Create RBAC roles / features

[chriskacerguis]

Per @Loicavenel comment here we need to add RBAC to the following:

Core

• Application Launcher
• Switch Language

Dashboard

• Monthly charge view

My Services

• View / Show
• Start
• Stop
• Suspend
• Set Retirement Date
• Edit
• Remove
• Set Ownership

VM Resource

• View Details
• View Snapshots
• Create Snapshot
• Delete Snapshot
• Open Remote Console
• Open Web Console
• Retire
• Start
• Stop

My Orders

• View / Show
• Duplicate
• Modify
• Remove

Service Catalog

• View / Show
• Add to Shopping Cart

Shopping Cart

• View / Show
• Clear
• Order

[Loicavenel]

Just few points:
Core Can be renamed Top Menu or something else, I did not have better idea
This is missing the new stuff we are adding in 4.6..
We have to review VM resources here, it may be Resources with Sub Item like VM, Generic Object, Playbook etc... And for VM we can be granular on what we show: part of the dashboard for example

[AllenBW]

I wanta chime in here, been said before, will be said again, we should not add these roles to product_features.yml in manageiq until they are mapped to a behavior in the SUI, it would be dreadfully cruel and confusing to show users something that does nothing.

I propose twin prs, one in the sui that takes advantage of the feature, and another in manageiq that adds the feature. Never one without the other 😆

[chriskacerguis]

@AllenBW totally agree.

[Loicavenel]

@AllenBW @chriskacerguis my goal was not asking to implement role but to make sure we have a clear list.. And yes, we should implement it feature after feature. I hope we can have it in Errata.

[chriskacerguis]

@Loicavenel understood.

[chalettu]

@miq-bot add_label wip

[Loicavenel]

@chalettu we need to organise it better and follow what was done already exist to don't confuse Customers

Self Service
Core
Application Launcher
Switch Language
Dashboard
Monthly charge view
My Services
View
Show
Operate
Start
Stop
Suspend
Edit Tags
Set Retirement Date
Retire Service
Modify
Edit
Remove
Set OwnerShip
VM Resources
View
Details
Snapshot
Operate
Create Snapshots
Delete All Snapshots
Open Remote Console
Open Web Console
Edit Tag
Retire
Stop
Start
My Orders
View
Show
Operate
Duplicate
Modify
Remove
Service Catalog
View
Show
Operate
Add to Shopping Cart
Shopping Cart
View
Show
Operate
Clear
Order

[AllenBW]

@Loicavenel wanta confirm, use of Self Service should be Service? (first item in your list)

[AllenBW]

Also Think we should rename Delete All Snapshots to Delete Snapshots, deleting all or a single one can both be wrapped up in that permission...

Ok quick question... we have Remove For Orders, Services but Delete for Snapshots and Clear for the shopping cart... Thoughts on clearing up the wording inconsistencies around deleting things from places?

[Loicavenel]

Guys, sorry for the formatting here.. I thought Github will keep it..
All in the doc here. https://docs.google.com/document/d/10p69nnTT7dG0hnCBCJkcapjlxVd08J0A2QRX054B_08/edit

[chalettu]

@Loicavenel , can you post the finalized structure of permissions you would like to appear in the Classic UI?

[Loicavenel]

@chalettu It is in the Doc, I not sure or to post it in Github.. in which format

[chalettu]

Here is the structure I have implemented. I had to split it into 3 images so I could expand the structure

[AllenBW]

(Replying to @Loicavenel's comments in the google doc) Indeed, the ui says, Delete All Snapshots, maybe this indicative of a broader need to audit and standardize functional wordings across the SUI, thoughts @chriskacerguis @Loicavenel @chalettu @serenamarie125 ?

So just as people shouldn't be confused mapping product features to ui buttons, consistency across naming of product features should be in place as well, just because the thesaurus contains countless alternatives for the word 'delete' does not mean we should be experimenting with how many we can employ

[chalettu]

@miq-bot remove_label wip

[chriskacerguis]

merged.

[chriskacerguis]

#1090