Bug 1779915

Summary: Topology edit actions should be disabled if the user does not have correct permission
Product: OpenShift Container Platform Reporter: Vikram Raj <viraj>
Component: Dev ConsoleAssignee: cvogt
Status: CLOSED ERRATA QA Contact: Gajanan More <gamore>
Severity: high Docs Contact:
Priority: unspecified    
Version: 4.3.0CC: aos-bugs, cvogt, gamore, nmukherj, rgarg
Target Milestone: ---   
Target Release: 4.3.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1779493 Environment:
Last Closed: 2020-01-23 11:17:47 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
The bug has validated successfully and this is the screenshot of it.l none

Description Vikram Raj 2019-12-05 01:12:00 UTC
+++ This bug was initially created as a clone of Bug #1779493 +++

Description of problem:
If the user does not have permission to perform these actions they should not be shown / available.

Version-Release number of selected component (if applicable): 4.3.0


How reproducible:


Steps to Reproduce:
1. Log in as a non-admin user. And visit the topology page of a project which is not created by you.
2. On hover over a node, you will see the connector, context menu by right-clicking on the node and able to regroup by drag and drop of the node.

Actual results:
On hover over a node, you will see the connector, context menu by right-clicking on the node and able to regroup by drag and drop of the node.

Expected results:
If the user has only read access to a namespace then on hover over a node, the user should not see the connector, should not see the context menu on right-click on a node and not able to regroup the application by drag and drop.

Additional info:

Comment 2 Gajanan More 2020-01-07 09:25:10 UTC
Created attachment 1650320 [details]
The bug has validated successfully and this is the screenshot of it.l

Comment 3 Gajanan More 2020-01-07 09:28:48 UTC
I have validated the bug on the cluster with
Build: 4.3.0-0.nightly-2020-01-06-185654
Browser: Chrome Version 78.0.3904.108

Comment 4 Ruchir Garg 2020-01-07 09:57:22 UTC
Assigning defect to Gajanan More for verification.

Comment 6 errata-xmlrpc 2020-01-23 11:17:47 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:0062