API Login ACL response values differ from CLI
Bug #1629089 reported by
Jeff Pihach
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Canonical Juju |
Fix Released
|
High
|
Tim Penhey | ||
Bug Description
When bootstrapping with a defined external identity service and then running:
juju grant everyone@external addmodel
When a user logs in via USSO to the controller over the API the login response for the user-info does not include the proper values for the controller access.
controller-access: ""
model-access: ""
At a minimum here I would expect the `controller-access` field to have "addmodel"
Revision history for this message
| Richard Harding (rharding) wrote | #1 |
| Changed in juju: | |
| status: | New → Triaged |
| importance: | Undecided → High |
| assignee: | nobody → Alexis Bruemmer (alexis-bruemmer) |
| milestone: | none → 2.0.0 |
Revision history for this message
| Jeff Pihach (hatch) wrote | #2 |
| Changed in juju: | |
| assignee: | Alexis Bruemmer (alexis-bruemmer) → Tim Penhey (thumper) |
| status: | Triaged → In Progress |
| tags: | added: ateam |
| Changed in juju: | |
| status: | In Progress → Fix Committed |
| Changed in juju: | |
| status: | Fix Committed → Fix Released |
To post a comment you must log in.
So this breaks the GUI add-model flow for users since it can't tell when to enable/disable the functionality.