FE: RBAC: ACL Delete Button is enabled despite no permissions

[Alexander-ac]

Issue submitter TODO list

• I've looked up my issue in FAQ
• I've searched for an already existing issues here
• I've tried running main-labeled docker image and the issue still persists there
• I'm running a supported version of the application which is listed here

Describe the bug (actual behavior)

Hello everyone, thank you for a great program. I have the following problem. I want to display the ACL in production, but block all other operations.
I have adjusted the config as follows:

permissions:
.....
- resource: acl
actions: view

Unfortunately, I can see that I cannot create the ACL, but the Remove button is there and I can use it. Then the confirmation dialog appears when I click on the symbol.

Does anyone else have this problem?

Many thanks in advance,

Alex

Expected behavior

No response

Your installation details

kafka-ui:v1.1.0

Steps to reproduce

Create config like this:

permissions:
.....
- resource: acl
actions: view

Try to delete the acl.

Screenshots

No response

Logs

No response

Additional context

No response

[Haarolean]

most likely, it doesn't have an RBAC validation assigned on the frontend, so confirming deletion will yield HTTP 403. Will fix the frontend issue though.

[Haarolean]

TODO: In frontend/src/components/ACLPage/List/List.tsx apply a RBAC permission:

permission={{
                resource: ResourceType.ACL,
                action: Action.EDIT,
              }}

In order to do that, the component has to implement ActionComponentProps like any other RBAC-supported components (e.g. ActionDropdownItem).