Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ui] Modify variable access permissions for UI users with write in only certain namespaces #24073

Conversation

philrenaud
Copy link
Contributor

@philrenaud philrenaud commented Sep 26, 2024

Expands the "Can this user write a variable?" logic so that users with a namespace.variable.write (but not allNamespaces.variable.write) get a "Create Variable" button.

image

Resolves #23905

@philrenaud philrenaud force-pushed the 23905-operators-with-acl-limited-namespace-access-cant-easily-create-variable-in-nomadjobs-path branch from 07d10f5 to ac78fcd Compare September 26, 2024 20:31
@philrenaud philrenaud marked this pull request as ready for review September 26, 2024 20:32
Copy link

github-actions bot commented Sep 26, 2024

Ember Test Audit comparison

main 82f6a7e change
passes 1581 1581 0
failures 0 0 0
flaky 0 0 0
duration 11m 49s 857ms 11m 29s 164ms -20s 693ms

Copy link
Member

@tgross tgross left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. I've left some questions but nothing blocking if you know you can resolve/dismiss those.

ui/app/abilities/variable.js Outdated Show resolved Hide resolved
ui/app/abilities/variable.js Outdated Show resolved Hide resolved
@philrenaud philrenaud force-pushed the 23905-operators-with-acl-limited-namespace-access-cant-easily-create-variable-in-nomadjobs-path branch from 33763cc to 468dc16 Compare October 1, 2024 14:32
Copy link
Member

@tgross tgross left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Long-term, I wonder if it wouldn't be a bad idea to model the backend's acl package directly so that we could run conformance tests between them. That would involve building out the radix trie datastructure we use there, so it's a bit of a lift, but we wouldn't need its transaction safety either.

.changelog/24073.txt Outdated Show resolved Hide resolved
@philrenaud philrenaud force-pushed the 23905-operators-with-acl-limited-namespace-access-cant-easily-create-variable-in-nomadjobs-path branch from 5656618 to 82f6a7e Compare October 2, 2024 13:41
@philrenaud philrenaud merged commit 2fc7544 into main Oct 2, 2024
23 checks passed
@philrenaud philrenaud deleted the 23905-operators-with-acl-limited-namespace-access-cant-easily-create-variable-in-nomadjobs-path branch October 2, 2024 20:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Operators with ACL-Limited Namespace Access Can't Easily Create Variable in nomad/jobs Path
2 participants