User logged out when transitioning to a project with non-admin role
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Dashboard (Horizon) |
Confirmed
|
Medium
|
Ivan Kolodyazhny |
Bug Description
When a user is viewing the admin overview tab of project A: If she switches to project B for which she is not an admin, she is logged out and given an "Unauthorized. Please try logging in again" error. Due to the "next" argument in the url, the user must also modify the browser url before she is able to log back in.
To replicate:
Create project A where the user is a member and admin.
Create project B where the user is a member.
Log into project A and view the Admin->
Switch to project B.
Other admin tabs affected differently. For example, switching projects from the Admin->
I would expect any /admin/ url, for which a user is not an admin, to redirect to Project-
Changed in horizon: | |
assignee: | nobody → xujun (yamajik) |
status: | Confirmed → In Progress |
Changed in horizon: | |
milestone: | pike-2 → pike-3 |
Changed in horizon: | |
milestone: | pike-3 → queens-1 |
Changed in horizon: | |
status: | In Progress → New |
assignee: | xujun (yamajik) → nobody |
Changed in horizon: | |
milestone: | queens-1 → queens-2 |
Changed in horizon: | |
milestone: | queens-2 → queens-3 |
Changed in horizon: | |
milestone: | queens-3 → queens-rc1 |
Changed in horizon: | |
milestone: | queens-rc1 → queens-rc2 |
Changed in horizon: | |
milestone: | queens-rc2 → rocky-1 |
Changed in horizon: | |
milestone: | rocky-1 → rocky-2 |
we received a similar feedback several time. I think it is time to revisit the current behavior.
If a log-in form is displayed, many users feel they need to log-in again even though there is a message that you can click the link shown to go back to the project page (or something).