What would you like Teleport to do?

Web UI should update access request "status" to LOCKED and maybe also disable the "assume roles" button when an access request is locked. Currently, it shows APPROVED status and that the user can assume approved access request role, even when it is locked.

$ tctl get locks
kind: lock
metadata:
  name: f32c6425-079e-4b2c-8c98-2c360cba866a
spec:
  created_at: "2024-06-21T15:22:37.683192Z"
  created_by: Admin
  expires: "2024-06-21T16:22:37.678726Z"
  target:
    access_request: 01903b4b-1d4a-7a1d-aa43-a7bba530ba55

The error message reported when user tries to assume locked role is also not clear enough. It says user "username" can not request role "rolename". It should say "this access request is locked"

What problem does this solve?

Better user experience.

If a workaround exists, please include it.

n.a