Created attachment 1505603 [details]
Screenshot of forbidden page
Description of problem:
CephFS-manager is roles not working in dashboard
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1.Install ceph storage with CephFS
2.Install "dashboard v2" by running ansible playbook
3.Login to dashboard after installation of dashboard v2
4.Create new user and assign "CephFS manager" role to that user.
5.Log in with newly created CephFS manager user.
6.Navigate to File system tab, Click on configured cephFS.
Throwing 403 Forbidden error (Sorry, you are not allowed to see what you were looking for)
It should be accessible
It is accessible through Administrator role
The cause for this error is that the CephFS page requests the Grafana URL from /api/settings/GRAFANA_API_URL endpoint, which requires ConfigOpts read permission.
While this should be fixed upstream, I'll provide a tested workaround to allow going on testing CephFS:
1. As admin user go to "User Management" (top-right cog icon).
2. Roles-> +Add new role
3. Name: cephfs-manager-fixed
4. Permissions: cephfs: ALL + config-opt: Read
5. Create Role.
*** Bug 1651105 has been marked as a duplicate of this bug. ***
*** Bug 1651125 has been marked as a duplicate of this bug. ***
*** Bug 1651126 has been marked as a duplicate of this bug. ***