Create an rke2 node driver cluster in the rancher server master-head with 1 worker, 1 etcd, 1 cp from cluster explorer.
Create two standard users user1, user2, user3 and user4 and once the cluster is active, create a project P1
Add the users, user1 as Project owner, user2 as Project member, user3 as Read-only and user4 with custom Manage workloads access in the project P1 of the clusters from explore cluster --> project & namespaces -> Create Project --> Add
Issue1 - System account is visible in the members list for users with project owner, project member, read-only permissions
If we log in as user1/user2/user3, from explore cluster --> Projects and namespaces --> Project P1 --> view configs, the members list system account of local. It need not be shown for the users.
The user account is shown even if we login as an admin without any users.
Screenshot for reference:
Issue2 - If we login as user4 with custom permissions manage workloads, from the project members user is displayed as Project owner
Log in as user4 and from the explore cluster --> Projects and namespaces --> Project P1 --> view config, members list has user4 as Project owner.
Expected result:
user4 should not be displayed as project owner as the user has custom Manage workloads permissions.
Issue3 - Create option from the workload page can be removed for the users with Readonly and custom access
From explore cluster --> workload overview page--> Create, create option can be removed from this page. The create option is not seen in the individual cronjobs, deployments etc.
Addressing 3 issues in this ticket
Rancher server master-head 4d18400
Manage workloads
access in the project P1 of the clusters from explore cluster --> project & namespaces -> Create Project --> AddIssue1 - System account is visible in the members list for users with project owner, project member, read-only permissions
Screenshot for reference:
Issue2 - If we login as user4 with custom permissions
manage workloads
, from the project members user is displayed asProject owner
Expected result:
Manage workloads
permissions.Issue3 - Create option from the workload page can be removed for the users with Readonly and custom access
Related issue: https://github.com/rancher/dashboard/issues/2673