Add Project Member dialog allows duplicate role assignments to be created

[wormza]

Setup

• Rancher version: v2.13.3
• Rancher UI Extensions: N/A
• Browser type & version: Chrome (latest)

Describe the bug
The Add Project Member dialog in the Project Membership tab does not prevent you from assigning a role to a user or group that they already hold in the same project. Clicking Create silently creates a duplicate ProjectRoleTemplateBinding object. Over time this inflates the total PRTB count, compounding the display issues described in #17808, and causes multiple identical rows to appear in the table.

To Reproduce

1. Navigate to any cluster → Cluster and Project Members → Project Membership tab
2. For any project that already has a member with at least one role, click Add Project Member
3. Select the same user/group and the same role they already hold in that project
4. Click Create
5. Observe that a duplicate entry is created without any warning or error

Result
A new ProjectRoleTemplateBinding is created for every selected role with no duplicate check, even when identical bindings already exist.

Expected Result
If the selected user/group already holds the selected role in the project:

• Show an error and prevent creation if all selected roles are already assigned
• Show a warning and skip only the duplicates if some selected roles are new

The check should be keyed on projectId (not project display name) so that projects with the same name in different clusters are correctly distinguished.

Screenshots
N/A

Additional context
The root cause is in shell/dialog/AddProjectMemberDialog.vue — the createBindings method dispatches rancher/create for every selected roleTemplateId without checking whether a binding with the same projectId + roleTemplateId + principalId already exists in the Vuex store.

Duplicate bindings also inflate the global PRTB count, making the scale issue described in #17808 worse over time.

Fix tracked in #17814.

[richard-cox]

@wormza can you fill in the issue description template

[richard-cox]

Note that the ideal solution to both #17808 and #17809 is #12563

[wormza]

@wormza can you fill in the issue description template

Hi @richard-cox will do so tomorrow. Thanks.

Note that the ideal solution to both #17808 and #17809 is #12563

Issue 12563 won’t stop a user from adding duplicate roles ->User/Group mapping.

[github-actions]

🤖 Issue grooming analysis

This issue is well-groomed and ready for triage. Here's a summary:

Clear Problem Statement ✅
The title and description clearly explain that the Add Project Member dialog creates duplicate ProjectRoleTemplateBinding objects without any warning or prevention, inflating PRTB count and creating duplicate table rows.

Acceptance Criteria ✅
Concrete, verifiable criteria are provided: show an error and prevent creation when all selected roles are already assigned; show a warning and skip only duplicate roles when some are new. The check should be keyed on projectId.

Technical Details ✅
A proposed fix is described referencing the Vuex store, rancher/create dispatch, and matching on projectId + roleTemplateId + userPrincipalId/groupPrincipalId.

Reproducibility ✅
Numbered steps to reproduce with expected vs. actual behavior are clearly stated.

This analysis was generated automatically based on the repository's grooming checklist.

Generated by Daily Issue Grooming · ● 515.8K · ◷

[wormza]

@richard-cox I have used the template now.