canonical / maas-ui

The UI for MAAS (metal-as-a-service)
https://maas.io
Other
49 stars 48 forks source link

[2.5, UI, RBAC] An admin is allowed to create raids for an Allocated node in the UI, but not the API #1519

Closed webteam-app closed 2 years ago

webteam-app commented 4 years ago

Bug originally filed by bjornt at https://bugs.launchpad.net/bugs/1812377

This is with MAAS 2.5.1-7489-g2f25a2cc0-0ubuntu1~18.04.1.

I have a user that is an admin in MAAS and a machine that is allocated.

If I try to create a raid device for that machine in the API, it says that I'm not allowed, since the machine is not in a Ready state.

The UI allows me to create a raid array without any problems, though.

We either need to relax the API, or make the UI stricter.

Note that with RBAC enabled and a user that has the Admin role on the resource pool, he gets presented the UI for creating a raid, but after clicking "Create RAID", the form is simply closed. No raid was created, and no error message was given.

Caleb-Ellis commented 2 years ago

We think this has been fixed in the React migration