-
Story
-
Resolution: Done
-
Normal
-
None
-
False
-
False
-
- Users should be able to assign roles to groups on the groups view.
- Cypress tests are required.
-
ANSTRAT-423 - Direct LDAP connection from Private Hub in App without another VM being required
-
Problem Description
The current group management (pictured bellow) page needs to be updated to remove permission assignment and allow viewing and assigning roles to groups. Each group can have any number of roles assigned to it.
Proposed Solution
The new view should display a list of the roles attached to a group and provide a way for the user to preview the description and permissions for each role. It should also allow for users to search for roles and apply them to the group.
- is related to
-
AAH-1335 Demo of RBAC refactor UI changes
-
- Closed
-
- mentioned on
[AAH-1130] Update groups view to allow for role assignment.
GitLab CEE Bot
added a comment - CPaaS Service Account mentioned this issue in merge request !32 of aap-cpaas / config / python-galaxy-ng on branch ansible-automation-platform-2.3_upstream_e80072d69a5c3ea662426f590fbd4814:
Updated 2 upstream sources
GitLab CEE Bot
added a comment - CPaaS Service Account mentioned this issue in merge request !32 of aap-cpaas / config / python-galaxy-ng on branch ansible-automation-platform-2.3_ upstream _e80072d69a5c3ea662426f590fbd4814 : Updated 2 upstream sources 
Martin Hradil
added a comment - For 4.5.0, in order to hide roles not related to galaxy, we also have to:
- validate (in UI) the role name when creating/editing, and not allow saving a role unless the name starts with "galaxy."
- only offer roles using the `?name__startswith=galaxy.` filter when adding a role to a group or displaying all roles on the roles list screen
- EXCEPT that we want to show ALL roles when displaying the list of roles already added to a specific group
Martin Hradil
added a comment - For 4.5.0, in order to hide roles not related to galaxy, we also have to:
validate (in UI) the role name when creating/editing, and not allow saving a role unless the name starts with "galaxy."
only offer roles using the `?name__startswith=galaxy.` filter when adding a role to a group or displaying all roles on the roles list screen
EXCEPT that we want to show ALL roles when displaying the list of roles already added to a specific group
This is the empty state for the Group Access view
This is the Add Roles wizard: Step 1
- This is a filterable and paginated list
- A user can add multiple roles at at time
- The role description is present on the list as its own column
- When a user makes a selection, the next button becomes active
This is an example with filters applied (works as existing)
This is the selected view.
- Selected roles will be displayed on top as dismissible chips
This is the Preview step
- Each role is represented with its description and its associated permissions
- The roles are divided with a horizontal separator
- The permission chips are prepended with its category
- The tooltip on the permissions chip is optional to display a description
- When the user hits "Add," the selected roles will populate in the list view
This is the collapsed roles list view
This is the expanded roles list view
- Each role is represented with its description and its associated permissions in the expanded area
- The permissions are further categorized as they are currently
- The PF component for expanded compact table
This is the Remove role option from the kebab menu
- The PF danger icon (exclamation) is used for the header to indicate deletion/removal
- The role name and group name are bolded
dnewswan , mrahman@redhat.com and I would be happy to help on this but would like to have a demo of the area and the proposed solutions. Thanks!
CPaaS Service Account mentioned this issue in merge request !18 of aap-cpaas / config / automation-hub on branch ansible-automation-platform-2.3_upstream_8fa772d302ec4b907014213b8661f617: