS & PERMISSIONS
PLUGIN section.
#Concept

If you in version3.x
Go to Settings -> User & Permission -> Roles -> Authenticated or Public -> on Permissions Widget --> select Application.

Related

HttpError 403 google directory api

I got the super admin privileges for to my Google Account.
I need to get the list of all the chrome devices through an API.
I did enable Google Admin SDK but still facing some issues.
I copied the exact python script from Python Quickstart for checking but still getting error as
"googleapiclient.errors.HttpError: https://www.googleapis.com/admin/directory/v1/users?customer=my_customer&orderBy=email&alt=json&maxResults=10 returned "Insufficient Permission">"
When checked on Admin SDK API dashboard I can see 4xx errors for every call made from my python script.
When you run the sample you need to make sure that this step
The sample will attempt to open a new window or tab in your default browser. If this fails, copy the URL from the console and manually open it in your browser.
If you are not already logged into your Google account, you will be prompted to log in. If you are logged into multiple Google accounts, you will be asked to select one account to use for the authorization.
Is done from the Google account which has access to your admin account. The user you are logged in with now does not have access.
I managed to get Super Admin access of Google account and then grant access to my project for different scopes. The docs/ references are so confusing hence it took a while for me to figure it out. So under the admin console, we have to get into Security >> Advanced Settings >> Manage API Client Access(under Authentication) and then add the client name and the scopes(multiple scopes separated by commas) for which we need access. Client name is the client-id which we can get from the client-secretxxxxx.json file(downloaded while creating the oauth id).
NOTE :- You do NOT need super admin access it is just that I was new and the guy who gave me the initial access wasn't sure what has to be enabled across.
Also couldn't post as a comment due to the limitation of characters.

How to get Google API access to company directory without being super admin?

See screenshot of what I see as a user in Gmail:
Is there a way to get programatic access to this list w/o needing super admin access? I already saw the API https://developers.google.com/admin-sdk/directory/v1/reference/users/list but it requires super admin level access to access it. If I query it as a user I get "403: Not Authorized to access this resource/api".
Is there a scope I can ask for so a user can get access to the company directory?
For non admin, you have to use the parameter "viewType=domain_public" so the users can access to this information.
Keep in mind that for this parameter to work, the contact sharing options should be enabled.
To check for this options, in Admin Console go to "Apps > Google Apps > Contacts > Sharing Settings"
Check if this works for you.

Create users with only view privilege in TeamCity

I am the administartor of TeamCity 9.0 which is my continuous integration server. I have added many users for different projects. They have the permission to manually trigger the build, but they cannot edit the configurations.
Now , I need to add a user so that the user can view the Web UI and get the logs etc ; but he must not be able to trigger the build. In short, the run button in the Web UI should not work for that user or should be invisible. How can I achieve that? Please help me out.
In the default installation, the All Users group only has the Project viewer role associated with it, which only has the View project and all parent projects permission. You'll see the Project developer role by default has the Run build and Stop build permissions, and many more.
What does your permission set up look like, i.e. what group is the user assigned to and what roles are associated with that group.
You can get a sort of "effective permissions" overview for a user on the "Roles" tab of a user, this shows how the user is getting permission for which projects via the groups they are in.
TeamCity provides a built-in role, Project Viewer, that grants users read-only access to projects. You can also create your own roles with permissions tailored for your team. See Administration > User Management > Roles.
Click on Administration on top right corner. Under User Management on left side of the UI, click on Users. Click on the user you want. Under Roles tab select Assign Role. In the pop up select what privilege you want to give to that user for what project.
Check this link https://confluence.jetbrains.com/display/TCD9/Role+and+Permission for knowing about different types of users in TeamCity.

Sonarqube 4.5 provisioning / authorization

We are using Sonhrqube 4.5 that is integrated into Google's oAuth sign-on. There are no issues with logging in (Authentication). Certain users have been provisioned with sonar-administrators role. But for some reason, the admin role keeps dropping for some users (leaves the user with sonar-users role). We have tried granting them admin access again, but it keeps happening. Also tried creating a brand new group and assigning that group to the user, but still same thing happens. Any thoughts? If you need any other information, let me know.
Just additional info, not sure if it matters - We are using the sonar-oauth-plugin from JCERTIFLab for integration with Google's signon/oauth. This plugin automatically creates users with default role - sonar-users.
Thanks in advance!
It turned out to be an issue with the Sonar plugin used for integration with google's Oauth. Every time a user is authenticated, permissions get overwritten. To overcome the problem temporarily, we predefined a list of users with admin access in the properties file.

reg: Manage Dashboards link in Sonar

In Sonar version 3.4.1 a Manage Dashboards link is used for creating global and project dashboards from an admin ID. As a part of the security config setup, we can create new users. Manage dashboard link, however, is visible for new users we've just created.
So, I request your advice on is there are any options to hide the link from anyone except for the admin.
The "Manage dashboard" link that you see must remain always available: it allows a user to create a dashboard that willbe available only for him.

Resources