Uploaded image for project: 'Red Hat OpenShift Data Science'
  1. Red Hat OpenShift Data Science
  2. RHODS-8374

Users with Edit permissions cannot edit project details or delete the project

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not a Bug
    • Icon: Critical Critical
    • None
    • RHODS_1.27.0_GA
    • UI
    • None
    • Important

      Description of problem:

      A user B is not able to edit DS Project details (e.g., description) on a project or delete a project which was shared by another user A with Edit permissions. It works when user B has Admin permissions on the project.

      According to the requirements listed in RHODS-7406 

      4. Users that have access to a project via sharing should be able to view & edit shared projects from the projects list. 

      Console log of the browser reports the following error:

       

      Uncaught (in promise) Error: projects.project.openshift.io "ods-ci-ds-project-ldap-user3" is forbidden: User "ldap-noaccess3" cannot update resource "projects" in API group "project.openshift.io" in the namespace "ods-ci-ds-project-ldap-user3"
          t errorUtils.ts:10
          appFetch SDKInitialize.tsx:28
          s tslib.es6.js:147
          s tslib.es6.js:128
          a tslib.es6.js:118
          promise callback*l tslib.es6.js:120
          h tslib.es6.js:121
          h tslib.es6.js:117
          appFetch SDKInitialize.tsx:11
          promise callback*appFetch SDKInitialize.tsx:11
          xi index.js:92
          Si index.js:107
          Ei index.js:111
          put index.js:117
          Di index.js:667
          oe projects.ts:141
          O ManageProjectModal.tsx:69

      The PUT call gets 403 error status too

       

       

      Prerequisites (if any, like setup, operators/versions):

      Steps to Reproduce

      1. Create a Data Science Project myprojectA with user A
      2. grant "Edit" permissions on "myprojectA" to user B
      3. check user B can access the DS project "myprojectA"
      4. edit Description and/or name of "myprojectA" using user B

      Actual results:

      user B gets permission error while modifying the DS Project owned and shared by user A

      Expected results:

      user B is able to modify any details of the DS Project owned and shared by user A

      Reproducibility (Always/Intermittent/Only Once):

      Always

      Build Details:

      RHODS v1.27.0

      Workaround:

      N/A

      Additional info:

              Unassigned Unassigned
              rhn-support-bdattoma Berto D'Attoma
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: