rancher / rancher-docs

Rancher Documentation
https://ranchermanager.docs.rancher.com/
Apache License 2.0
58 stars 201 forks source link

Undocumented "out-of-the box default global permissions" #878

Open lindhe opened 11 months ago

lindhe commented 11 months ago

I have two issues with the documentation regarding global permissions:

  1. It says here that "Out-of-the-box, there are four default global permissions":

    https://github.com/rancher/rancher-docs/blob/c7c9caa3e64033ea05c09a7288f7f31e3fedb83f/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md?plain=1#L11

    But there are clearly many more than that:

    Global roles
  2. The documentation's nomenclature does not match the GUI. In the Rancher GUI, it's called "Global Roles", not "Global Roles", as far as I can tell. I think it would help the end users if you used a consistent terminology here.

lindhe commented 11 months ago

I've now found that there is actually something called "global permissions" in the GUI, and it does match the list in the documentation. I found this when clicking "Edit config" for a user:

Global Permissions

How are they different than the global roles? This is very confusing to me.

lindhe commented 11 months ago

Here, at least, the docs very clearly uses the term "global permissions" for one of the global roles:

the New User Default global permissions

https://github.com/rancher/rancher-docs/blob/c7c9caa3e64033ea05c09a7288f7f31e3fedb83f/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md?plain=1#L112

lindhe commented 11 months ago

It says here that "Note that roles are different from permissions, which determine what clusters and projects you can access."

This, to me, is very confusing considering what I've previously pointed out.