I have already tried that and same error, most of people saying use "" "" "" will give you full access. On Thu, May 7, 2020 at 8:28 PM Thomas Goirand <zigo@debian.org> wrote:

On 5/8/20 12:18 AM, Satish Patel wrote:

...

Folks,

I am just playing with API and getting strange result, may be i am doing something wrong please correct me.

[root@aio1-rabbit-mq-container-5233d3c3 root]# rabbitmqctl list_vhosts Listing vhosts ... name /neutron /designate /keystone /aodh / /nova /glance /ceilometer

and i have configured monitoring user to query data from API

Following works and i am getting data #curl -s http://172.29.239.29:15672/api/vhosts --user monitoring:de4a28d10da980077cea | jq

now try to query specific vhosts like nova getting error

# curl -s http://172.29.239.29:15672/api/vhosts/nova --user monitoring:de4a28d10da980077cea | jq { "error": "not_authorised", "reason": "Not administrator user" }

Even i set full permission, getting same error no_authorised, what i am missing?

# rabbitmqctl set_permissions monitoring -p /nova "" "" ""

As per: https://www.rabbitmq.com/access-control.html

The syntax is: rabbitmqctl set_permissions 'username' -p '/nova' '.*' '.*' '.*'

Cheers,

Thomas Goirand (zigo)

I did following # rabbitmqctl add_user test test # rabbitmqctl set_user_tags test administrator # rabbitmqctl set_permissions -p / test ".*" ".*" ".*" Now i am getting following error, look like something is missing here, my vhost name is /nova so do i need to specify "/" in api call? # curl -s http://172.29.239.29:15672/api/vhosts/nova --user test:test | jq { "error": "Object Not Found", "reason": "Not Found" } On Thu, May 7, 2020 at 8:52 PM Mathieu Gagné <mgagne@calavera.ca> wrote:

Hi,

On Thu, May 7, 2020 at 6:18 PM Satish Patel <satish.txt@gmail.com> wrote:

...

# curl -s http://172.29.239.29:15672/api/vhosts/nova --user monitoring:de4a28d10da980077cea | jq { "error": "not_authorised", "reason": "Not administrator user" }

Even i set full permission, getting same error no_authorised, what i am missing?

# rabbitmqctl set_permissions monitoring -p /nova "" "" ""

Make sure your user as one of the following tag to be able to access the management interface: management, policymaker, monitoring or administrator tag

https://www.rabbitmq.com/management.html#permissions

-- Mathieu

Damn it, you are goddamn right!!! thank you.. On Thu, May 7, 2020 at 10:19 PM Mathieu Gagné <mgagne@calavera.ca> wrote:

I think you need to encode your / as %2F

So the URL becomes: http://172.29.239.29:15672/api/vhosts/%2Fnova

-- Mathieu

On Thu, May 7, 2020 at 9:39 PM Satish Patel <satish.txt@gmail.com> wrote:

...

I did following

# rabbitmqctl add_user test test # rabbitmqctl set_user_tags test administrator # rabbitmqctl set_permissions -p / test ".*" ".*" ".*"

Now i am getting following error, look like something is missing here, my vhost name is /nova so do i need to specify "/" in api call?

# curl -s http://172.29.239.29:15672/api/vhosts/nova --user test:test | jq { "error": "Object Not Found", "reason": "Not Found" }

On Thu, May 7, 2020 at 8:52 PM Mathieu Gagné <mgagne@calavera.ca> wrote:

...

Hi,

On Thu, May 7, 2020 at 6:18 PM Satish Patel <satish.txt@gmail.com> wrote:

...

# curl -s http://172.29.239.29:15672/api/vhosts/nova --user monitoring:de4a28d10da980077cea | jq { "error": "not_authorised", "reason": "Not administrator user" }

Even i set full permission, getting same error no_authorised, what i am missing?

# rabbitmqctl set_permissions monitoring -p /nova "" "" ""

Make sure your user as one of the following tag to be able to access the management interface: management, policymaker, monitoring or administrator tag

https://www.rabbitmq.com/management.html#permissions

-- Mathieu