Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-6492

Inconsistent user expeience for creating new projects after persmissions have been revoked


    • Low
    • None
    • ODC Sprint 231
    • 1
    • Rejected
    • False
    • Hide



      Description of problem:

      Remove the self-provisioner role for the system authenticated users as per  https://access.redhat.com/solutions/4040541 to stop users from having the ability to create new projects, but the customer has found this is only partially working. It appears that when you use cluster Web UI Administrator view, the "Create Project" button is not available but switching to the default Developer view default user can create a project

      Version-Release number of selected component (if applicable):


      How reproducible:

      Follow https://access.redhat.com/solutions/1529893

      Steps to Reproduce:

      1. oc adm policy remove-cluster-role-from-group self-provisioner system:authenticated:oauth
      2. log back in as user and switch between admin/Dev view
      3. User still has link showing in Dev console

      Actual results:

      Create new project link still exists

      Expected results:

      Create new project link should be removed, similar to Admin Console


      Additional info:

      Although the loink still exists, the user get's a correct permission denied message.

        1. administrator_view.JPG
          196 kB
          Sean Burke
        2. developer_view.JPG
          182 kB
          Sean Burke
        3. developer_view1.JPG
          156 kB
          Sean Burke

            viraj-1 Vikram Raj
            rhn-support-sburke Sean Burke
            Sanket Pathak Sanket Pathak
            0 Vote for this issue
            6 Start watching this issue