Uploaded image for project: 'Red Hat OpenShift Data Science'
  1. Red Hat OpenShift Data Science
  2. RHODS-6281

RHODS admin users lose access to Settings section if one of the admin groups gets deleted

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • RHODS_1.24.0_GA
    • RHODS_1.20.0_GA
    • UI
    • False
    • None
    • False
    • Release Notes
    • Testable
    • No
    • 1.24.0
    • No
    • Hide
      == OpenShift Data Science admins could not access *Settings* page if an admin group was deleted from the cluster
      Previously, if an OpenShift Data Science administrator group was deleted from the cluster, administrator users could no longer access the *Settings* page on the OpenShift Data Science dashboard.

      In particular, the following behavior was seen:

      - When an administrator user tried to access the *Settings* -> *User management* page, a "Page Not Found" error appeared.
      - Cluster administrators _did not_ lose access to the *Settings* page on the OpenShift Data Science dashboard. When a cluster administrator accessed the *Settings* -> User *management* page, a warning message appeared, indicating that the deleted administrator group no longer existed in OpenShift. The deleted administrator group was then removed from `OdhDashboardConfig`, and administrator access was restored.

      This issue is now fixed.
      Show
      == OpenShift Data Science admins could not access *Settings* page if an admin group was deleted from the cluster Previously, if an OpenShift Data Science administrator group was deleted from the cluster, administrator users could no longer access the *Settings* page on the OpenShift Data Science dashboard. In particular, the following behavior was seen: - When an administrator user tried to access the *Settings* -> *User management* page, a "Page Not Found" error appeared. - Cluster administrators _did not_ lose access to the *Settings* page on the OpenShift Data Science dashboard. When a cluster administrator accessed the *Settings* -> User *management* page, a warning message appeared, indicating that the deleted administrator group no longer existed in OpenShift. The deleted administrator group was then removed from `OdhDashboardConfig`, and administrator access was restored. This issue is now fixed.
    • Bug Fix
    • Done
    • No
    • Yes
    • None
    • RHODS 1.24

      Description of problem:

      If one of the RHODS admin groups get deleted, the rest of admins cannot access Settings page anymore but they will face a not found error page

      Cluster admins don't lose access. When a cluster admin (not valid for dedicated-admins) logged into the dashboard the non-existent admin group is captured and removed from the OdhDashboardConfig. A cluster admin would see this error message:

      After that, the non-existent admin group gets removed from the OdhDashboardConfig and the correct functioning is restored. 

      Prerequisites (if any, like setup, operators/versions):

      Steps to Reproduce

      1. Create a group "new-test-group" (doesn't matter if empty or not)
      2. Log in RHODS Dashboard as RHODS admin (no cluster-admin!)
      3. go to Settings > User Management
      4. add "new-test-group" among the RHODS admin groups
      5. delete the "new-test-group" from the OCP cluster
      6. reload the RHODS Dashboard
      7. check what happens
      8. repeat from 1 to 7 but logging in RHODS with a cluster-admin user

      Actual results:

      RHODS admins (no cluster admins) cannot access settings page and the OdhDashboardConfig CR doesn't get cleaned from the deleted group

      Expected results:

      RHODS admins are able to access settings page and OdhDashboardConfig CR get cleaned from the deleted group

      Reproducibility (Always/Intermittent/Only Once):

      Always

      Build Details:

      RHODS v1.20.1-5

      Workaround:

      A) access with a cluster admin to RHODS Dashboard > Settings > User management and save the access configuration

      B) access with a cluster admin to RHODS Dashboard > Settings > User management, wait 2-3 minutes and the dashboard should report the error message about deleted group. After that user access configuration would be automatically fixed

      C) access with a cluster admin or dedicated admin to OCP console and remove the deleted group from OdhDashboardConfig CR (not advisable as suggested workaround for customers)

      Additional info:

      I didn't see any failure in Browser dev console

        1. deleting-admingroups.gif
          880 kB
          Berto D'Attoma
        2. image-2022-12-23-10-47-13-135.png
          31 kB
          Berto D'Attoma
        3. image-2022-12-23-10-56-25-239.png
          85 kB
          Berto D'Attoma

              juntwang@redhat.com Juntao Wang
              rhn-support-bdattoma Berto D'Attoma
              Berto D'Attoma Berto D'Attoma
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: