Skip to content

Commit 457ff0e

Browse files
ironAiken2claude
andcommitted
docs(FR-2909): align RBAC manual with revoke confirmation modal and refresh screenshots
Resolves #7454(FR-2909) Follow-up to #7446. Reconciles the RBAC management manual (en/ja/ko/th) with what FR-2819 / FR-2825 actually ship. - Bump required Backend.AI Manager version 25.4.0 -> 26.4.0 in the RBAC note (rbac_management.md + admin_menu.md, all 4 languages) - Remove the "Role Status Management" subsection that was misplaced under "View Role Details" (its content describes role-list row actions; Active/Inactive is already covered by the Role List status filter) - Rewrite "Revoke Users from a Role": the UI changed from a lightweight popconfirm to an irreversible typed-confirmation modal (BAIConfirmModalWithInput). Documents the per-language confirmation string (en: Permanently Delete / ko: 영구 삭제 / ja: 完全に削除 / th: ลบถาวร) and adds a :::danger irreversibility note - Recapture screenshots from the live UI, replacing stale / hand-built images: rbac_role_detail_drawer.png and rbac_role_scope_tab.png (new localized tab labels Scopes/Permissions/Role Assignments), rbac_revoke_popconfirm.png (new typed modal), rbac_permission_modal.png (real Add Permission modal captured via project-2de2b969-member) - All 4 language variants kept structurally identical 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
1 parent 3aeee5f commit 457ff0e

24 files changed

Lines changed: 36 additions & 72 deletions

packages/backend.ai-webui-docs/src/en/admin_menu/admin_menu.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1416,7 +1416,7 @@ This page is only for showing current information.
14161416
RBAC (Role-Based Access Control) Management allows superadmins to define roles with fine-grained permissions and assign them to users. You can control which actions specific users are allowed to perform on various resources throughout the Backend.AI system.
14171417

14181418
:::note
1419-
RBAC Management is only available to superadmins and requires Backend.AI Manager version 25.4.0 or later.
1419+
RBAC Management is only available to superadmins and requires Backend.AI Manager version 26.4.0 or later.
14201420
:::
14211421

14221422
For detailed information about managing roles, permissions, and user assignments, refer to the dedicated [RBAC Management](#rbac-management) page.
-127 KB
Loading
-110 KB
Loading
-21.3 KB
Loading
-21.3 KB
Loading

packages/backend.ai-webui-docs/src/en/rbac_management/rbac_management.md

Lines changed: 8 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
RBAC (Role-Based Access Control) Management allows superadmins to define roles with fine-grained permissions and assign them to users. With RBAC, you can control which actions specific users are allowed to perform on various resources throughout the Backend.AI system.
66

77
:::note
8-
RBAC Management is only available to superadmins and requires Backend.AI Manager version 25.4.0 or later.
8+
RBAC Management is only available to superadmins and requires Backend.AI Manager version 26.4.0 or later.
99
:::
1010

1111
To access the RBAC Management page, click **RBAC Management** in the **Admin Settings** section of the sidebar menu.
@@ -97,19 +97,6 @@ To edit a custom role's name or description:
9797
The Edit button is only available for Custom roles. System roles cannot have their name or description modified. Scopes cannot be modified after role creation in either case.
9898
:::
9999

100-
### Role Status Management
101-
102-
Roles have two statuses that you can manage from the role list:
103-
104-
- **Active**: The role is currently in effect. You can **Deactivate** an active role to temporarily suspend it.
105-
- **Inactive**: The role is suspended. You can **Activate** an inactive role to restore it, or **Purge** it to permanently remove it.
106-
107-
Each role row displays a **Deactivate** action button when viewing **Active** roles, or **Activate** and **Purge Role** action buttons when viewing **Inactive** roles.
108-
109-
:::danger
110-
Purging a role is irreversible. The role and all its associated data will be permanently removed. You must remove all user assignments and permissions from the role before purging.
111-
:::
112-
113100
## View Role Scopes
114101

115102
The **Scopes** tab in the role detail drawer lists the scope entries that were assigned to the role at creation time. Each entry constrains the set of targets that permissions on this role can reference.
@@ -205,9 +192,13 @@ The **Role Assignments** tab in the role detail drawer shows which users are ass
205192

206193
### Revoke Users from a Role
207194

208-
1. In the **Role Assignments** tab, click the **Revoke User** button next to the user you want to remove
209-
2. A small confirmation popup appears anchored to the button. Click **OK** to revoke the assignment, or **Cancel** to dismiss.
195+
1. In the **Role Assignments** tab, click the revoke (trash) icon button next to the user you want to remove
196+
2. A **Revoke User** confirmation modal opens. Type **`Permanently Delete`** into the input field exactly as shown — the **Revoke User** button stays disabled until the entered text matches. Click **Revoke User** to confirm, or **Cancel** to dismiss.
210197

211198
![](../images/rbac_revoke_popconfirm.png)
212199

213-
Revoking a user removes only that user's assignment to this role; the role itself and its other assignments are kept, and the user can be added back from **Add User** at any time. Because the action is reversible, it uses a lightweight popup confirmation rather than a typed-name confirmation modal.
200+
Revoking a user removes only that user's assignment to this role; the role itself and its other assignments remain unchanged.
201+
202+
:::danger
203+
Revoking a user from a role cannot be undone. The confirmation modal requires you to type `Permanently Delete` before the **Revoke User** button is enabled.
204+
:::

packages/backend.ai-webui-docs/src/ja/admin_menu/admin_menu.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1332,7 +1332,7 @@ Backend.AIの各コンポーネントに互換性があるかどうかを確認
13321332
RBAC(ロールベースアクセス制御)管理では、スーパー管理者がきめ細かい権限を持つロールを定義し、ユーザーに割り当てることができます。Backend.AIシステム全体で特定のユーザーがさまざまなリソースに対して実行できる操作を制御できます。
13331333

13341334
:::note
1335-
RBAC管理はスーパー管理者のみが利用でき、Backend.AI Managerバージョン25.4.0以降が必要です。
1335+
RBAC管理はスーパー管理者のみが利用でき、Backend.AI Managerバージョン26.4.0以降が必要です。
13361336
:::
13371337

13381338
ロール、権限、ユーザー割り当ての管理の詳細については、[RBAC管理](#rbac-management)ページを参照してください。
-140 KB
Loading
-104 KB
Loading
-23.4 KB
Loading

0 commit comments

Comments
 (0)