[2.5, RBAC, UI] User that looses access to an allocated machine can still edit mount points

Bug #1811669 reported by Björn Tillenius
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
MAAS
Fix Released
Medium
Unassigned

Bug Description

This is with MAAS 2.5.1-7489-g2f25a2cc0-0ubuntu1~18.04.1 and RBAC enabled.

I have a user with the User role an a resource pool and acquire a machine
in that pool.

Now I remove the User role and add the Auditor role instead. I can now
see the machine as expected, and I can't do any actions on the machine.
Except that when looking at the storage tab, I can still see actions
for the mount points.

Tags: rbac ui

Related branches

Changed in maas:
status: New → Triaged
importance: Undecided → Medium
milestone: none → 2.5.1
summary: - [2.5, RBAC] User that looses access to an allocated machine can still
- edit mount points
+ [2.5, RBAC, UI] User that looses access to an allocated machine can
+ still edit mount points
tags: added: rbac ui
Changed in maas:
milestone: 2.5.1 → 2.5.2
Changed in maas:
milestone: 2.5.2 → 2.5.3
Changed in maas:
milestone: 2.5.3 → 2.6.0beta2
Changed in maas:
milestone: 2.6.0beta2 → 2.6.0rc1
Changed in maas:
milestone: 2.6.0rc1 → 2.6.0rc2
Changed in maas:
status: Triaged → Fix Committed
Changed in maas:
milestone: 2.6.0rc2 → 2.6.0rc1
Changed in maas:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.