-
Story
-
Resolution: Unresolved
-
Normal
-
None
-
None
-
False
-
-
False
-
Unset
-
CRCPLAN-232 - AuthZ | PRBAC v2 Service Provider Migration Initiation (Internal)
-
None
-
-
Account for service account deletion:
https://github.com/RedHatInsights/insights-rbac/blob/master/rbac/management/principal/it_service.py#L97
If the SA does not exist, have to clean that from our DB, and remove the relationships from spiceDB
- clones
-
RHCLOUD-35541 So access checks can be consistent between users and service accounts, use service account user ID for group membership relations and delete them when we detect the service account is removed
- Closed