Skip to content

[Backport release-0.37] [rbac] Fix permissions for high-privilege users - #1624

Merged
Andrei Kvapil (kvaps) merged 1 commit into
release-0.37from
backport-1622-to-release-0.37
Nov 12, 2025
Merged

[Backport release-0.37] [rbac] Fix permissions for high-privilege users#1624
Andrei Kvapil (kvaps) merged 1 commit into
release-0.37from
backport-1622-to-release-0.37

Conversation

@github-actions

Copy link
Copy Markdown

Description

Backport of #1622 to release-0.37.

## What this PR does

This patch grants "admin" permissions to super-admins, "use" permissions
to admins and super-admins, "view" permissions to "use"-privileged
users, admins, and super-admins. Previously lower-privileged roles were
not assigned to higher-privileged users, so a viewer could excercise
their basic read-only permissions which were not available to
high-privilege users. This patch corrects the template function used to
generate subjects in rolebindings, fixing the issue.

### Release note

```release-note
[rbac] Fix issue of privileged users not having low-privilege read-only
permissions.
```

Signed-off-by: Timofei Larkin <lllamnyp@gmail.com>
(cherry picked from commit 7ddd9cf)
@dosubot dosubot Bot added the size/XS This PR changes 0-9 lines, ignoring generated files label Nov 12, 2025
@coderabbitai

coderabbitai Bot commented Nov 12, 2025

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@dosubot dosubot Bot added the kind/bug Categorizes issue or PR as related to a bug label Nov 12, 2025
@kvaps
Andrei Kvapil (kvaps) merged commit 2878fd1 into release-0.37 Nov 12, 2025
2 checks passed
@kvaps
Andrei Kvapil (kvaps) deleted the backport-1622-to-release-0.37 branch November 12, 2025 14:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/bug Categorizes issue or PR as related to a bug size/XS This PR changes 0-9 lines, ignoring generated files

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants