You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
docs(rbac): align with revoke/remove confirmation flow and localized scope names
Part of the recent main-branch docs catch-up plan (Work Item 6).
Source PRs:
- FR-2775 (#7155) localize ROLE_ASSIGNMENT and resolve scope name in permission modal
- FR-2803 (#7229) Korean RBAC: use 역할 (role) / 동작 (action)
- FR-2804 (#7231) Popconfirm-style for reversible RBAC revoke/remove flows
- FR-2828 (#7276) adaptive filter input types for RBAC permission/entity queries
Changes:
- Manage Permissions: scope target now shown as resolved localized name (not raw UUID); permission type label localized.
- Remove a Permission / Revoke Users from a Role: documented Popconfirm-style anchored popup (reversible); not typed-confirm.
- Korean version: 권한 → 역할 for role semantics; 동작 for operation; 세부 권한 retained for fine-grained permissions — matches resources/i18n/ko.json.
- Role List + Permissions tab filter: adaptive input types per selected property.
Updated in all 4 languages (en/ko/ja/th). Screenshots flagged with TODO markers.
Copy file name to clipboardExpand all lines: packages/backend.ai-webui-docs/src/en/rbac_management/rbac_management.md
+21-11Lines changed: 21 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -17,7 +17,7 @@ To access the RBAC Management page, click **RBAC Management** in the **Admin Set
17
17
The Role List page displays all roles in a table format. You can filter, search, and sort roles using the controls at the top of the page.
18
18
19
19
-**Status filter**: A segmented control to toggle between **Active** and **Inactive** roles. Active is selected by default.
20
-
-**Name search**: A property filter to search roles by name or filter by source (System or Custom).
20
+
-**Name search**: A property filter to search roles by name or filter by source (System or Custom). The filter input adapts to the selected property — for example, the **Source** filter exposes the available values (System / Custom) as a typed selector rather than a free-form text box, while the **Name** filter accepts free text.
21
21
-**Create Role**: A button to create a new custom role.
22
22
23
23
The table displays the following columns:
@@ -165,21 +165,28 @@ Here are some common permission configurations to help you understand how the fo
165
165
1. Open the role detail drawer and select the **Permissions** tab
166
166
2. Click the **Add Permission** button
167
167
3. In the modal, fill in the following fields:
168
-
-**Scope Type / Target**: Select one of the scope entries that were assigned to the role. The dropdown lists only scopes that have at least one actionable entity.
169
-
-**Permission Type**: Select the entity type. Only valid types for the selected scope type are shown.
168
+
-**Scope Type / Target**: Select one of the scope entries that were assigned to the role. The dropdown lists only scopes that have at least one actionable entity. The target is shown by its resolved, localized name (for example, the domain or project's display name) rather than its raw UUID, so you can recognize the scope at a glance.
169
+
-**Permission Type**: Select the entity type. Only valid types for the selected scope type are shown. Permission type labels (such as **Role Assignment**) are localized to match your UI language.
170
170
-**Permission**: Select the operation (e.g., Create, Read, Update, Soft Delete, Hard Delete, or delegation operations)
171
171
4. Click **Add** to create the permission
172
172
173
-

173
+

174
+
<!-- TODO: Recapture screenshot of the Add Permission modal showing the resolved, localized scope target name and localized Permission Type labels (replaces rbac_add_permission_modal.png) -->
175
+
176
+
:::note
177
+
The filter controls in the permissions list now use input types tailored to each filter property — selectors for enumerated values (such as Permission Type, Permission), and free text for name-style fields — making it faster to narrow the list to the entries you care about.
178
+
:::
174
179
175
180
:::note
176
181
If a role was created without any scopes (for example, a legacy role imported from an earlier version), the **Add Permission** modal falls back to showing separate **Scope Type** and **Target** fields so that administrators can still configure the permission target.
177
182
:::
178
183
179
-
### Delete a Permission
184
+
### Remove a Permission
180
185
181
-
1. In the **Permissions** tab, click the **Delete** button next to the permission you want to remove
182
-
2. Confirm the deletion in the confirmation dialog
186
+
1. In the **Permissions** tab, click the **Remove Permission** button next to the permission you want to remove
187
+
2. A small confirmation popup appears anchored to the button. Click **OK** to confirm, or **Cancel** to dismiss.
188
+
189
+
Removing a permission from a role only detaches it from the role's permission set — the role itself, its scopes, and its user assignments are kept. You can add the same permission back later from the same tab, so this action is treated as reversible and uses a lightweight popup confirmation rather than a typed-name confirmation modal.
183
190
184
191
## Manage User Assignments
185
192
@@ -197,9 +204,12 @@ The **Role Assignments** tab in the role detail drawer shows which users are ass
197
204
198
205

199
206
200
-
### Remove Users from a Role
207
+
### Revoke Users from a Role
208
+
209
+
1. In the **Role Assignments** tab, click the **Revoke User** button next to the user you want to remove
210
+
2. A small confirmation popup appears anchored to the button. Click **OK** to revoke the assignment, or **Cancel** to dismiss.
201
211
202
-
1. In the **Role Assignments** tab, click the **Delete** button next to the user you want to remove
203
-
2. Confirm the removal in the confirmation dialog
212
+

213
+
<!-- TODO: Capture screenshot of the Popconfirm-style revoke confirmation anchored to the Revoke User button -->
204
214
205
-

215
+
Revoking a user removes only that user's assignment to this role; the role itself and its other assignments are kept, and the user can be added back from **Add User** at any time. Because the action is reversible, it uses a lightweight popup confirmation rather than a typed-name confirmation modal.
0 commit comments