| 2019-01-22 17:02:25 |
Björn Tillenius |
description |
This is with MAAS 2.5.1-7489-g2f25a2cc0-0ubuntu1~18.04.1.
I have a user that has the Admin role on a single pool.
He's allowed to delete that pool, which he shouldn't.
Only users that have the Admin role in the 'all' resource pool scope
should be allowed to delete resource pools.
The reason is that you should always be allowed to undo something.
If you have permission to delete something, you should have permission
to recreate it. |
This is with MAAS 2.5.1-7489-g2f25a2cc0-0ubuntu1~18.04.1 with RBAC enabled..
I have a user that has the Admin role on a single pool.
He's allowed to delete that pool, which he shouldn't.
Only users that have the Admin role in the 'all' resource pool scope
should be allowed to delete resource pools.
The reason is that you should always be allowed to undo something.
If you have permission to delete something, you should have permission
to recreate it. |
|
