elemental icon indicating copy to clipboard operation
elemental copied to clipboard

Published 20 hours ago • verified publisher icon rancher

UI - Test RBAC role

Open juadk opened this issue 3 years ago • 2 comments
trafficstars

I think we need to test RBAC role in the UI. https://github.com/rancher/elemental/issues/332

juadk avatar Oct 03 '22 08:10 juadk

@agracey - what are the expectations for RBAC in Elemental UI ? Who should be able to do what ?

kkaempf avatar Oct 04 '22 04:10 kkaempf

Admin should have full access by default and any other user would need the role we created to do anything (including list).

Since it's relatively trivial to add roles ad hoc, I had figured we could get a few production use cases in to see how people use it. Then we could build in the common roles after we learn more.

agracey avatar Oct 04 '22 12:10 agracey

I tried to create a Standard User with only "Elemental Administrator" and I got 403 when I clicked on the OS management menu. After talking with dev, it will be fixed by https://github.com/rancher/elemental-ui/pull/26

juadk avatar Oct 31 '22 08:10 juadk

https://github.com/rancher/elemental/pull/485 adds simple tests and I will provide more in a separate PR once the issue fixed by the UI team. The idea is to run the k3s test as admin user and the RKE2 with a standard user granted with elemental-administrator role.

juadk avatar Nov 03 '22 14:11 juadk