Created attachment 1447370 [details] missing RBAC features Description of problem: The RBAC for the new "Migration" feature seems to be a duplicate of the reporting privileges Version-Release number of selected component (if applicable): 5.10.0.0-pre-nightly.20180413215547_7558ac5 How reproducible: always Steps to Reproduce: 1. click on your username and then "Configuration" 2. navigate to "Access control" 3. go to roles and add a new role 4. drill into "Compute" -> "Migration" Actual results: there are two sub menus called "reports" Expected results: there should be sub menus and items reflecting the feature of the "Migration" UI Additional info:
Please assess the impact of this issue and update the severity accordingly. Please refer to https://bugzilla.redhat.com/page.cgi?id=fields.html#bug_severity for a reminder on each severity's definition. If it's something like a tracker bug where it doesn't matter, please set the severity to Low.
In my opinion this is quite important - otherwise everyone with a CF account and too relaxed privileges might be able to trigger a workload migration. From my field experience I know customers want to be able to have fine grained RBAC for all CF features. I set prio and sev accordingly.
https://github.com/ManageIQ/manageiq/pull/17596
on 5.10.0.2 I could see RBAC option for Migration was present in the Product Features tree. I also confirm that un-checking it will hide the migration option under Compute, and user will no longer be able to navigate to Compute -> Migration.