Complete users page about javascript HOT 12 CLOSED

@libreliodev I couldn't connect to dynamodb. There is problem in permission.
AccessDeniedException: User: arn:aws:iam::105216790221:user/developer is not authorized to perform: dynamodb:ListTables on resource: *
I couldn't find a place for setting target in dynamodb, Probably every IAM user has a dynamodb.

from javascript.

@serverfire You do not need to "ListTables", and it is intentional that app admins do not have the right to do so.

We made a few modifications to what was mentioned above, and here are some additional details:

• the table used for all users is arn:aws:dynamodb:eu-west-1:105216790221:table/Users (instead of arn:aws:dynamodb:eu-west-1:105216790221:table/Subscribers)
• there is a different hash key for each app. The attribute name of this key is "App", the value is "[publisher]_[app]" (for example "developer_app1")
• the range key is the User Name, the attribute name for this range key is "User Name"
• there are 2 additional attributes: "Password" (string) and "Status" (number)

So, for example, if you want to list the users of "app1" of "developer", you need to perform a query with "App"="developer_app1"

from javascript.

@libreliodev Now i get this error.
AccessDeniedException: User: arn:aws:iam::105216790221:user/developer is not authorized to perform: dynamodb:Query on resource: arn:aws:dynamodb:eu-west-1:105216790221:table/Users

Request is a dynamodb query with Condition "App"="publisher_app".

from javascript.

@serverfire

Now i get this error.
AccessDeniedException: User: arn:aws:iam::105216790221:user/developer is not authorized to perform: dynamodb:Query on resource: arn:aws:dynamodb:eu-west-1:105216790221:table/Users

Request is a dynamodb query with Condition "App"="_".

As specified above, you should use for example "App"="developer_app1".

"App"="_" will fail for 2 reasons:

• "developer" is not allowed to perform such a query.
• there are no records with Condition "App"="_".

from javascript.

@libreliodev
Request Condition was "App"="developer_app1". There was a error in comment i wrote.

from javascript.

@serverfire

There may have been a mistake in the permissions, sorry. We updated the policy, can you check and let me know if it' OK?

from javascript.

@libreliodev Thank you!
No permission error anymore. Anyway result was empty.

from javascript.

@serverfire Thanks.

However, the result should not be empty, there are 2 records. There might still be a permission issue preventing you from seeing them.

from javascript.

@libreliodev Sorry wrong report. I was testing it another app. app1 have two records.

from javascript.

@serverfire OK, thanks again.

from javascript.

@libreliodev Please check this issue.
Thank you

from javascript.

@serverfire Successfully tested.

from javascript.