- Remove spoofed rbac role template type
- Use spoof's base type's management global role and role template types
- Display these types as global, cluster and project tables in auth product
- As a restricted-user attempting to assign a group the 'admin' global permission resulted in the user being logged out of the dashboard
- We now show the raw error instead
- See #2525
- Move descriptions into checkbox, handle size, colour and placement inside component
- Colour of label is a standard form colour, so in this case override it locally
- Update Users list with actions
- Add User create/edit page
- Add User details page
- Brought over user/principal global role validation from ember world
- promptRemove verb matches cluster explorer (delete), and text and buttons match
- update global role binding metadata.generateName from ui- to grb-
- update comment on applyProducts
- Add groups page with table to the auth product
- Allow user to assign roles to groups previously without roles or edit
groups with existing roles
Comments
- I haven't added any special ux for the case where there's no auth
provider and therefore no groups
- ./components/GlobalRoleBindings.vue will be updated when the same
component is used for assign global roles to a user principal
- ./components/GlobalRoleBindings.vue ln 139 Couldn't create a binding
without the generateName metadata property. Have given this a
`ui-` prefix. Is this correct?
- In order to determine which global roles are bound to each principal
(so we can filter by principals that have them).. we go out and fetch
ALL role bindings. Is this too costly?
- On the groups page the 'refresh' button is quite big, we should
consider reducing this
Cody Jackson
Richard Cox
Richard Cox