Project

General

Profile

Bug #50174

mgr/dashboard: Read-only user can see registry password

Added by Nizamudeen A 15 days ago. Updated 6 days ago.

Status:
Pending Backport
Priority:
Normal
Assignee:
Category:
dashboard/UI
Target version:
% Done:

0%

Source:
Tags:
Backport:
pacific, octopus, nautilus
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

In ceph dashboard user with role `read-only` can see registry password,
Cluster -> Manager Modules -> cephadm
Secure parameters like `registry_password` visible in plain text


Related issues

Copied to mgr - Backport #50202: nautilus: mgr/dashboard: Read-only user can see registry password In Progress
Copied to mgr - Backport #50203: pacific: mgr/dashboard: Read-only user can see registry password Resolved
Copied to mgr - Backport #50204: octopus: mgr/dashboard: Read-only user can see registry password In Progress

History

#1 Updated by Nizamudeen A 15 days ago

  • Status changed from In Progress to Fix Under Review
  • Pull request ID set to 40624

#2 Updated by Ernesto Puerta 14 days ago

  • Status changed from Fix Under Review to Pending Backport
  • Target version set to v17.0.0

#3 Updated by Backport Bot 14 days ago

  • Copied to Backport #50202: nautilus: mgr/dashboard: Read-only user can see registry password added

#4 Updated by Backport Bot 14 days ago

  • Copied to Backport #50203: pacific: mgr/dashboard: Read-only user can see registry password added

#5 Updated by Backport Bot 14 days ago

  • Copied to Backport #50204: octopus: mgr/dashboard: Read-only user can see registry password added

#6 Updated by Ernesto Puerta 6 days ago

  • Project changed from mgr to Dashboard
  • Category changed from dashboard/UI to dashboard/UI

Also available in: Atom PDF