User permissions to allow npm login and npm publish on a repo for Nexus 3.

[Daniel Holmes]

Using a user with full admin permissions, I am able to npm login and npm publish to a repository.

I'm now trying to create a role that is limited to only being able to do these actions against a particular hosted npm repository. It seems that having just the view add/read permissions on the repository are not enough (I get a 404 to my npm login).

Does anyone know the privileges that I need to minimally add to my role to enable this?

Thanks

Daniel

[Peter Lynch]

On Fri, Jul 28, 2017 at 3:43 PM, Daniel Holmes <dho...@netapp.com> wrote:

Using a user with full admin permissions, I am able to npm login and npm publish to a repository.

I'm now trying to create a role that is limited to only being able to do these actions against a particular hosted npm repository. It seems that having just the view add/read permissions on the repository are not enough (I get a 404 to my npm login).

What version of Nexus? What exact URL is returning 404? Was this a proxy repository?

https://issues.sonatype.org/browse/NEXUS-10149 fixed in 3.1.0+

Does anyone know the privileges that I need to minimally add to my role to enable this?

Thanks

Daniel

--
You received this message because you are subscribed to the Google Groups "Nexus Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to nexus-users+unsubscribe@glists.sonatype.com.
To post to this group, send email to nexus...@glists.sonatype.com.
To view this discussion on the web visit https://groups.google.com/a/glists.sonatype.com/d/msgid/nexus-users/96e5df11-faae-4f02-9d88-7fed32de88f1%40glists.sonatype.com.
For more options, visit https://groups.google.com/a/glists.sonatype.com/d/optout.

[Daniel Holmes]

Sorry, Nexus 3. 

This is a hosted repository.

As mentioned, with full Nexus admin I'm able to publish.  I'm trying to determine minimal permissions for a role for only being able to publish to this NPM repo.

 

[Daniel Holmes]

Never mind, it is the create and read privs that I need.  I was moving from my dev to production instance and didn't realize that we had configured the context path on the prod one, so my URLs did not translate.