Only default domain available with role AUTHORED_SHORT_URLS

[samuelwaeny]

Shlink version

4.4.6

PHP version

8.4.5

How do you serve Shlink

Docker image

Database engine

SQLite

Database version

?

Summary

When deploying a clean docker image, adding multiple domains and then creating a new API key with the role AUTHORED_SHORT_URLS, only the default domain is available when creating new links.

[acelaya]

When the API key has the AUTHORED_SHORT_URLS role, the list of domains should only return domains that have been previously used with any of the short urls created with that same API key, even if the server "knows" other domains.

Were you expecting to see any domain created with any API key, or is it not working as described above?

[acelaya]

There's no way to limit the domains with this role. The author will still be able to end up using other domains, or use ones that exist but are not known to them.

[samuelwaeny]

Ok, the name of the role just suggests that this only restricts the shortlinks visible, not the domais or other settings. But thanks for the clarification!

[acelaya]

Ok, the name of the role just suggests that this only restricts the shortlinks visible, not the domais or other settings

Yes, and that's precisely the case 😅

[samuelwaeny]

I think we do not talk about the same thing.

I have a api-key (without any role) and just one shortlink created on domain A. When I use it to view the Web UI and open the dialog to create a new shortlink i have all the configred domains of the server, including the domain A and the default domain.

Now I create a record in the api_key_roles database table, referencing the api-key and the role AUTHORED_SHORT_URLS. The same api-key now gets only the domain A and the default domain in the dropdown, therefore the role does not only restrict the shortlinks but also the domains – or am I missing something?

[acelaya]

It's not a restriction. As I explained, you can still create short urls for that domain, or even other new domains, but to the eyes of the person using that API key, that domain is new, that's why it is not listed until it is used in at least one short URL created with that API key.

[franco640]

Hi,

I hate to ask, but could you provide a docker compose file of your setup, excluding any sensitive info of course. I'm having issues setting this up and have posted a message with no response for some time. Furthermore, I would really appreciate your assistance on where I went wrong

Thanks

[samuelwaeny]

What part aren't you able to reproduce?

[franco640]

This is my post

https://github.com/shlinkio/shlink/discussions/2404

It shows my complete docker compose file. It just says I can't connect to the server