[Kimchi-devel] [PATCH V4 0/4] Authorization: disable non-root user functions in UI

[wenwang at linux.vnet.ibm.com]

From: Wen Wang <wenwang at linux.vnet.ibm.com>

V3 -> V4:
Removed the additional white border line in user mode(Aline)
Minor change to the layout of the storage tab of user mode that makes
the arrow-down/arrow-up more consistent(Aline)

V2 -> V3:
stored the mode into global _tabMode that can be used for each tab.(Aline)
Making the buttons that is not avaiable for non-root users invisible
by default and enable when user is admin.(Yu Xin)
Fixed css inconsistent under "Storage" tab.
Removed the onClick function if the buttons are not avaiable.

V1 -> V2:
Store "roles" parameter in cookie instead of each tab's mode.(Aline)
read only "roles" from cookie instead of roles of each tab(Aline)
Minor changes in method of removing "Action" title under network tab
(Hongliang Wang)

This patch defines user privilege according to different user roles In this
release, only two roles are supported: "admin" and "user", conbined with four
modes: "admin", "byInstance", "read-only" and "none", each of which has own
privileges to different tabs as well as instances. modes are stored in cookie
and functions of different roles are protected in the back-end.

Wen Wang (4):
  Add roles into cookie
  Authorization: remove host/template tabs for non-root users
  Authorization: remove [+] icon from non-root users view
  Authorization: Remove actions based on roles

 ui/css/theme-default/network.css  |    4 +
 ui/css/theme-default/storage.css  |   22 ++++---
 ui/js/src/kimchi.guest_main.js    |   10 ++-
 ui/js/src/kimchi.login.js         |   16 +++--
 ui/js/src/kimchi.main.js          |   26 +++++--
 ui/js/src/kimchi.network.js       |   12 +++-
 ui/js/src/kimchi.storage_main.js  |  137 ++++++++++++++++++++-----------------
 ui/js/src/kimchi.template_main.js |   21 ++++--
 ui/pages/tabs/guests.html.tmpl    |    4 +-
 ui/pages/tabs/network.html.tmpl   |    6 +-
 ui/pages/tabs/storage.html.tmpl   |    6 +-
 ui/pages/tabs/templates.html.tmpl |    2 +-
 12 files changed, 159 insertions(+), 107 deletions(-)