Bug 1768723 - Should not redirect to Dashboard when kubeadmin impersonate normal user
Summary: Should not redirect to Dashboard when kubeadmin impersonate normal user
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Management Console
Version: 4.3.0
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: 4.3.0
Assignee: Rastislav Wagner
QA Contact: Yadan Pei
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-11-05 06:31 UTC by XiaochuanWang
Modified: 2020-01-23 11:11 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-01-23 11:10:52 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github openshift console pull 3259 0 'None' 'closed' 'Bug 1768723: Set all ssar flags to undefined before rerunning detection' 2019-11-20 06:15:04 UTC
Red Hat Product Errata RHBA-2020:0062 0 None None None 2020-01-23 11:11:05 UTC

Description XiaochuanWang 2019-11-05 06:31:03 UTC
Description of problem:
Cluster admin user login and go to User menu, choose a normal user to impersonate, the page redirect to Dashboard which the user has no right to view.

Version-Release number of selected component (if applicable):
4.3.0-0.nightly-2019-11-04-210904

How reproducible:
Always

Steps to Reproduce:
1. Cluster admin user login and go to User menu
2. Make sure there is at least one normal user, choose the user to impersonate, check the browser.


Actual results:
2. Page redirect to Dashboard which normal user has no right to view. (Also "Error loading events" show up in Activity on the page)


Expected results:
2. Should redirect to Projects list view as the normal user just logged in.

Additional info:

Comment 1 Samuel Padgett 2019-11-05 18:48:52 UTC
When impersonation starts, we re-run flag detection. The problem is the `flagPending` check returns false because there was a previous value for kubeadmin and `getLandingPage` returns before the new `CAN_LIST_NS` is set.

Comment 3 shahan 2019-11-11 03:22:26 UTC
kubeadmin can impersonate normal users now, no error messages output.

4.3.0-0.nightly-2019-11-10-211307

Comment 5 errata-xmlrpc 2020-01-23 11:10:52 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:0062


Note You need to log in before you can comment on or make changes to this bug.