dashboard
dashboard copied to clipboard
Add Get and List permissions for nodetemplates and other resources to help backend
Overall, it seems reasonable for the cluster owner to be able to edit the cluster configuration even if they are only a member of user-base
global group.
As it (the UI) is today in order to properly render the Edit config UI we need the user-base
role to have at least get
and list
permissions for nodetemplates
and potentially other resources (nodedrivers, etc).
We don't want to add additional permissions to the user-base global role as it meant to have minimal possible privileges.
Instead, we would like to change the UI to render and allow to edit as much as possible of the cluster configuration with the given permissions.
Originally posted by @pmatseykanets in https://github.com/rancher/rancher/issues/40581#issuecomment-1724412413