| Summary: | Docker/custom build is not forbidden in Online env | ||
|---|---|---|---|
| Product: | OpenShift Online | Reporter: | Wenjing Zheng <wzheng> |
| Component: | Website | Assignee: | Dan Mace <dmace> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Yanping Zhang <yanpzhan> |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 3.x | CC: | akostadi, aos-bugs, dmace, jokerman, mmccomas, wzheng |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2016-05-23 15:09:58 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
|
Description
Wenjing Zheng
2016-03-29 06:14:33 UTC
This should not have been a problem assuming the two issues below have been configured correctly. I'll verify the configuration on INT tomorrow. https://github.com/openshift/online/issues/65 https://github.com/openshift/online/issues/63 Dan: Can you please take a look? I believe the issue is project owners are getting bound to the /admin role rather than /openshift-online:admin: https://github.com/openshift/online/blob/master/config/project-request.json#L116-L136 Will verify a fix and open a PR. QE Will verify when the pr is merged into Online env. The fix is merged and deployed to INT, feel free to test. Have checked on dev-preview-int, still haven't see the fix. (In reply to Wenjing Zheng from comment #7) > Have checked on dev-preview-int, still haven't see the fix. Can you please give more detail about which user is affected? I forgot to mention when I fixed the bug that existing accounts will still have the incorrect roles and only NEW users will have the corrected roles. Please make sure to test with a new user, and if the problem persists, let me know which username has the escalated privileges. Thanks! Yes, if using new created account, docker/custom build is forbidden. But how to make the existing accounts to have correct roles? (In reply to Wenjing Zheng from comment #9) > Yes, if using new created account, docker/custom build is forbidden. But how > to make the existing accounts to have correct roles? We're not going to update the existing accounts- they'll need deleted and recreated. Thanks, Dan! Per comment #9, verify this bug now. why didn't we change the default role permissions instead of creating a new role? |