RBAC Admin/Operator can delete machines
Bug #1811796 reported by
Björn Tillenius
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| MAAS |
Triaged
|
Medium
|
Unassigned | ||
Bug Description
This is with MAAS 2.5.1-7489-
I have user that is Admin/Operator on a resource pool, but not a global admin.
He is allowed to delete machines that are in that resource pool. I don't think
non-global admins should be able to delete machines, since they have no way
of re-adding them to the pool.
Also, in the UI, non-global admins can't delete machines.
| Changed in maas: | |
| status: | New → Triaged |
| importance: | Undecided → High |
| milestone: | none → 2.5.1 |
| tags: | added: api rbac |
| Changed in maas: | |
| status: | Triaged → Opinion |
| milestone: | 2.5.1 → 2.5.2 |
| Changed in maas: | |
| milestone: | 2.5.2 → 2.5.3 |
| Changed in maas: | |
| milestone: | 2.5.3 → 2.6.0beta2 |
| Changed in maas: | |
| milestone: | 2.6.0beta2 → 2.6.0rc1 |
| Changed in maas: | |
| milestone: | 2.6.0rc1 → 2.6.0rc2 |
| Changed in maas: | |
| milestone: | 2.6.0rc2 → 2.7.0alpha1 |
| summary: |
- [2.5, RBAC, API] Admin/Operator can delete machines + Admin/Operator can delete machines |
| Changed in maas: | |
| status: | Opinion → Triaged |
| Changed in maas: | |
| milestone: | 2.7.0b1 → 2.7.0b2 |
| Changed in maas: | |
| milestone: | 2.7.0b2 → none |
| summary: |
- Admin/Operator can delete machines + RBAC Admin/Operator can delete machines |
| Changed in maas: | |
| importance: | High → Medium |
| milestone: | none → 3.4.0 |
| Changed in maas: | |
| milestone: | 3.4.0 → 3.4.x |
To post a comment you must log in.
