RBAC Admin/Operator can delete machines
Bug #1811796 reported by
Björn Tillenius
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | ||
---|---|---|---|---|---|---|
MAAS | Status tracked in 3.6 | |||||
3.4 |
Won't Fix
|
Medium
|
Unassigned | |||
3.5 |
Won't Fix
|
Medium
|
Unassigned | |||
3.6 |
Triaged
|
Medium
|
Unassigned |
Bug Description
This is with MAAS 2.5.1-7489-
I have user that is Admin/Operator on a resource pool, but not a global admin.
He is allowed to delete machines that are in that resource pool. I don't think
non-global admins should be able to delete machines, since they have no way
of re-adding them to the pool.
Also, in the UI, non-global admins can't delete machines.
Changed in maas: | |
status: | New → Triaged |
importance: | Undecided → High |
milestone: | none → 2.5.1 |
tags: | added: api rbac |
Changed in maas: | |
status: | Triaged → Opinion |
milestone: | 2.5.1 → 2.5.2 |
Changed in maas: | |
milestone: | 2.5.2 → 2.5.3 |
Changed in maas: | |
milestone: | 2.5.3 → 2.6.0beta2 |
Changed in maas: | |
milestone: | 2.6.0beta2 → 2.6.0rc1 |
Changed in maas: | |
milestone: | 2.6.0rc1 → 2.6.0rc2 |
Changed in maas: | |
milestone: | 2.6.0rc2 → 2.7.0alpha1 |
summary: |
- [2.5, RBAC, API] Admin/Operator can delete machines + Admin/Operator can delete machines |
Changed in maas: | |
status: | Opinion → Triaged |
Changed in maas: | |
milestone: | 2.7.0b1 → 2.7.0b2 |
Changed in maas: | |
milestone: | 2.7.0b2 → none |
summary: |
- Admin/Operator can delete machines + RBAC Admin/Operator can delete machines |
Changed in maas: | |
importance: | High → Medium |
milestone: | none → 3.4.0 |
Changed in maas: | |
milestone: | 3.4.0 → 3.4.x |
Changed in maas: | |
milestone: | 3.4.x → 3.5.x |
To post a comment you must log in.