Uploaded image for project: 'OCMUI - OpenShift Cluster Manager UI'
  1. OCMUI - OpenShift Cluster Manager UI
  2. OCMUI-2914

Inconsistencies in OCMUI operations with a user granted with only role "machine pool editor"

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • None
    • Core UI
    • False
    • Hide

      None

      Show
      None
    • False

      Description of problem:

      An org member user has granted with role permission "machine pool editor" for a cluster. But in org member user login session, the UI options behavior is inconsistent.

      Details are below.

      1. All actions menu options are disabled for the user from the cluster . This is wrong and "Edit machine pool" option should be enabled as it is related to machine pool editor role definitions.
      2. "Edit cluster wide proxy" from Networking tab is enabled wrongly for the user. User allowed to update the changes. This is wrong as "machine pool editor" should not have access to update the same. Only org administrator or cluster owner or cluster editor roles should have the permission.

      How reproducible:

       Always

      Steps to reproduce:

      1. Launch OCM UI staging and login as org-admin user.
      2. Open a ROSA hypershift or ROSA classic cluster.
      3. Go to access control tab > OCM roles and access , click "Grant" button.
      4. Input Redhat login with a valid user name (ex: use a org-member user)
      5. Select Role as Machine pool editor and Click on "Grant role".
      6. Login to OCM UI Staging with the user granted permission in step 4 .
      7. Select and Open  the cluster(same as step 2).
      8. Go to "Networking" tab  and click "Edit cluster-wide proxy settings" button.
      9. Try to update the definitions and see the behavior.
      10. Go to cluster overview tab, Click "Actions" menu and see the options.

      Actual results:

      At step 9, "Edit cluster-wide proxy" button enabled and user allowed to update the definitions for the cluster.

      At step 10, All context menus under "Actions" options are disabled.

      Expected results:

      At step 9, "Edit cluster-wide proxy" button should be disabled  and restrict the user from updating the same.

      At step 10, All context menus except "Edit machine pool" option under "Actions" should be disabled.

              Unassigned Unassigned
              jmekkatt@redhat.com Jayakrishnan Mekkattillam
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: