Skip to content

Reject operations on local users when the local auth provider is marked disabled#1410

Open
andreas-kupries wants to merge 7 commits into
mainfrom
local-auth-disable-on-external
Open

Reject operations on local users when the local auth provider is marked disabled#1410
andreas-kupries wants to merge 7 commits into
mainfrom
local-auth-disable-on-external

Conversation

@andreas-kupries
Copy link
Copy Markdown
Contributor

Issue:

rancher/rancher#46078

Problem

See issue

Solution

The existing validator for user operations is extended with additional which apply if and only if the local auth provider is marked (per setting) as disabled.

CheckList

  • Test
  • Docs

@andreas-kupries andreas-kupries added this to the v2.15.0 milestone Apr 23, 2026
@andreas-kupries andreas-kupries self-assigned this Apr 23, 2026
@andreas-kupries andreas-kupries requested a review from a team as a code owner April 23, 2026 12:58
Copy link
Copy Markdown
Collaborator

@crobby crobby left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seems reasonable, has tests/docs, just a nit on the one debug log

Comment thread pkg/resources/management.cattle.io/v3/users/validator.go Outdated
…ovider

note: requires new field settingCache
fix: tests - additional setup for new setting cache
todo: tests covering the new checks
Comment thread pkg/resources/management.cattle.io/v3/users/validator.go
Comment thread pkg/resources/management.cattle.io/v3/users/validator.go Outdated
assumes that response and error are not non-nil at the same time
Comment thread pkg/resources/management.cattle.io/v3/users/validator.go Outdated
Comment thread pkg/resources/management.cattle.io/v3/users/validator.go
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants