{"action":"opened","issue":{"url":"https://api.github.com/repos/arangodb/arangodb/issues/2181","repository_url":"https://api.github.com/repos/arangodb/arangodb","labels_url":"https://api.github.com/repos/arangodb/arangodb/issues/2181/labels{/name}","comments_url":"https://api.github.com/repos/arangodb/arangodb/issues/2181/comments","events_url":"https://api.github.com/repos/arangodb/arangodb/issues/2181/events","html_url":"https://github.com/arangodb/arangodb/issues/2181","id":190095878,"number":2181,"title":"[Wishlist] Safeguard for removing RW-rights on _system for current user","user":{"login":"tomterl","id":494717,"avatar_url":"https://avatars.githubusercontent.com/u/494717?v=3","gravatar_id":"","url":"https://api.github.com/users/tomterl","html_url":"https://github.com/tomterl","followers_url":"https://api.github.com/users/tomterl/followers","following_url":"https://api.github.com/users/tomterl/following{/other_user}","gists_url":"https://api.github.com/users/tomterl/gists{/gist_id}","starred_url":"https://api.github.com/users/tomterl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tomterl/subscriptions","organizations_url":"https://api.github.com/users/tomterl/orgs","repos_url":"https://api.github.com/users/tomterl/repos","events_url":"https://api.github.com/users/tomterl/events{/privacy}","received_events_url":"https://api.github.com/users/tomterl/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-11-17T16:30:00Z","updated_at":"2016-11-17T16:30:00Z","closed_at":null,"body":"## my environment running ArangoDB\r\nI'm using the latest ArangoDB of the respective release series:\r\n- [ ] 2.8\r\n- [x] 3.0\r\n- [ ] self-compiled devel branch\r\n\r\nOn this operating system:\r\n- [ ] DCOS on\r\n  - [ ] AWS\r\n  - [ ] Azure\r\n  - [ ] own infrastructure\r\n- [x] Linux \r\n  - [ ] Debian .deb\r\n  - [x] Ubuntu .deb\r\n  - [ ] SUSE   .rpm\r\n  - [ ] RedHat .rpm\r\n  - [ ] Fedora .rpm\r\n  - [ ] Gentoo\r\n  - [ ] docker - official docker library\r\n  - [ ] other:\r\n- [ ] Windows, version: \r\n- [ ] MacOS, version:\r\n\r\n### this is a web interface-related issue:\r\nI'm using the web interface with this browser:     running on this OS:\r\n- [x] authentication is enabled?\r\n- [ ] using the cluster?\r\n- [x] _system database?\r\n\r\nThese are the steps to reproduce:\r\n1) open the browser on http://127.0.0.1:8529\r\n2) log in as ...\r\n3) use database [x] `_system` [ ] other: \r\n4) Click on users\r\n5) Click on Current User in the list\r\n6) Click on Permissions\r\n7) Click on the RW-Rights checkbox for _system\r\n\r\nThe following problem occurs: You just lost you admin-rights on _system; You can turn off authorization in the db-config and restart the service, unfortunately for me, not ad-hoc in prodution systems.\r\n\r\nInstead I would be expecting: A single safe-guard popup asking me, if I really want to bereave myself of admin rights to _system.\r\n\r\nIn my case, it was a not deliberate click with a tablet or accidental key-shortcut that caused this (I guess); a co-worker could rectify the situation in time, but I guess there are situations, where this could be disastrous."}}
{"actor":{"display_login":"tomterl"}}