-
Epic
-
Resolution: Unresolved
-
Normal
-
None
-
None
-
[QE] RBAC: Unable to manage permission evaluation priority
-
S
-
False
-
-
False
-
-
To Do
-
RHIDP-6494 - RBAC: Manage permission hierarchy
-
QE Needed, Docs Needed, TE Needed, Customer Facing, PX Needed
-
0% To Do, 50% In Progress, 50% Done
-
Release Note Not Required
-
Release Note Not Required
-
-
EPIC Goal
The goal of this is to create the QE work related to the epic managing the priorities of conditional policies versus permissions policies.
Background/Feature Origin
In our current implementation, we have a default order in which conditional policies are evaluated first followed by regular permissions policies. As such, this leads to conditional policies having priority over regular permissions policies. Some members of the upstream community have expressed issues with this and have requested regular permissions policies have a higher priority for evaluation.
Why is this important?
This Epic is intended to capture the work related in testing the ability to give those users more control over the evaluation order.
User Scenarios
- As an admin, I wish to be able to set the order in which permission policies and conditional policies are evaluated so that I can more control over priority
- As an admin, I expect a permission policy to give full access to the user over a conditional policy whenever I decide that the permission policies will have a higher priority
- As an admin, I expect a conditional policy to give partial access to the user over a permission policy whenever I decide that the conditional policies will have a higher priority
Dependencies (internal and external)
Acceptance Criteria
Release Enablement/Demo - Provide necessary release enablement details
and documents
DEV - Upstream code and tests merged: <link to meaningful PR or GitHub
Issue>
DEV - Upstream documentation merged: <link to meaningful PR or GitHub
Issue>
DEV - Downstream build attached to advisory: <link to errata>
QE - Test plans in Playwright: <link or reference to playwright>
QE - Automated tests merged: <link or reference to automated tests>
DOC - Downstream documentation merged: <link to meaningful PR>