Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-7478

Inconsistent user expeience for creating new projects after persmissions have been revoked

XMLWordPrintable

    • Low
    • None
    • ODC Sprint 232
    • 1
    • Rejected
    • False
    • Hide

      None

      Show
      None

      Description of problem:

      Remove the self-provisioner role for the system authenticated users as per  https://access.redhat.com/solutions/4040541 to stop users from having the ability to create new projects, but the customer has found this is only partially working. It appears that when you use cluster Web UI Administrator view, the "Create Project" button is not available but switching to the default Developer view default user can create a project

      Version-Release number of selected component (if applicable):

       

      How reproducible:

      Follow https://access.redhat.com/solutions/1529893

      Steps to Reproduce:

      1. oc adm policy remove-cluster-role-from-group self-provisioner system:authenticated:oauth
      2. log back in as user and switch between admin/Dev view
      3. User still has link showing in Dev console
      

      Actual results:

      Create new project link still exists

      Expected results:

      Create new project link should be removed, similar to Admin Console

       

      Additional info:

      Although the loink still exists, the user get's a correct permission denied message.

        1. administrator_view.JPG
          administrator_view.JPG
          196 kB
        2. developer_view.JPG
          developer_view.JPG
          182 kB
        3. developer_view1.JPG
          developer_view1.JPG
          156 kB

            viraj-1 Vikram Raj
            rhn-support-sburke Sean Burke
            Sanket Pathak Sanket Pathak
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: