Staging variables are missing from variable sets for new Team when project list is defined and not missing when project list isnt defined

jsphillips's Avatar

jsphillips

16 Jun, 2017 09:29 PM

Recently we have provided staging variable access to a group of users. I want to lock this down to a select list of projects however the issue I am running into is this. If I leave the project section in the team unscoped they are able to edit the variables hard coded to the project along with the variable sets attached HOWEVER if I put a project list in here they are only able to edit the hardcoded variables for staging inside of the projects only. When they go into the associated variable sets that are attached to the project the Staging variables are missing from view completely. Please advise as to why the variables are missing ?

  1. Support Staff 1 Posted by Kenneth Bates on 19 Jun, 2017 05:35 AM

    Kenneth Bates's Avatar

    Hi,

    Thanks for getting in touch! I'm sorry you're hitting this roadblock. I've tested this on my local instance running Octopus 3.14.1, and I haven't been able to reproduce this behavior. My user is able to successfully view and create variables (in my project and set) scoped to my Staging environment. Both when I leave the project section in my team unscoped (like what works for you), and also when they are scoped to specific projects.

    Which Octopus version are you currently running? We've made updates recently around variables, so it's possible an upgrade will fix this.
    Can you attach an export of this user's permissions so I can ensure I'm reproducing your scenario as accurately as I can? You can get that in your web portal under Configuration > Teams > Test Permissions, as shown in our troubleshooting guide.

    I look forward to hearing back!

    Best regards,

    Kenny

  2. 2 Posted by jsphillips on 20 Jun, 2017 05:53 PM

    jsphillips's Avatar

    At the time of this post i was running 3.3.27 however now we are running 3.14.1. The odd thing is the fact that the permissions as is work but when putting projects in it kills the variable set stg view.

    I have attached a user who is in a group which is added to the team with this access. This same group is also in a view only group for higher level environments past staging.

  3. Support Staff 3 Posted by Kenneth Bates on 22 Jun, 2017 06:43 AM

    Kenneth Bates's Avatar

    Hi,

    Thanks for following up and providing that information. Sorry about the delay in getting back to you. Sadly I still haven't been able to reproduce this behavior (running 3.14.1) after configuring permissions to exactly match as your export shows. My user is able to view/edit variables scoped to my staging environment in my variable sets before and after scoping their teams to a project.

    Would you be able to attach a recorded gif of the behavior you're seeing? This gif can be captured using ScreenToGif, and the process is shown in our documentation.
    https://octopus.com/docs/how-to/record-a-problem-with-your-browser#...

    Specifically I'd like to see -

    • This user viewing variables in a variable set which are scoped to your staging environment,
    • Scoping the team to a project, showing which team is being scoped to which project, and
    • What the user then sees when trying to view the staging-scoped variables in your set

    Out of curiosity, are you seeing this same behavior on a different browser, and are there any other factors that could be related in any way?

    I look forward to getting to the bottom of this!

    Best regards,

    Kenny

  4. 4 Posted by jsphillips on 22 Jun, 2017 06:51 PM

    jsphillips's Avatar

    Kenneth -
    I didn't yet test with the new version of Octopus 3.14.1. I just got done testing and have found a solution I am comfortable with but one I still am curious about which you may be able to clarify.

    So with the new version i was able to scope the team to multiple projects and then login with a test account under that team and test. I was able to go into the projects and edit staging variables only correctly. When i tried to edit the other non staging variables in the project i was not able to correctly.

    Here is the kicker, when i went into an attached variable set i was not only now able to see staging but i was able to edit them correctly. I was also able to edit every other non staging variable inside those variable sets as well ! sys,prod,para,sprint, etc..... even though the team was only scoped to staging. So that is something you guys may want to look at. The permissions were the same as I sent you before. I would think that the variable sets would be locked down to edit just staging as well right ?

    I removed the variableset edit permissions from the team which in hindsight should have never been given even for staging. I think variable sets should only be edited by administrators since multiple projects utilize those sets. So at this point i have removed that and they can edit the hard coded staging variables and view the sets along with seeing staging without issue which is the way i want it to be going forward.

Reply to this discussion

Internal reply

Formatting help / Preview (switch to plain text) No formatting (switch to Markdown)

Attaching KB article:

»

Attached Files

You can attach files up to 10MB

If you don't have an account yet, we need to confirm you're human and not a machine trying to post spam.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac