Bug 1649711

Summary: CephFS-manager role is not working
Product: [Red Hat Storage] Red Hat Ceph Storage Reporter: Uday kurundwade <ukurundw>
Component: Ceph-DashboardAssignee: Ernesto Puerta <epuertat>
Status: CLOSED CURRENTRELEASE QA Contact: Ernesto Puerta <epuertat>
Severity: high Docs Contact:
Priority: unspecified    
Version: 3.2CC: ceph-eng-bugs, mkasturi
Target Milestone: rc   
Target Release: 3.*   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: 3.2-1 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-08-26 06:50:52 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Screenshot of forbidden page none

Description Uday kurundwade 2018-11-14 10:38:34 UTC
Created attachment 1505603 [details]
Screenshot of forbidden page

Description of problem:
CephFS-manager is roles not working in dashboard

Version-Release number of selected component (if applicable):
ceph-common-12.2.8-23.el7cp.x86_64
ceph-ansible-3.2.0-0.1.beta9.el7cp.noarch
ceph-mgr-12.2.8-23.el7cp.x86_64

How reproducible:
Always

Steps to Reproduce:
1.Install ceph storage with CephFS
2.Install "dashboard v2" by running ansible playbook
3.Login to dashboard after installation of dashboard v2
4.Create new user and assign "CephFS manager" role to that user. 
5.Log in with newly created CephFS manager user.
6.Navigate to File system tab, Click on configured cephFS.

Actual results:
Throwing 403 Forbidden error (Sorry, you are not allowed to see what you were looking for)

Expected results:
It should be accessible

Additional info:
It is accessible through Administrator role

Comment 3 Ernesto Puerta 2018-11-16 17:36:36 UTC
The cause for this error is that the CephFS page requests the Grafana URL from  /api/settings/GRAFANA_API_URL endpoint, which requires ConfigOpts read permission.

While this should be fixed upstream, I'll provide a tested workaround to allow going on testing CephFS:

1. As admin user go to "User Management" (top-right cog icon).
2. Roles-> +Add new role
3. Name: cephfs-manager-fixed
4. Permissions: cephfs: ALL + config-opt: Read
5. Create Role.

Comment 4 Ernesto Puerta 2018-11-19 11:23:44 UTC
*** Bug 1651105 has been marked as a duplicate of this bug. ***

Comment 5 Ernesto Puerta 2018-11-19 11:24:05 UTC
*** Bug 1651125 has been marked as a duplicate of this bug. ***

Comment 6 Ernesto Puerta 2018-11-19 11:24:29 UTC
*** Bug 1651126 has been marked as a duplicate of this bug. ***