Problem Description

With the new Pulp RBAC changes we will be assigning role/group combinations to objects instead of permission/group combinations. Our current widget looks like this:

Proposed Solution

The move to roles will require a couple of changes to this form. The most important is that the number of potential roles a user can pick from is unlimited (whereas right now there is a small set of permissions to pick from). Because of that, the new design will have to allow for:

• Searching for groups (like it currently does)
• Searching for Roles
  • Displaying a preview of the permissions on the role as the user is searching
  • Displaying the description of the role (if one is available) as the user is searching
• Removing roles from a group (just like we do with permissions now)
• Removing groups from the object (this remains unchanged)