Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-23125

User can impersonate to all the user without the appropriate rolebinding

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Major Major
    • 4.15.0
    • 4.13, 4.12
    • Management Console
    • None
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • No
    • None
    • None
    • None
    • +
    • Done
    • Bug Fix
    • Hide
      * Previously, impersonation access was incorrectly applied. With this update, the console correctly applies impersonation access. (link:https://issues.redhat.com/browse/OCPBUGS-23125[*OCPBUGS-23125*])
      Show
      * Previously, impersonation access was incorrectly applied. With this update, the console correctly applies impersonation access. (link: https://issues.redhat.com/browse/OCPBUGS-23125 [* OCPBUGS-23125 *])
    • None
    • None
    • None
    • None

      Description of problem:

          User can impersonate to all the user without the appropriate rolebinding

      Version-Release number of selected component (if applicable):

      How reproducible:

      Steps to Reproduce:

      1. Login OCP as cluster-admin, and assign cluster-reader role to the user (eg: testuser-0)
2. Impersonate User <username> on the Users page (User list --> click on three dots --> click on "Impersonate User <Username>")
3. Go to User page again, check if the 'Impersonate User <username>' option is enabled
4. Move the user into a group, and do the same steps(1-3)    

      Actual results:

      Expected results:

      Additional info:

              rhn-engineering-rhamilto Robb Hamilton
              rhn-support-ssardar Sameer Sardar
              None
              None
              Xiyun Zhao Xiyun Zhao
              None
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

                Created:
                Updated:
                Resolved: