Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

bug: Users with "User Admin" role can delete users with workspaces #19209

Closed
Assignees
ethanndickson
Labels
needs-triageIssue that require triage
@evilhamsterman

Description

@evilhamsterman

Is there an existing issue for this?

  • I have searched the existing issues

Current Behavior

We setup our Helpdesk team with the User Admin role to allow them to remove users that leave. According to issue#7872 they shouldn't be able to delete a user with workspaces. However it appears they are able to. An owner like myself am unable to delete the user, but they can.

My guess is the check here

iflen(workspaces)>0 {
is using is using my help desk user's permissions to look up the workspaces for the user they are deleting, but since they don't have rights to see the users workspace the number of workspaces returned is 0. Solen(workspaces) > 0 is false from their perspective and the user delete is allowed to proceed.

Relevant Log Output

Expected Behavior
The user workspaces are deleted with the user, or the user delete is blocked.
Steps to Reproduce
  1. Create a test user and a test workspace
  2. Create a useradmin user with the User Admin role
  3. Use useradmin to delete the user
  4. The user is deleted but the workspace remains
Environment
  • Host OS: K3S 1.32.5+k3s1
  • Coder version: v2.22.1+8708d81
Additional Context
No response
Metadata
Metadata
Assignees
Labels
needs-triageIssue that require triage
Type
Projects
No projects
Milestone
No milestone
Relationships
None yet
Development
No branches or pull requests
Issue actions
      


    
[8]ページ先頭
    

    ©2009-2025 Movatter.jp