Bug 2350295 - [ceph-dashboard] Confirmation textbox on deleting critical resources
Summary: [ceph-dashboard] Confirmation textbox on deleting critical resources
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Ceph Storage
Classification: Red Hat Storage
Component: Ceph-Dashboard
Version: 8.1
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: ---
: 8.1
Assignee: naman munet
QA Contact: Chaithra
Rivka Pollack
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-03-06 10:44 UTC by naman munet
Modified: 2025-06-26 12:27 UTC (History)
10 users (show)

Fixed In Version: ceph-19.2.1-24.el9cp
Doc Type: Enhancement
Doc Text:
.Ceph Dashboard now requires users to type the resource name to confirm deletion of critical resources Previously, users could delete one or more critical resources (such as images, snapshots, subvolumes, subvolume groups, pools, hosts, OSDs, buckets, and file systems) by simply selecting a checkbox. This made accidental deletions more likely. With this enhancement, the Dashboard prompts users to manually type the resource name in a confirmation textbox before deletion. Additionally, users can now delete only one critical resource at a time, reducing the risk of unintentional data loss.
Clone Of:
Environment:
Last Closed: 2025-06-26 12:27:21 UTC
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github ceph ceph pull 61478 0 None Merged mgr/dashboard: Add confirmation textbox for resource name on delete action 2025-03-06 10:44:34 UTC
Github ceph ceph pull 61899 0 None Merged mgr/dashboard: disable deleting bucket with objects 2025-03-10 08:10:08 UTC
Red Hat Issue Tracker RHCEPH-10738 0 None None None 2025-03-06 10:44:59 UTC
Red Hat Issue Tracker RHCSDASH-1938 0 None None None 2025-03-06 10:45:04 UTC
Red Hat Product Errata RHSA-2025:9775 0 None None None 2025-06-26 12:27:24 UTC

Description naman munet 2025-03-06 10:44:34 UTC
Description of problem: 
User should not be able to delete critical resources by just clicking on a checkbox in the confirmation modal, so to enhance this functionality we have introduced additional confirmation from user in which user needs to enter the resource name that they want to delete in the textbox, and only after entering correct name they would be able to delete certain resources.
We have categorized critical resources as - pools, rbd, rbd-snapshot,cephfs - (file system, directories, subvolume, subvolume-snapshots), hosts, osds, nfs, buckets, rgw user, user 


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1. Go to buckets list page (same can be done with all other critical resources)
2. create a bucket and try to delete it
3. user will be asked to enter the bucket name in textbox

Actual results: user should see a textbox and after entering correct resource name for critical resources, resource should get deleted


Expected results: after entering correct resource name, resource is getting deleted


Additional info:

Comment 1 Storage PM bot 2025-03-06 10:44:45 UTC
Please specify the severity of this bug. Severity is defined here:
https://bugzilla.redhat.com/page.cgi?id=fields.html#bug_severity.

Comment 17 errata-xmlrpc 2025-06-26 12:27:21 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: Red Hat Ceph Storage 8.1 security, bug fix, and enhancement updates), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2025:9775


Note You need to log in before you can comment on or make changes to this bug.