What's Changed

New Features

/auth/pending: users whose menu has no screens (for example, right after sign-up approval, before a group or role is assigned) are sent here from the default screen and from menu screens. The page explains that an administrator needs to assign a role, and offers Change Password and Logout

Screens outside the user's menu could be opened by URL: typing the URL of a menu screen opened it even when the screen was not in the user's menu. The console now compares the full menu catalog with the user's menu when a screen opens and redirects to /auth/unauthorized#menuNotAllowed if the screen is not allowed. Menu URLs follow the sidebar rules (iframe: /_view/{id}, local: the path or menu ID path); screens that are not menus are not checked. Menu lists are cached for 60 seconds, and if the lookup fails the screen opens and the error is logged (#111)
Default screen after login: if Infra Workloads is not in the user's menu, the user is sent to the first menu screen in sidebar order

Requires mc-iam-manager v0.7.1, which returns an empty menu to users without a platform role. With mc-iam-manager v0.7.0 these users get every menu, so the pending page and the menu guard do not apply to them
conf/api.yaml: mc-iam-manager version 0.7.0 → 0.7.1

Full Changelog: v0.7.0...v0.7.1