From 9e1fe16873dae4c1678a3c2e4398ded19b6d33f4 Mon Sep 17 00:00:00 2001 From: Gabriel MABILLE Date: Wed, 10 Dec 2025 18:00:24 +0100 Subject: [PATCH] `AuthZ`: Remove automatic Admin grant for root folders and dashboards (#115098) --- pkg/registry/apis/dashboard/register.go | 5 ----- pkg/registry/apis/folders/register.go | 5 ----- 2 files changed, 10 deletions(-) diff --git a/pkg/registry/apis/dashboard/register.go b/pkg/registry/apis/dashboard/register.go index 8fbad6042ad..c0cd241c1c4 100644 --- a/pkg/registry/apis/dashboard/register.go +++ b/pkg/registry/apis/dashboard/register.go @@ -775,11 +775,6 @@ func (b *DashboardsAPIBuilder) afterDelete(obj runtime.Object, _ *metav1.DeleteO } var defaultDashboardPermissions = []map[string]any{ - { - "kind": "BasicRole", - "name": "Admin", - "verb": "admin", - }, { "kind": "BasicRole", "name": "Editor", diff --git a/pkg/registry/apis/folders/register.go b/pkg/registry/apis/folders/register.go index 72a4abf8e0a..64e51c06312 100644 --- a/pkg/registry/apis/folders/register.go +++ b/pkg/registry/apis/folders/register.go @@ -203,11 +203,6 @@ func (b *FolderAPIBuilder) UpdateAPIGroupInfo(apiGroupInfo *genericapiserver.API } var defaultPermissions = []map[string]any{ - { - "kind": "BasicRole", - "name": "Admin", - "verb": "admin", - }, { "kind": "BasicRole", "name": "Editor",