Loading...

XML

Word

Printable

Type: Bug
Resolution: Unresolved
Priority: Major
Fix Version/s: None
Affects Version/s: quay-v3.11.0, quay-v3.12.0
Component/s: quay, quay-ui
Labels:
- triaged

Blocked:
False
Blocked Reason:
None
Ready:
False
Epic Link:
Global readonly Superusers can see all content
Intelligence Requested:
Market:

SFDC Cases Links:
SFDC Cases Counter:
SFDC Cases Open:

PX Impact Score:

Description:

This is an issue found in Quay 3.11 new UI, when enabled "FEATURE_SUPERUSERS_FULL_ACCESS", found users in the list of "GLOBAL_READONLY_SUPER_USERS" can't see organizations and image repo of other users, pls review this issue.

Quay: quay-operator-bundle-container-v3.11.0-29

Quay 3.11 with global readonly super user "test001":

Quay 3.11 with super user "quay" :

Quay config.yaml:

BROWSER_API_CALLS_XHR_ONLY: false
CREATE_PRIVATE_REPO_ON_PUSH: true
CREATE_NAMESPACE_ON_PUSH: true
FEATURE_QUOTA_MANAGEMENT: true
FEATURE_PROXY_CACHE: true
CREATE_REPOSITORY_ON_PUSH_PUBLIC: true
FEATURE_EXTENDED_REPOSITORY_NAMES: true
FEATURE_USER_INITIALIZE: true
FEATURE_GENERAL_OCI_SUPPORT: true
FEATURE_HELM_OCI_SUPPORT: true
FEATURE_PROXY_STORAGE: true
PERMANENTLY_DELETE_TAGS: true
SUPER_USERS:
  - quay
  - admin
GLOBAL_READONLY_SUPER_USERS:
  - test001
DISTRIBUTED_STORAGE_CONFIG:
    default:
      - GoogleCloudStorage
      - access_key: ******
        bucket_name: quaygcp2205
        secret_key: ******
        storage_path: /quay3401230a
DISTRIBUTED_STORAGE_DEFAULT_LOCATIONS:
  - default
DISTRIBUTED_STORAGE_PREFERENCE:
  - default
FEATURE_UI_V2: true
FEATURE_SUPERUSERS_FULL_ACCESS: true
FEATURE_AUTO_PRUNE: true