Loading...

XML

Word

Printable

Type: Bug
Resolution: Unresolved
Priority: Undefined
Fix Version/s: 4.21.0
Affects Version/s: 4.20
Component/s: Networking / networking-console-plugin
Labels:
None

Activity Type:
Quality / Stability / Reliability
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Story Points:
None
Severity:
Moderate
Regression:
None

Target Backport Versions:
None
Target Version:

4.21.0
Release Blocker:
None
Sprint:
None

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

PX Impact Score:

Release Note Status:
None
Release Note Type:
None
Release Note Text:
None

Escape Reason:
None
Escape Impact:
None
Corrective Measures:
None
SDLC stage when should've been found:
None

Description of problem:

"VirtualMachine networks" menu is presenting for normal user but visiting will see permission error

Version-Release number of selected component (if applicable):

4.20.0-0.nightly-2025-09-10-095237

How reproducible:

Always

Steps to Reproduce:

    1. normal user login and navigate to Networking
    2.
    3.

Actual results:

1. normal user can see "VirtualMachine networks" menu, however visiting will return permission error

clusteruserdefinednetworks.k8s.ovn.org
 is forbidden: User "testuser-3" cannot list resource 
"clusteruserdefinednetworks" in API group "k8s.ovn.org" at the cluster 
scope

Expected results:

1. since normal user has no access to cluster-scope resource    "clusteruserdefinednetworks", we should hide "VirtualMachine networks" menu for them

Additional info:

links to

openshift/networking-console-plugin#275: OCPBUGS-61531: show VM network menu only on admin

Assignee:: Ugo Palatucci

Reporter:: YaDan Pei

Need Info From:: None

Contributors:: None

QA Contact:: Guohua Ouyang

Doc Contact:: None

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Created:: 2025/09/11 3:46 AM

Updated:: 2025/09/19 7:01 PM