auth permission

Note: If your issue/bug is regarding the AWS Amplify Console service, please log it in the Amplify Console GitHub Issue Tracker

Describe the bug permission with iam provider work different from amazon cognito provider

with amazon cognito provider if read operation not provided, user with no group can read model but with iam provider i cannot read

if i add operations read with iam provider, then user with iam authentication can read but user with no group or user with group with no read operation cannot read

Amplify CLI Version 4.13.1

To Reproduce Create schema like this

type ProductCategory
  @model
  @auth(
    rules: [
      # admin
      { allow: groups, groups: ["admin"], operations: [create, update, delete] }
      # iam for lambda
      { allow: private, provider: iam, operations: [create, update, delete] }
    ]
  ) {
  id: ID!
  createdAt: AWSDateTime
  updatedAt: AWSDateTime

  name: String!
  description: String
}

Expected behavior graphql using iam permission can read listProductCategorys (same permission with if provider amazon cognito)

Screenshots

Desktop (please complete the following information):

• OS: Ubuntu
• Node Version. 13.5.0

Additional context Add any other context about the problem here.

[bengsiswantoh]

Thank you for the response @SwaySway

but if i can the schema into this

type ProductCategory
  @model
  @auth(
    rules: [
      # admin
      { allow: groups, groups: ["admin"], operations: [create, update, delete] }
      # iam for lambda
      { allow: private, provider: iam, operations: [read ,create, update, delete] }
    ]
  ) {
  id: ID!
  createdAt: AWSDateTime
  updatedAt: AWSDateTime

  name: String!
  description: String
}

user with admin group or user with no group cannot read this model. do you have a solution for this?

[github-actions[bot]]

This issue has been automatically locked since there hasn’t been any recent activity after it was closed. Please open a new issue for related bugs.

Looking for a help forum? We recommend joining the Amplify Community Discord server *-help channels for those types of questions.