Resource required for admin permissions

[jinapurapu]

Expected Behavior

Policy with admin:AddUser permission should not require any resource to enable "Create User" button.

Current Behavior

User policy with "admin:AddUser" does not enable Create User button unless a resource is also defined in the policy.

Possible Solution

Fix hasPermission function for admin permissions

Steps to Reproduce (for bugs)

1. Create the following Policy and apply it to a Console User:

  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "admin:AttachUserOrGroupPolicy",
        "admin:CreateUser",
        "admin:ListGroups",
        "admin:ListUserPolicies",
        "admin:ListUsers"
      ]
    }
  ]
}

3. Log into Console as User with the above policy and go to Users screen, Create User button is disabled