search

inverse-inc / packetfence

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, powerful BYOD management options, 802.1X support, layer-2 isolation of problematic devices; PacketFence can be used to effectively secure networks small to very large heterogeneous networks.
https://packetfence.org
GNU General Public License v2.0
1.32k stars 279 forks source link

Multi-tenant admin needs the 'ALL' admin role #7453

Open julsemaan opened 1 year ago

julsemaan commented 1 year ago

Describe the bug When in a pre-12 multi-tenant environment, assigning 'Node Manager' to a user in the global tenant gets the admin user to login but he can't see the tenants dropdown in the admin to manage the nodes of other tenants.

To Reproduce

  1. Create a new local user in the 'global' tenant (tenant '0')
  2. Assign the admin role 'Node Manager' to this user
  3. Login as your new user in the admin
  4. Can't access all of the tenants although in the tenant 0

Expected behavior A 'Node Manager' in the global tenant should be able to manage the nodes of all the tenants

julsemaan commented 1 year ago

This fix should be developed on 11.2 and only back-ported to prior releases since 12+ don't have the multi-tenant integration anymore