Bug 1820431 - console should disable the install button for users who only have view permisson
Summary: console should disable the install button for users who only have view permisson
Keywords:
Status: CLOSED DUPLICATE of bug 1845817
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Management Console
Version: 4.5
Hardware: Unspecified
OS: Unspecified
unspecified
low
Target Milestone: ---
: 4.6.0
Assignee: Steve Goodwin
QA Contact: Yadan Pei
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-04-03 04:27 UTC by shahan
Modified: 2020-06-18 14:19 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-06-18 14:19:03 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description shahan 2020-04-03 04:27:43 UTC
Description of problem:
console should disable the install button for users who only have view permisson

Version-Release number of selected component (if applicable):
4.5.0-0.nightly-2020-04-02-195956


How reproducible:
Always

Steps to Reproduce:
1. granted the normal user aggregate-olm-view clusterrole to have the view operatorhub page
2. goto operatorhub page, click 3scale operators
3.

Actual results:
The "Installed Namespace"  dropdown always loading on the subscription creation page since the user have no permisson to view all ns

Expected results:

console should disable the install button for users who only have view permisson

Additional info:

Comment 2 Samuel Padgett 2020-06-15 20:05:40 UTC
(In reply to shahan from comment #0)
> The "Installed Namespace"  dropdown always loading on the subscription
> creation page since the user have no permisson to view all ns

This shouldn't be the case because we use the projects API to populate the dropdown. All users can list projects.

I could see it happening if the *active* project is somehow a project the user can't access. Then the dropdown might keep loading since the selected item isn't in the list. Can you confirm the project selected in the project dropdown just below the masthead is a project the current user has access to?

If so, it's kind of hard to get in this situation. But we should handle it better.


> console should disable the install button for users who only have view
> permisson

This is not so simple because you selected the install mode and target namespace on the next page. There's not a good access review we can make until we know the target namespace.

It might be possible to check the user's access to the *current* namespace, although it could incorrectly disable the button when the user has permission to install in a different namespace or the `openshift-operators` namespace for global operators.

Comment 3 Samuel Padgett 2020-06-18 14:19:03 UTC
The underlying problems with the dropdown loading is the same as bug 1845817.

*** This bug has been marked as a duplicate of bug 1845817 ***


Note You need to log in before you can comment on or make changes to this bug.