Bug 1951212

Summary: User/Group details shows unrelated subjects in role bindings tab
Product: OpenShift Container Platform Reporter: Sho <sweimer>
Component: Management ConsoleAssignee: Cyril <cajieh>
Status: CLOSED ERRATA QA Contact: Yanping Zhang <yanpzhan>
Severity: medium Docs Contact:
Priority: medium    
Version: 4.6.zCC: aos-bugs, jhadvig, jokerman, spadgett, yapei
Target Milestone: ---   
Target Release: 4.8.0   
Hardware: x86_64   
OS: Mac OS   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Cause: Incorrect code Consequence: User/Group details shows unrelated subjects. Fix: Added logic to filter by User or Group Result: User/Group details shows related subjects
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-07-27 23:01:52 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Screenshot of issue
none
more rolebindings are shown with different subject
none
user-rolebinding
none
group-rolebinding none

Description Sho 2021-04-19 20:14:20 UTC
Created attachment 1773381 [details]
Screenshot of issue

Description of problem:

On the user details page - role bindings tab; unrelated subjects can be listed in the table if the user is assigned to a ClusterRoleBinding that includes other subjects.


Version-Release number of selected component (if applicable): 4.6.16


How reproducible: Always


Steps to Reproduce:
1. Create a user
2. Assign the user to a ClusterRoleBinding that includes other subjects (users, groups, SAs)
3. Go to the user's details page -> Role Bindings tab
4. Observe information unrelated to the user listed in the table

Actual results:

See unrelated Users, Groups, and ServiceAccounts on a user's details page.

Expected results:

Only see the role binding information related to the target user.

Additional info:

Comment 4 Yadan Pei 2021-04-21 08:30:02 UTC
Created attachment 1774032 [details]
more rolebindings are shown with different subject

Comment 6 Yanping Zhang 2021-05-06 07:51:05 UTC
Created attachment 1780140 [details]
user-rolebinding

Comment 7 Yanping Zhang 2021-05-06 07:51:47 UTC
Created attachment 1780141 [details]
group-rolebinding

Comment 8 Yanping Zhang 2021-05-06 07:52:27 UTC
Checked on ocp 4.8 cluster with payload 4.8.0-0.nightly-2021-05-05-135043.
Add cluster rolebinding to user and group, check on RoleBindings tab of the user and group, only the user or group related rolebindings are shown in the table. The bug is fixed.

Comment 11 errata-xmlrpc 2021-07-27 23:01:52 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Container Platform 4.8.2 bug fix and security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:2438