-
Task
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
sat-proton
-
False
-
None
Description
The frontend components should accept a permission prop for reads and writes and enable/disable appropriately.
When Satellite loads an insights frontend component via scalprum, satellite should be able to send permissions info to the scalprum component so that the front end component can disable/enable UI actions appropriately. Example usage
<ScalprumComponent
scope={scope}
module={module}
permissions={{
can_edit_vulnerabilities: true,
can_view_vulnerabilities: true,
can_edit_advisor: true,
can_view_advisor: true
}}
/>
Motivation / Justification
Needed because we need to be able to disable edit risk/business status etc if user does not have the correct per mission. Would lead to a bad user experience otherwise
Additional info
The current (pre-Kessel) implementation of RBAC control in Vulnerability UI utilizes chrome.getUserPermissions interface. See the permission read and
RBAC handling in Vulnerability UI.