Page Comparison

Expected

...

behavior

When creating a control center user Control Center User with granular permissions selected from the existing list of Control Center User Permissions, which are created with the provided hivemq-enterprise-security-extension/scripts/sql/v1.2/insert/default_permissions_insert.sql script, the CC user Control Center User has access to all permitted information and functions.

Observed

...

behavior

Unless the HIVEMQ_SUPER_ADMIN permissions is are available for the CC userControl Center User, the pages Clients“Clients”, Analytics “Analytics” and Trace Recordings “Trace Recordings” are not accessible to the user.

Reason

There is a typo in the HIVEMQ_VIEW_DATA_CLIENT_ID permission. So this permission is never properly set and without that permission, the user cannot view any of the mentioned pages as they all contain clientIDs.

Affected Version

All version versions older than 1.5.2 are affected.

...

Fix the typo in the cc_permissions table .by executing the following SQL Update statement:

update cc_permissions
set permission_string = 'HIVEMQ_VIEW_DATA_CLIENT_ID' where permission_string = 'HIVEMQ_VIEW_DATA_CLIENTID';

...

insert into cc_permissions (permission_string, description)
values ('HIVEMQ_VIEW_PAGE_RETAINED_MESSAGE_LIST', 'alloed to view retained message list'),
       ('HIVEMQ_VIEW_PAGE_RETAINED_MESSAGE_DETAIL', 'alloed to view retained message details'),
       ('HIVEMQ_VIEW_DATA_USER_PROPERTIES', 'allowed to see user properties of messages')
;