search

ansible / awx

AWX provides a web-based user interface, REST API, and task engine built on top of Ansible. It is one of the upstream projects for Red Hat Ansible Automation Platform.
Other
13.68k stars 3.37k forks source link

Allow to set enable/disable permissions and edit permission on scheduled jobs #8129

Open aptevo opened 3 years ago

aptevo commented 3 years ago
ISSUE TYPE
SUMMARY

It seems as scheduled jobs can only be edited by the creating user, or by a user with admin rights to the template the job was scheduled from. We create schedules of templates using a service user, and it would be nice to have the possibility to give other users with execute rights on the template the right to enable/disable these schedules or to edit them, without having to give them admin rights on the template.

wenottingham commented 3 years ago

This isn't right. A user with only execute rights should not be able to edit/remove/change an admin user's schedule; that's a fundamental part of RBAC.

To do this likely relies on the schedule itself being RBAC-able. I don't think that will happen anytime soon.

aptevo commented 3 years ago

the service user itself only has execute rights on the template, and if he could just set a checkbox allowing other users to enable or disable a schedule he created would be enough, but I see your point. The only workaround for now is giving a user admin rights for a template he otherwise only needs execute rights, which seems to be a bad option too.

jmhbnz commented 3 years ago

Adding to this feature request - In my current org I've just run into a situation where we require giving a team access to execute a workflow and edit any planned scheduled runs for that workflow, however we would prefer not to have to give them the workflow_admin role to edit the entire workflow itself to achieve this.