1462459 - Missing scopes are reported incorrectly

Status: RESOLVED INVALID

(Taskcluster :: Services, defect)

Description

[Maja Frydrychowicz :impossibus (was :maja_zf) (needinfo me)]

In the Client Manager, when I try to update the scopes of one of my existing clients I get an error that states I am missing scopes. However, I do actually have the required scopes -- it even says so in the error message. "You are missing scopes x, y. You have scopes x, y, z." (See below.)

Credentials Manager also shows that I have the required scopes.

So either I should be allowed to perform the action I'm requesting or the error message is inaccurate and I'm missing some other scopes.


Error message ======

You do not have sufficient scopes. You are missing the following scopes:

assume:moz-tree:level:1:gecko, assume:mozilla-group:active_scm_level_1

You have the scopes:

[ "assume:everybody", "assume:hook-id:garbage/", "assume:hook-id:project-testpilot/", "assume:login-identity:mozilla-auth0/ad|Mozilla-LDAP|mfrydrychowicz", "assume:moz-tree:level:1:comm", "assume:moz-tree:level:1:gecko", "assume:mozilla-group:DevServicesWiki", "assume:mozilla-group:IntranetWiki", "assume:mozilla-group:StatsDashboard", "assume:mozilla-group:active_scm_level_1", "assume:mozilla-group:all_scm_level_1", "assume:mozilla-group:cloudservices_dev", "assume:mozilla-group:cloudservices_dev_ssh", "assume:mozilla-group:corp-vpn", "assume:mozilla-group:egencia_ca", "assume:mozilla-group:irccloud", ...]

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

It looks like you tried to add the single scope "assume:moz-tree:level:1:gecko, assume:mozilla-group:active_scm_level_1" rather than ["assume:moz-tree:level:1:gecko", "assume:mozilla-group:active_scm_level_1"]?

Comment 2

[Maja Frydrychowicz :impossibus (was :maja_zf) (needinfo me)]

Oh, wow. Indeed.

I have some suggestions for the Credentials Manager UI, then -- e.g. state that one scope per line is expected. :)

Comment 3

[Maja Frydrychowicz :impossibus (was :maja_zf) (needinfo me)]

Or Client Manager, rather.

Comment 4

[Maja Frydrychowicz :impossibus (was :maja_zf) (needinfo me)]

Filed https://github.com/taskcluster/taskcluster-tools/issues/529

Thanks for the quick reply, Dustin.