dashboard icon indicating copy to clipboard operation
dashboard copied to clipboard

Prevent UI access to members on projects if they don't have the correct permissions

Open aalves08 opened this issue 2 years ago • 4 comments

Follow-up issue of: #5417

Setup

  • Rancher version: 2.6-head
  • Browser type & version: Any

Describe the bug Prevent UI access to members on projects if they don't have the correct permissions to manage members

To Reproduce

  1. Create a user testuser as a standard user
  2. Create a project called proj-owner and add testuser as a member with the role Project Owner
  3. Create a project called proj-manage-member and add testuser as a member with the role Manage Project Members
  4. Create a project called proj-view-member and add testuser as a member with the role View Project Members
  5. Create a project called proj-view-catalog and add testuser as a member with the role View Project Catalog
  6. login as testuser and check UI for edit config for each project

Result Several inconsistencies with UI being enabled, especially for managing members, where the edit interface is available when it shouldn't be

Expected Result 2) Edit interface for both Project and Members available and unblocked for input 3) Edit interface for Members available and unblocked for input, Project interface blocked for input 4) Edit interface for both Project and Members blocked for input 4) Edit interface fore Members not available, Project interface blocked for input

aalves08 avatar Apr 26 '22 16:04 aalves08

BE issue to tackle this: https://github.com/rancher/rancher/issues/34731

This has been moved to 2.7, according to latest updates on the issue. Shall we move the FE part to 2.7?

@nwmac @gaktive

aalves08 avatar May 25 '22 11:05 aalves08

@aalves08 we shall bump too if we're dependent on it.

gaktive avatar May 25 '22 15:05 gaktive

Backend pushed their work to 2.7.x. I'll push this to 2.7.1 and check in later.

gaktive avatar Sep 16 '22 21:09 gaktive

Thanks for the update @gaktive 🙏

aalves08 avatar Sep 19 '22 08:09 aalves08

Related issue https://github.com/rancher/dashboard/issues/3609

catherineluse avatar Nov 04 '22 20:11 catherineluse

Possible way forward via SURE-6164

richard-cox avatar Jun 28 '23 12:06 richard-cox