Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-6882

Quay new UI global readonly superuser can't see all organizations and image repos

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • quay-v3.11.0, quay-v3.12.0
    • quay, quay-ui
    • False
    • None
    • False

      Description:

      This is an issue found in Quay 3.11 new UI, when enabled "FEATURE_SUPERUSERS_FULL_ACCESS", found users in the list of  "GLOBAL_READONLY_SUPER_USERS" can't see organizations and image repo of other users, pls review this issue.

      Quay: quay-operator-bundle-container-v3.11.0-29

      Quay 3.11 with global readonly super user "test001":

      Quay 3.11 with super user "quay" :

      Quay config.yaml:

      BROWSER_API_CALLS_XHR_ONLY: false
      CREATE_PRIVATE_REPO_ON_PUSH: true
      CREATE_NAMESPACE_ON_PUSH: true
      FEATURE_QUOTA_MANAGEMENT: true
      FEATURE_PROXY_CACHE: true
      CREATE_REPOSITORY_ON_PUSH_PUBLIC: true
      FEATURE_EXTENDED_REPOSITORY_NAMES: true
      FEATURE_USER_INITIALIZE: true
      FEATURE_GENERAL_OCI_SUPPORT: true
      FEATURE_HELM_OCI_SUPPORT: true
      FEATURE_PROXY_STORAGE: true
      PERMANENTLY_DELETE_TAGS: true
      SUPER_USERS:
        - quay
        - admin
      GLOBAL_READONLY_SUPER_USERS:
        - test001
      DISTRIBUTED_STORAGE_CONFIG:
          default:
            - GoogleCloudStorage
            - access_key: ******
              bucket_name: quaygcp2205
              secret_key: ******
              storage_path: /quay3401230a
      DISTRIBUTED_STORAGE_DEFAULT_LOCATIONS:
        - default
      DISTRIBUTED_STORAGE_PREFERENCE:
        - default
      FEATURE_UI_V2: true
      FEATURE_SUPERUSERS_FULL_ACCESS: true
      FEATURE_AUTO_PRUNE: true 

              Unassigned Unassigned
              lzha1981 luffy zhang
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: