Bug 2168861 - "Attach existing sysprep" should not try to get resource at cluster scope when logged in with regular user
Summary: "Attach existing sysprep" should not try to get resource at cluster scope whe...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Container Native Virtualization (CNV)
Classification: Red Hat
Component: User Experience
Version: 4.12.0
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: 4.13.0
Assignee: Ugo Palatucci
QA Contact: Guohua Ouyang
URL:
Whiteboard:
Depends On:
Blocks: 2173574
TreeView+ depends on / blocked
 
Reported: 2023-02-10 10:05 UTC by Guohua Ouyang
Modified: 2023-05-18 02:58 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 2173574 (view as bug list)
Environment:
Last Closed: 2023-05-18 02:57:49 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
sysprep (156.39 KB, image/png)
2023-02-10 10:05 UTC, Guohua Ouyang
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Github kubevirt-ui kubevirt-plugin pull 1053 0 None open Bug 2168861: take namespace from vm instead of useParams 2023-02-13 17:44:15 UTC
Red Hat Issue Tracker CNV-25364 0 None None None 2023-02-10 10:07:55 UTC
Red Hat Product Errata RHSA-2023:3205 0 None None None 2023-05-18 02:58:01 UTC

Description Guohua Ouyang 2023-02-10 10:05:12 UTC
Created attachment 1943296 [details]
sysprep

Description of problem:
"Attach existing sysprep" should not try to get resource at cluster scope when logged in with regular user, it should try to get resource from current project or projects he owned.

Version-Release number of selected component (if applicable):
v4.12.0

How reproducible:


Steps to Reproduce:
1. login with regular user, like "test"
2. create vm from catalog and move to vm scripts tab
3. try to attach existing sysprep

Actual results:
An error is showing ```configmaps is forbidden: User "test" cannot list resource "configmaps" in API group "" at the cluster scope```

Expected results:
It loads configmaps from current project or the projects he can list resources.

Additional info:
Similar bug: https://bugzilla.redhat.com/show_bug.cgi?id=2168859

Comment 2 errata-xmlrpc 2023-05-18 02:57:49 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Virtualization 4.13.0 Images security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2023:3205


Note You need to log in before you can comment on or make changes to this bug.