This bug was reported by a customer.

Saurabh Gajendragadkar Feb 21st at 1:40 PM

ping forum-cluster-management,
I have a case 04063880 where customer informed that  any user from his account can access the clusters tab and have permissions to create and delete clusters in OCM (https://console.redhat.com/openshift/cluster-list) even when those users do not have any kind of administrator permissions. 

His requirement is that the user should not have permission to edit or create new cluster. (Please review screenshot of user permissions) means the "Create Cluster" and "Register cluster" buttons should be Grey out.
But in the console the user is able to create new clusters.
Could you please advise the customer?

Issues

• [Create Cluster] should be disabled if user doesn't have create cluster permissions.  It should have disabled tooptip explaining why it is disabled.

• Question remains, does ‘no cluster create permission’ apply to all the ways a user can create a cluster on the Create Cluster page, accessible from the [Create Cluster] button on the cluster list page?   From Create clusters page one can 'run it yourself' and install clusters in a data center and locally.
• [Register Cluster] Not sure if this should be disabled if one can't "create" a cluster, which seems different from 'registering' a cluster?

•  [Delete Cluster] was mentioned here, do we disabled delete cluster if user doesn't have permission to delete a cluster?

IF register and/or delete clusters need to be addressed, please fill separate bugs for them after this investigation.

Full Slack Thread

Update Apr 7 :

 [Create Cluster]

After checking with PM, these are the places we should disable buttons -

1. https://console.dev.redhat.com/openshift/create - OSD Trial, OSD, ROSA
2. https://console.dev.redhat.com/openshift/create/rosa/getstarted - "Create with web interface" button
3. https://console.dev.redhat.com/openshift/overview - "Create cluster" buttons on dedicated and ROSA cards
4. https://console.dev.redhat.com/openshift/overview/osd - "Create cluster" button
5. https://console.dev.redhat.com/openshift/overview/rosa - "Begin setup" button
6. https://console.dev.redhat.com/openshift/create/rosa/wizard "next" button - This will be tracked in a separate ticket

[Register Cluster] 

Currently no permission check in the UI. This will be tracked in a separate ticket

[Delete Cluster]

Disabled if no permission. No issue.