rancher / dashboard

The Rancher UI
https://rancher.com
Apache License 2.0
442 stars 243 forks source link

Cluster & Project Members shows the 'add' button for users who don't have permission to add cluster members #8594

Open mantis-toboggan-md opened 1 year ago

mantis-toboggan-md commented 1 year ago

To reproduce:

  1. Create a standard user and add them as a cluster member
  2. Log in as that user
  3. Navigate to cluster & project members
  4. On the cluster member tab (default tab), hit 'add'
  5. Try to add a member Result: An error is returned: clusterroletemplatebindings.management.cattle.io is forbidden: User "u-jqgsc" cannot create resource "clusterroletemplatebindings" in API group "management.cattle.io" in the namespace "local"

Expected Result: Users who don't have permission to create cluster role template bindings shouldn't be shown the 'add' (cluster member) button on the cluster & project members page.

richard-cox commented 1 month ago

Requires SURE-6164