Hi,
I am currently exploring the new Authz/RBAC feature. It all sounds great, but I can’t figure out how to delete existing roles. I am staff and super admin of the platform, yet the Role and permission page does not allow me to delete existing role assignments. Is this not possible ?
Note: I also can’t find a place in the Django admin panel where I could edit those.
Ok, I found a place in the Django admin panel: /admin/casbin_adapter/casbinrule
I guess this is better than nothing, but I would expect the console to allow a super admin to edit those roles
Hi! Thanks so much for the report. There’s currently an unresolved issue in Verawood (solved in master already if I recall correctly) related to removing roles from staff or superusers: Cannot remove role assignments from Django superusers · Issue #180 · openedx/frontend-app-admin-console · GitHub
Could you check whether you’re able to remove roles from users who aren’t staff or superusers? It would be helpful to know whether you’re experiencing this specific issue or if the same behavior affects all users. Let me know what you find!
Hi @mgmdi
The first thing I did when implementing the new RBAC schema was to remove staff/super user to all people but me. The issue affects everyone, not just super users or staff.
Interesting. I’ll try to find out more!
I’m trying this out in our sandbox install (latest deploy last week and a half). Could you please share how this looks for you? Thanks!
Oh… well, actually, it does work…
It did not occur to me that the eye was meant to bring us to a place where we could delete permissions. I thought it was just meant to see. Or maybe I did go quickly on that once and saw the other bug because it was with a staff/superuser, and then my brain escaped clicking it again.
I would suggest changing the icon to something more explicit that indicates it can be clicked on to perform actions. Maybe a gear icon instead of an eye.