Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Environment Settings Inaccessible to Local Users Without Admin Organization Role #9070

Closed
exalate-issue-sync bot opened this issue May 24, 2023 · 0 comments

Comments

@exalate-issue-sync
Copy link

exalate-issue-sync bot commented May 24, 2023

Describe the bug :

When a local user does not have the Admin organization role, they are not able to access the environment settings regardless of the permissions associated with the environment role.

To Reproduce :

Steps to reproduce the behaviour:

  1. Create a new organization role with all CRUD permissions
  2. Create a new local user (source = gravitee)
  3. Assign the local user the custom organization role and an environment role with Settings permissions (the Admin role works for this)
  4. Attempt to open the environment settings. An error message will appear citing insufficient rights to access the resource (403 error).

Cockpit users appear to be unaffected by this and continue to be able to access the environment settings regardless of organization role.

Expected behaviour :

The organization role should not have an impact on a user's access to the environment settings. As long as the user has the necessary Settings permissions in the environment role, they should be able to access the environment settings.

Current behaviour :

Local users with a custom organization role get a 403 error when attempting to open the environment settings

Desktop :

  • Environment: 3.20.9, 3.20.8, 3.20.5
  • Browser Chrome

* Please see Zendesk Support tab for further comments and attachments.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

0 participants