dashboard icon indicating copy to clipboard operation
dashboard copied to clipboard

Add Get and List permissions for nodetemplates and other resources to help backend

Open gaktive opened this issue 1 year ago • 14 comments

Overall, it seems reasonable for the cluster owner to be able to edit the cluster configuration even if they are only a member of user-base global group.

As it (the UI) is today in order to properly render the Edit config UI we need the user-base role to have at least get and list permissions for nodetemplates and potentially other resources (nodedrivers, etc).

We don't want to add additional permissions to the user-base global role as it meant to have minimal possible privileges.

Instead, we would like to change the UI to render and allow to edit as much as possible of the cluster configuration with the given permissions.

Originally posted by @pmatseykanets in https://github.com/rancher/rancher/issues/40581#issuecomment-1724412413

gaktive avatar Sep 28 '23 23:09 gaktive