XMLWordPrintable

    • 1
    • False
    • None
    • False
    • Observability Sprint 2023-03
    • Important
    • No

      Description of problem:

      When authenticated as a user (not kubeadmin), the user is unable to create a saved search, with a "forbidden" error.

       

      Version-Release number of selected component (if applicable): 2.8.0

      How reproducible: Always

      Steps to Reproduce:

      1. Log as user and save a search.

      Actual results:

      userpreferences.console.open-cluster-management.io is forbidden: User "user1" cannot create resource "userpreferences" in API group "console.open-cluster-management.io" at the cluster scope

      Expected results:

      User doesn't require special permission to create a saved search.

      Additional info:

      The problem is because the action is executed as the logged user. In previous implementations, the actor of this action was the search-api service account.

        1. image-2023-02-27-15-01-19-109.png
          94 kB
          Jorge Padilla
        2. image-2023-03-17-15-58-33-227.png
          104 kB
          Jorge Padilla
        3. image-2023-03-17-16-01-50-757.png
          109 kB
          Jorge Padilla

            zlayne@redhat.com Zackery Layne
            jpadilla@redhat.com Jorge Padilla
            Xiang Yin Xiang Yin
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: