Bug: UI Console Missing Features

[hessonam]

NOTE

Please subscribe to our paid subscription plans for 24x7 support from our Engineering team.

Expected Behavior

UI is not missing features

Current Behavior

UI is missing features

Possible Solution

Add back features to UI

Steps to Reproduce (for bugs)

1. Go to UI
2. Observe that features are missing

Context

This issue has caused trouble for me.

Regression

Yes this issue is a massive regression.

[ramondeklein]

The removal of the console is intended, so it's not considered a bug.

[hessonam]

Please explain why the removal of the console is intended.

[harshavardhana]

We initially explored a basic admin UI for the community branch but haven't actively maintained it. Building and supporting separate graphical consoles for the community and commercial branches is substantial. Honestly, it is hard to duplicate this work for the community branch. A whole team is involved in console development, including design, UX, front-end, back-end, and pen testing. This commit introduces an enhanced object browser but removes the unmaintained admin UI code.

Unlike the S3 RESTful APIs, admin actions in the console lack equivalent security protections. Without dedicated maintenance, this code risks introducing security vulnerabilities and creating misleading expectations for the community. For context, see past issues like the "Console Filename Masking Vulnerability" and "Metadata Bucket Name Bypass."

We're open to community contributions! If anyone is interested in taking on long-term development and security for the management console, we warmly welcome your pull requests.

We will thoroughly review such PRs which meet those requirements.

[mohankumar-h]

LDAP user also not allowed login community console UI?

[myrust-go]

I think your approach is very unreasonable. This feature has been in the early versions, but now it is directly deleted, saying that it is not maintained? Why is the commercial version of the console so well maintained?

Some MinIO competitors, such as RustFS, sweedfs, etc., are strengthening the functions of the console.

I think this decision is stupid.

[myrust-go]

You can see that RustFS is progressing very quickly.