provectus/kafka-ui

[RBAC] Disable inaccessible menu items

Open

#2994 opened on Nov 30, 2022

View on GitHub
 (3 comments) (0 reactions) (0 assignees)Java (7,799 stars) (977 forks)batch import
area/rbacgood first issuescope/frontendstatus/acceptedtype/enhancement

Description

Describe the bug In case user doesn't have any permission for any block (Consumers f.ex.), the corresponding element in the left menu should be disabled

Set up https://www.kafka-ui.provectus.io/

Steps to Reproduce

  1. Make sure user doesn't have any permission for "Consumers"
  2. Login to Kafka-ui
  3. Check cluster components in a left

Expected behavior The Consumers component should not be visible in a cluster slide bar

Screenshots

https://user-images.githubusercontent.com/104780608/204810047-60dde163-1497-4db2-a4d6-1c2812395931.mov

Contributor guide

Tech stack
javareact
Domain
full stack
Issue type
bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
mostly clear
Prerequisites
Understanding of Kafka UI permission systemReact and Java development setup
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
55
Research direction
The issue requests that menu items be hidden (or disabled) when a user lacks permission for that block. Developers should locate the sidebar component in the frontend codebase (likely under the ui or frontend folder) and integrate permission checks. The backend provides permission data via an API; understanding the RBAC structure is essential. The three comments on the issue may offer additional clarification, so review them for any maintainer guidance or constraints.