-
Bug
-
Resolution: Done
-
Normal
-
Logging 5.6.0
-
False
-
None
-
False
-
NEW
-
VERIFIED
-
Before this change the dev console used cluster scoped queries instead of namespace scoped queries for filters. This change uses the correct scope and displays an error message when the user has no permission over the current namespace resources.
-
-
-
Log Storage - Sprint 229
Description of problem:
When a non-admin user selects a filter from the dropdown that includes pods or containers, it uses the cluster scoped API. This leads to an error as most non-admin users won't have permission over broad set of resources
Version-Release number of selected component (if applicable):
OCP 4.12
Logging 5.6
How reproducible:
Always
Steps to Reproduce:
- Enable Console plugin
- Create test projects using normal user
- Login to Openshift console as a normal user
- Switch to Developer mode
- Go to 'Aggregated logs' in 'Observe' menu
- In the filter Dropdown select "Pods" and click on "Filter by pod"
Actual results:
Error if the user does not have cluster-scoped list pods permission
Expected results:
No error when the user has namespace-scoped permissions to list pods
- links to
- mentioned on
(3 mentioned on)