Uploaded image for project: 'OpenShift Virtualization'
  1. OpenShift Virtualization
  2. CNV-22304

[2140534] [View only] it should give a permission error when user clicking the VNC play/connect button as a view only user

XMLWordPrintable

    • Moderate
    • None

      Description of problem:
      It should give a permission error when user click VNC play or VNC connect button for view only user.

      Version-Release number of selected component (if applicable):

      How reproducible:

      Steps to Reproduce:
      1. create a running vm in a project
      2. create a non-admin user and assign view only permission to the project
      $ oc adm policy add-role-to-user view test -n default
      3. view the VM VNC console

      Actual results:
      nothing happens when clicking the VNC play button

      Expected results:
      Give an error like the command line:
      $ virtctl vnc -n ecosystem-engineering centos-stream8-slight-hamster
      Can't access VMI centos-stream8-slight-hamster: virtualmachineinstances.subresources.kubevirt.io "centos-stream8-slight-hamster" is forbidden: User "dkenigsb" cannot get resource "virtualmachineinstances/vnc" in API group "subresources.kubevirt.io" in the namespace "ecosystem-engineering"

      Additional info:

              rh-ee-dorr Dana Orr
              gouyang1@redhat.com Guohua Ouyang
              Guohua Ouyang Guohua Ouyang
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: