Uploaded image for project: 'OCMUI - OpenShift Cluster Manager UI'
  1. OCMUI - OpenShift Cluster Manager UI
  2. OCMUI-1972

[ROSA lockbox] Restrict the UI actions on AR when cluster provided with access roles such as cluster editor and machine pool editor.

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Normal Normal
    • None
    • None
    • Core UI
    • False
    • Hide

      None

      Show
      None
    • False
    • OCMUI Core Sprint 256

      Description of problem:

      Currently an org member user has been invited to a cluster (has a pending access requests) as either Cluster editor or Machine pool editor roles. Org member user allowed to open the pending AR definition from the cluster and allowed with deny or approve action. Fortunately the backend detect the access issue report the failure on UI dialog. In above case the UI should be handled in better way i.e. do not allow user to update any action around AR if permission is missing. This need to be blocked once user opens the AR model to deny or approve it.   

      How reproducible:
      Always

      Steps to Reproduce:

      1. Launch OCM UI staging.
      2. Create Access request for a ROSA cluster.
      3. Go to cluster's Access control tab > OCM roles and access
      4. Grant a new role either Cluster editor or machine pool editor for one of your org member user. Save it.
      5. Login with org member user in OCM UI staging.
      6. Open the Cluster (used in Step 4) and go to Access requests tab.
      7. Open pending AR.
      8. Try to deny or approve the AR and save the changes
      9. Observe the behavior.

      Actual results:

      At step 8, User has not blocked by approving or deny action from UI although user has no permission to deny or approve the AR. The backend call reported failure due access restriction and blocked user from succeeding above action.

      Expected results:

      At step7, The user needs to be blocked i.e. an indication about the access permission (as seen in screenshot) with disabled save action should be shown in AR model.

              emingora Enrique Mingorance Cano
              jmekkatt@redhat.com Jayakrishnan Mekkattillam
              Vitor Graziano Vitor Graziano (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: