Project

General

Profile

Bug #41572

dashboard: predefined system roles don't include read access to grafana scope

Added by Ricardo Dias 7 months ago. Updated 5 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
dashboard/backend
Target version:
% Done:

0%

Source:
Tags:
roles, permissions, grafana
Backport:
nautilus
Regression:
No
Severity:
3 - minor
Reviewed:
ceph-qa-suite:
Pull request ID:
Crash signature:

Description

The current predefined system roles (like block-manager, cluster-manager, pool-manager, etc..) don't include read access to grafana scope and thus prevent a user without the administrator role to see the grafana dashboards.

For instance, a user that just has the "pool-manager" role will not be able to see the grafana tab in the dashboard UI.

The current workaround is to create a custom role with the grafana scope read access enabled and add that custom role to the non-admin user.

We should include the read access to the grafana scope in all predefined "*-manager" system roles.


Related issues

Copied to mgr - Backport #41604: nautilus: dashboard: predefined system roles don't include read access to grafana scope Resolved

History

#1 Updated by Ricardo Dias 7 months ago

  • Status changed from New to Fix Under Review
  • Pull request ID set to 29989

#2 Updated by Ricardo Dias 7 months ago

  • Target version set to v15.0.0

#3 Updated by Lenz Grimmer 7 months ago

  • Backport set to nautilus

#4 Updated by Volker Theile 7 months ago

  • Status changed from Fix Under Review to Resolved

#5 Updated by Lenz Grimmer 7 months ago

  • Status changed from Resolved to Pending Backport

#6 Updated by Nathan Cutler 7 months ago

  • Copied to Backport #41604: nautilus: dashboard: predefined system roles don't include read access to grafana scope added

#7 Updated by Lenz Grimmer 5 months ago

  • Status changed from Pending Backport to Resolved
  • Affected Versions v14.2.4 added

Also available in: Atom PDF