Uploaded image for project: 'OpenShift Virtualization'
  1. OpenShift Virtualization
  2. CNV-18249

[2086303] non-priv user can't create VM when namespace is not selected

XMLWordPrintable

    • Medium

      Description of problem:
      a non-priv user can not create a VM if 'all-namespaces' is selected as namespace.

      Version-Release number of selected component (if applicable):

      How reproducible:
      100%

      Steps to Reproduce:
      1. login as non-priv user and navigate to Virtualization -> Catalog
      2. select any template (make sure no namespace is selected)
      3. click on "Customize VirtualMachine"
      4. click on "Review and create Virtual Machine"
      5. get following error:
      Create VirtualMachine error
      processedtemplates.template.openshift.io is forbidden: User "test" cannot create resource "processedtemplates" in API group "template.openshift.io" in the namespace "default"

      Actual results:
      since no namespace was selected, we assign the namespace "default" to our process request, as non-priv user has no permission to process a template in that namespace we fail

      Expected results:
      we want to alert the user that there is no namespace selected, and should not allowed to continue with the create VM process

      Additional info:

            aturgema Aviv Turgeman
            aturgema Aviv Turgeman
            Guohua Ouyang Guohua Ouyang
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: