Activity log for bug #1812240
| Date | Who | What changed | Old value | New value | Message |
|---|---|---|---|---|---|
| 2019-01-17 16:08:13 | Björn Tillenius | bug | added bug | ||
| 2019-01-17 16:08:23 | Björn Tillenius | maas: status | New | Triaged | |
| 2019-01-17 16:08:25 | Björn Tillenius | maas: importance | Undecided | High | |
| 2019-01-17 16:08:27 | Björn Tillenius | maas: milestone | 2.5.1 | ||
| 2019-01-17 16:08:30 | Björn Tillenius | tags | rbac | ||
| 2019-01-17 16:08:44 | Björn Tillenius | description | This is with MAAS 2.5.1-7489-g2f25a2cc0-0ubuntu1~18.04.1. I have a user that has the Admin role on a single pool. He's allowed to delete that pool, which he shouldn't. Only users that have the Admin role in the 'all' resource pool scope should be allowed to delete resource pools. The reason is that you should always be allowed to undo something. If you have permission to delete something, you should have permission to recreate it. | This is with MAAS 2.5.1-7489-g2f25a2cc0-0ubuntu1~18.04.1. I have a user that has the Admin role on a single pool. He's allowed to delete that pool, which he shouldn't. Only users that have the Admin role in the 'all' resource pool scope should be allowed to delete resource pools. The reason is that you should always be allowed to undo something. If you have permission to delete something, you should have permission to recreate it. This affects both the API and the UI. | |
| 2019-01-31 14:44:07 | Andres Rodriguez | maas: milestone | 2.5.1 | 2.5.2 | |
| 2019-01-31 14:44:11 | Andres Rodriguez | maas: status | Triaged | Opinion | |
| 2019-02-21 16:13:37 | Andres Rodriguez | maas: milestone | 2.5.2 | 2.5.3 | |
| 2019-04-22 13:24:01 | Andres Rodriguez | maas: milestone | 2.5.3 | 2.6.0beta2 | |
| 2019-04-27 21:23:32 | Andres Rodriguez | maas: milestone | 2.6.0beta2 | 2.6.0rc1 | |
| 2019-05-28 14:41:58 | Andres Rodriguez | maas: milestone | 2.6.0rc1 | 2.6.0rc2 | |
| 2019-06-10 20:50:43 | Andres Rodriguez | maas: milestone | 2.6.0rc2 | 2.7.0alpha1 | |
| 2019-09-27 10:28:28 | Alberto Donato | maas: status | Opinion | Triaged | |
| 2019-12-04 17:54:26 | Adam Collard | maas: milestone | 2.7.0b1 | 2.7.0b2 | |
| 2019-12-18 12:28:23 | Adam Collard | maas: milestone | 2.7.0b2 | ||
| 2023-04-13 08:21:15 | Jerzy Husakowski | summary | [2.5, RBAC] Pool admins shouldn't be allowed to delete the pool | Pool admins shouldn't be allowed to delete the pool | |
| 2023-04-13 08:21:36 | Jerzy Husakowski | tags | rbac | api rbac | |
| 2023-04-13 08:21:45 | Jerzy Husakowski | maas: importance | High | Medium | |
| 2023-04-13 08:21:45 | Jerzy Husakowski | maas: milestone | 3.5.0 | ||
| 2024-03-05 15:43:45 | Anton Troyanov | maas: milestone | 3.5.0 | 3.5.x | |
| 2024-07-12 09:56:35 | Anton Troyanov | nominated for series | maas/3.6 | ||
| 2024-07-12 09:56:35 | Anton Troyanov | bug task added | maas/3.6 | ||
| 2024-07-12 09:56:35 | Anton Troyanov | nominated for series | maas/3.5 | ||
| 2024-07-12 09:56:35 | Anton Troyanov | bug task added | maas/3.5 | ||
| 2024-07-12 09:58:37 | Anton Troyanov | maas/3.6: milestone | 3.5.x | 3.6.x | |
| 2024-07-12 09:58:39 | Anton Troyanov | maas/3.5: importance | Undecided | Medium | |
| 2024-07-12 09:58:40 | Anton Troyanov | maas/3.5: status | New | Won't Fix |
