Maxime Bajeux 414e62503b fix(rbac): forbidden view access (#101) ...

* fix(rbac): Not enforcing on backend for resource creation, application edit and console log operations of users that this should be prevented for

* + k8s access user namespaces policy
+ debug logs
* fix multiple authorization calculation issues

* * use endpoint role rather than user role for calculating authorizations

* * fix namespace role binding

* * check user authorization in k8s pod exec

* * fix some of the logging messages

Co-authored-by: yi-portainer <yi.chen@portainer.io>

2020-11-26 11:30:36 +13:00

1.5 KiB

Raw Blame History

View Raw