Project

General

Profile

Actions
Copy link

Feature #24672

closed

Feature #47765: mgr/dashboard: security improvements

mgr/dashboard: Prevent user from accessing unallowed pages

Added by Volker Theile almost 6 years ago. Updated about 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
General
Target version:
-
% Done:

0%

Source:
Tags:
dashboard
Backport:
Reviewed:
Affected Versions:
Pull request ID:

Description

After the role management is available in Ceph Dashboard we should add a UI route guard to prevent the user from reaching pages that requires privileges that the user does not have.

Example:
If a user is configured with read-only access and navigate to the URL http://<HOST>:<PORT>/#/rgw/user/add, then a warning message/page should be displayed.

Related issues 1 (0 open — 1 closed)

Related to Dashboard - Bug #44237: mgr/dashboard: security: some system roles allow accessing sensitive informationResolvedAlfonso Martínez

Actions
Actions
Copy link

Also available in: Atom PDF