Bug 1951212 - User/Group details shows unrelated subjects in role bindings tab
Summary: User/Group details shows unrelated subjects in role bindings tab
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Management Console
Version: 4.6.z
Hardware: x86_64
OS: Mac OS
medium
medium
Target Milestone: ---
: 4.8.0
Assignee: Cyril
QA Contact: Yanping Zhang
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-04-19 20:14 UTC by Sho
Modified: 2021-07-27 23:02 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Cause: Incorrect code Consequence: User/Group details shows unrelated subjects. Fix: Added logic to filter by User or Group Result: User/Group details shows related subjects
Clone Of:
Environment:
Last Closed: 2021-07-27 23:01:52 UTC
Target Upstream Version:

Attachments (Terms of Use)
Screenshot of issue (170.91 KB, image/png)
2021-04-19 20:14 UTC, Sho 		no flags Details
more rolebindings are shown with different subject (285.63 KB, image/png)
2021-04-21 08:30 UTC, Yadan Pei 		no flags Details
user-rolebinding (36.06 KB, image/png)
2021-05-06 07:51 UTC, Yanping Zhang 		no flags Details
group-rolebinding (29.15 KB, image/png)
2021-05-06 07:51 UTC, Yanping Zhang 		no flags Details
View All


Links
System ID Private Priority Status Summary Last Updated
Github openshift console pull 8799 0 None open Bug 1951212: User/Group details shows unrelated subjects in role bindings tab 2021-04-27 15:54:41 UTC
Red Hat Product Errata RHSA-2021:2438 0 None None None 2021-07-27 23:02:07 UTC

Description Sho 2021-04-19 20:14:20 UTC 
Created attachment 1773381 [details]
Screenshot of issue

Description of problem:

On the user details page - role bindings tab; unrelated subjects can be listed in the table if the user is assigned to a ClusterRoleBinding that includes other subjects.


Version-Release number of selected component (if applicable): 4.6.16


How reproducible: Always


Steps to Reproduce:
1. Create a user
2. Assign the user to a ClusterRoleBinding that includes other subjects (users, groups, SAs)
3. Go to the user's details page -> Role Bindings tab
4. Observe information unrelated to the user listed in the table

Actual results:

See unrelated Users, Groups, and ServiceAccounts on a user's details page.

Expected results:

Only see the role binding information related to the target user.

Additional info:
Comment 4 Yadan Pei 2021-04-21 08:30:02 UTC 
Created attachment 1774032 [details]
more rolebindings are shown with different subject
Comment 6 Yanping Zhang 2021-05-06 07:51:05 UTC 
Created attachment 1780140 [details]
user-rolebinding
Comment 7 Yanping Zhang 2021-05-06 07:51:47 UTC 
Created attachment 1780141 [details]
group-rolebinding
Comment 8 Yanping Zhang 2021-05-06 07:52:27 UTC 
Checked on ocp 4.8 cluster with payload 4.8.0-0.nightly-2021-05-05-135043.
Add cluster rolebinding to user and group, check on RoleBindings tab of the user and group, only the user or group related rolebindings are shown in the table. The bug is fixed.
Comment 11 errata-xmlrpc 2021-07-27 23:01:52 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Container Platform 4.8.2 bug fix and security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:2438
Note You need to log in before you can comment on or make changes to this bug.