kubermatic / dashboard

Dashboard For The Kubermatic Kubernetes Platform
https://www.kubermatic.com
Other
42 stars 61 forks source link

Restrict project modifications to administrators #6736

Open judge-red opened 2 months ago

judge-red commented 2 months ago

What is the problem, where is it and why is it an issue?

Not too long ago, I requested (and it got implemented - thank you!) that project deletion can be restricted to admins, just like project creation could beforehand already. Now I noticed that non-admins can also/still edit the project, i.e. the project name and project labels. Unfortunately, that's also undesired in our use case. Do you think this could be also be disabled, maybe through an additional toggle? πŸ™ˆ

Suggest how to fix it, if possible Implement an additional toggle in the admin panel under interface > limits to restrict project modifications(?) to administrators. If the toggle is enabled, the "edit" icon should be disabled and greyed out - just like the "delete" icon and the "add project" buttons are if the respective toggles are enabled.

Additional comments Note that I really only mean the changes that are possible on the project overview/list page, i.e. currently that's the project name and project labels. "Inside" the project, no changes should be implemented.