Skip to content

Commit 3bc9549

Browse files
committed
Introduce pluginsWithPermission information
Signed-off-by: Dominika Zemanovicova <[email protected]>
1 parent b8d6973 commit 3bc9549

File tree

3 files changed

+20
-2
lines changed

3 files changed

+20
-2
lines changed

modules/authorization/proc-enabling-the-rbac-plugin.adoc

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -39,6 +39,24 @@ permission:
3939
users:
4040
- name: user:default/__<your_policy_administrator_name>__
4141
----
42+
. In order for the {product-short} Web UI to display available permissions provided by installed plugins, the corresponding plugin
43+
IDs must be added to your custom {product-short} ConfigMap, such as `app-config-rhdh`.
44+
+
45+
To display available permissions in RBAC UI, edit your custom {product-short} ConfigMap, such as `app-config-rhdh`, and add following code to the `{my-app-config-file}` content:
46+
+
47+
.`{my-app-config-file}` fragment
48+
[source,yaml,subs=+quotes]
49+
----
50+
permission:
51+
enabled: true
52+
rbac:
53+
admin:
54+
users:
55+
- name: user:default/__<your_policy_administrator_name>__
56+
pluginsWithPermission:
57+
- catalog
58+
- scaffolder
59+
----
4260

4361
.Verification
4462
. Sign out from the existing {product} session and log in again using the declared policy administrator account.

modules/authorization/proc-rbac-ui-create-role.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
You can create a role in the {product} using the Web UI.
55

66
.Prerequisites
7-
* You xref:enabling-and-giving-access-to-rbac[have enabled RBAC and have a policy administrator role in {product-short}].
7+
* You xref:enabling-and-giving-access-to-rbac[have enabled RBAC, have a policy administrator role in {product-short} and have added plugins with permission].
88

99
.Procedure
1010

modules/authorization/proc-rbac-ui-edit-role.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ The policies generated from a `policy.csv` or ConfigMap file cannot be edited or
99
====
1010

1111
.Prerequisites
12-
* You xref:enabling-and-giving-access-to-rbac[have enabled RBAC and have a policy administrator role in {product-short}].
12+
* You xref:enabling-and-giving-access-to-rbac[have enabled RBAC, have a policy administrator role in {product-short} and have added plugins with permission].
1313
* The role that you want to edit is created in the {product-short}.
1414

1515
.Procedure

0 commit comments

Comments
 (0)