Uploaded image for project: 'OpenShift Virtualization'
  1. OpenShift Virtualization
  2. CNV-17947

[2081295] openshift is not listed as avaliable project for user that can list templates from openshift project

XMLWordPrintable

    • None

      Description of problem:
      openshift is not listed as avaliable project for user that can list templates from openshift project

      a user can list projects on this cluster
      when listing the project "openshift" is not listed

      a user can list templates from "openshift"

      Why this is a problem:
      the UI does not allow users to free write names of projects, they only allow to choose one of the projects they can see.

      So a user that can list templates from "openshift" namespace will not be able to do it from the UI because they will not have "openshift" namespace available from the projects lists.

      ```
      $ oc get projects
      NAME DISPLAY NAME STATUS
      openshift-virtualization-os-images Active
      test-aviv Active

      $ oc get templates -A
      Error from server (Forbidden): templates.template.openshift.io is forbidden: User "test" cannot list resource "templates" in API group "template.openshift.io" at the cluster scope

      $ oc get templates -n openshift
      NAME DESCRIPTION PARAMETERS OBJECTS
      3scale-gateway 3scale's API
      ```

      Version-Release number of selected component (if applicable):

      How reproducible:

      Steps to Reproduce:
      1. login to a cluster a non privileged user
      2. list all projects
      3. list templates from namespace "openshift"

      Actual results:
      A user that can list templates on "openshift" namespace
      can't see project "openshift" when listing projects

      Expected results:
      A user that can list templates on "openshift" namespace
      can see project "openshift" when listing projects

      Additional info:

              tnisan@redhat.com Tal Nisan
              yzamir@redhat.com Yaacov Zamir
              Geetika Kapoor Geetika Kapoor
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: