Welcome to the Inedo Forums! Check out the Forums Guide for help getting started.
If you are experiencing any issues with the forum software, please visit the Contact Form on our website and let us know!
Publishing NPM Packages - Assigning Tasks/Permissions
-
When assigning tasks/permissions to publish NPM packages in ProGet, it seems to be necessary to give 'publish packages' permission for 'all feeds'. Specifying one specific feed, or even the NPM group is not sufficient, and results in the npm publish failing.
ProGet version 2024.36 (build 5)
-
Hi @kc_2466,
I'm having trouble recreating this issue. Are you using the built-in/unmodified publish packages task or did you create a custom one? If you created a custom one, please make sure all that all your options can be scoped to a feed (denoted by the "F").
Thanks,
Rich
-
I'm using the built-in/unmodified publish packages task. Also note, I'm using the free edition.
I've tried 'specific users...' and 'specific groups...' - but the same happen with either.
In the "tasks" box i'm only adding the 'publish packages' task.I've tried the specific feed i want to allow publishing to, and that fails.
I've tried <NPM> which is the feed group - which also fails.
However choosing <all feeds and groups> allows successful publishing.The client is using the API key for auth I believe.
-
Hi @kc_2466,
Feed-level security is not available in ProGet Free edition:
https://docs.inedo.com/docs/proget/administration/license#security-restrictionsYou can configure it, but as the UI should warn, it is not enforced.
You can request a free trial license for a paid version of ProGet from https://my.inedo.com/
Thanks,
Steve
-
@stevedennis - Thanks - switching to a trial of Basic Edition resolves the issue. However i'm fairly sure you don't get a UI warning when you setup a feed-level permission on the Free Edition.
Also you can add personal API keys in the free edition without warning - in fact on the API keys page, you even get a tick saying 'personal APU keys are enabled'
-
Hi @kc_2466 ,
The message "Feed-scoped Privileges are not available in ProGet Free Edition. You can still add them, but they will apply to all feeds." should be displayed when you add a privilege, but it's probably easy to miss. I'm not sure if we show it after that.
As for Personal API Keys, you can create them as an admin, but non-admin users can't create their own. It's a different page.
Cheers,
Steve
