Created attachment 1447370 [details]
missing RBAC features
Description of problem:
The RBAC for the new "Migration" feature seems to be a duplicate of the reporting privileges
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. click on your username and then "Configuration"
2. navigate to "Access control"
3. go to roles and add a new role
4. drill into "Compute" -> "Migration"
there are two sub menus called "reports"
there should be sub menus and items reflecting the feature of the "Migration" UI
Please assess the impact of this issue and update the severity accordingly. Please refer to https://bugzilla.redhat.com/page.cgi?id=fields.html#bug_severity for a reminder on each severity's definition.
If it's something like a tracker bug where it doesn't matter, please set the severity to Low.
In my opinion this is quite important - otherwise everyone with a CF account and too relaxed privileges might be able to trigger a workload migration. From my field experience I know customers want to be able to have fine grained RBAC for all CF features.
I set prio and sev accordingly.
on 188.8.131.52 I could see RBAC option for Migration was present in the Product Features tree. I also confirm that un-checking it will hide the migration option under Compute, and user will no longer be able to navigate to Compute -> Migration.