ACL to retrieve user information

[CEA-SEPIA]

Hello,

When I try to retrieve the information (GET /user/{uid}) of a
connected user (himself) I get a Unauthorized response.

Which ACL rules has to be applied to allow the user to access to their
information ?

Thanks

[CEA-SEPIA]

I try:
bin/ucectl acl add --uid 'mms' --org 'cea' --object 'user' --action
'get'

But all my user can get user informations, not only 'mms'.

I also try:
bin/ucectl acl add --uid 'mms' --org 'cea' --object 'user' --action
'get' --user '_uid_'

But all my user can get user informations, not only 'mms', and they
can retrieve informations of other users.

Is it a mistake in my tuples ?

Thanks

bin/ucectl acl add --uid 'mms' --org 'cea' --object 'user' --action
'get' --user '_uid_'
On 17 jan, 18:57, Victor Goya <bebepho...@gmail.com> wrote:

> The required right is:
> object='user'
> action='get'
>
> The only condition is user='_uid_', to limit the right to a single user
> with its uid.
>
> --
> Victor Goya

[CEA-SEPIA]

Maybe a mistake from my side but for this acl rule:

bin/ucectl acl add --uid 'mms' --org 'cea' --object 'user' --action

Only mms have access to the functionnality sorry. This wasn't an
error.

This rule: bin/ucectl acl add --uid 'mms' --org 'cea' --object 'user'
--action --user '_uid_'

Doesn't work for me. Where is the mistake ? Can you document a little
more the ACL objects ?

Thanks