Graceful degradation needed for users with limited permissions
Closed this issue · 1 comments
For users with read-only access (that doesn't include watch
permission) an alternative refresh-on-interval method is needed to maintain a semi-realtime view of the cluster state. This decision/fallback needs to occur on a per-resource kind basis, for any case where the user is allowed to get
the resource kind, but not watch
it.
In addition, a fallback is also needed for cases where a user is authorized to list
a resource kind, but cannot get
individual instances of that resource (this might occur for Secret
type resources).
On top of this, some users may not be allowed to issue watch
/get
/list
at a global level, but will be permitted within some namespaces.
Related is the distinction for resources that a user would not be allowed to create/edit/delete ( #23 )--the user should see a "View" option as opposed to an "Edit" option for those resources, and should not be allowed to invoke the "Create" or "Delete" options at all.
Testing should be conducted against the following profiles:
- (control) User with full admin permission to all resources
- should see edit/exec resources from all namespaces
- User with admin permission to all resources within 2 namespaces (and nothing else)
- should only see resources from those 2 namespaces displayed
- User with
get
/list
/watch
permission to all resources within 2 namespaces (no create/edit/delete)- should be able to see all resources from those 2 namespaces
- should not see any "Delete", "Edit" or "Create" actions available
- User with only
list
andget
permission to a given resource within a given namespace- should see all instances of that resource in the namespace
- should not see any "Delete", "Edit" or "Create" actions available
complete, as of v0.1-b15