Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-6492

Inconsistent user expeience for creating new projects after persmissions have been revoked

    XMLWordPrintable

Details

    • Low
    • ODC Sprint 231
    • 1
    • Rejected
    • False
    • Hide

      None

      Show
      None

    Description

      Description of problem:

      Remove the self-provisioner role for the system authenticated users as per  https://access.redhat.com/solutions/4040541 to stop users from having the ability to create new projects, but the customer has found this is only partially working. It appears that when you use cluster Web UI Administrator view, the "Create Project" button is not available but switching to the default Developer view default user can create a project

      Version-Release number of selected component (if applicable):

       

      How reproducible:

      Follow https://access.redhat.com/solutions/1529893

      Steps to Reproduce:

      1. oc adm policy remove-cluster-role-from-group self-provisioner system:authenticated:oauth
2. log back in as user and switch between admin/Dev view
3. User still has link showing in Dev console

      Actual results:

      Create new project link still exists

      Expected results:

      Create new project link should be removed, similar to Admin Console

       

      Additional info:

      Although the loink still exists, the user get's a correct permission denied message.

      Attachments

        1. developer_view.JPG
          developer_view.JPG
          182 kB
        2. administrator_view.JPG
          administrator_view.JPG
          196 kB
        3. developer_view1.JPG
          developer_view1.JPG
          156 kB

        Issue Links

          depends on

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-6758 `create a project` link not backed by RBAC check

          • Normal - To be worked after urgent and high priorities are resolved. This term is chosen when the severity of an issue is relatively close to the level of effort to fix it. The existence of an easily implemented workaround can also lead to this priority level instead of a higher priority.
          • Closed
          is cloned by

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-7478 Inconsistent user expeience for creating new projects after persmissions have been revoked

          • Minor - To be worked after urgent, high, and medium priorities are resolved. This term is chosen when the severity of the issue is low, or the complexity or effort to correct it may be higher, relatively speaking. For low priority issues, known workarounds exist or are not needed due to the trivial effort needed to address the issue.
          • Closed
          is depended on by

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-7478 Inconsistent user expeience for creating new projects after persmissions have been revoked

          • Minor - To be worked after urgent, high, and medium priorities are resolved. This term is chosen when the severity of the issue is low, or the complexity or effort to correct it may be higher, relatively speaking. For low priority issues, known workarounds exist or are not needed due to the trivial effort needed to address the issue.
          • Closed
          links to

          GitHub openshift/console#12514: [release-4.11] OCPBUGS-6492: Add RBAC check on Create a Project link in all-namespaces pages

          Activity

            People

              viraj-1 Vikram Raj
              rhn-support-sburke Sean Burke
              Sanket Pathak Sanket Pathak
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: