-
Task
-
Resolution: Fixed
-
L3 - Default
-
None
-
None
-
Not defined
In Optimize C8SM, we currently advise users to hide the logout button with an env var. However, we should instead display the logout button like in other modes and have it invalidate the session with Identity. Operate already do this, so we should also do it for consistency: https://github.com/camunda/operate/blob/0b580791e29fac1701a678b114e1e3a02f37b257/webapp/src/main/java/io/camunda/operate/webapp/security/identity/IdentityService.java#L47
ATs:
- Optimize C8SM displays the logout button, which invalidates the token with identity when used
- Our documentation no longer tells users to hide this button
- Our helm charts no longer hide the logout button
Testing Notes:
- The logout button is visible in the UI
- When clicked, the user no longer has access to Optimize
- When the next token refresh happens, the user no longer has access to Identity or the other applications
This is the controller panel for Smart Panels app
[OPT-6733] Add logout button for Optimize in C8SM
| Link | New: This issue is related to INFOSEC-72 [ INFOSEC-72 ] |
| Link | New: This issue is related to SUPPORT-15652 [ SUPPORT-15652 ] |
| Status | Original: Triage [ 10612 ] | New: Ready [ 10005 ] |
| Status | Original: Ready [ 10005 ] | New: In Development [ 10312 ] |
| Status | Original: In Development [ 10312 ] | New: Ready [ 10005 ] |
| Status | Original: Ready [ 10005 ] | New: In Development [ 10312 ] |
| Description |
Original:
In Optimize C8SM, we currently advise users to hide the logout button with an env var. However, we should instead display the logout button like in other modes and have it invalidate the session with Identity. Operate already do this, so we should also do it for consistency: [https://github.com/camunda/operate/blob/0b580791e29fac1701a678b114e1e3a02f37b257/webapp/src/main/java/io/camunda/operate/webapp/security/identity/IdentityService.java#L47]
*ATs:* * Optimize C8SM displays the logout button, which invalidates the token with identity when used * Our documentation no longer tells users to hide this button * Our helm charts no longer hide the logout button |
New:
In Optimize C8SM, we currently advise users to hide the logout button with an env var. However, we should instead display the logout button like in other modes and have it invalidate the session with Identity. Operate already do this, so we should also do it for consistency: [https://github.com/camunda/operate/blob/0b580791e29fac1701a678b114e1e3a02f37b257/webapp/src/main/java/io/camunda/operate/webapp/security/identity/IdentityService.java#L47]
*ATs:* * Optimize C8SM displays the logout button, which invalidates the token with identity when used * Our documentation no longer tells users to hide this button * Our helm charts no longer hide the logout button *Testing Notes:* * The logout button is visible in the UI * When clicked, the user no longer has access to Optimize * When clicked, the user no longer has access to Identity |
| Fix Version/s | New: 3.10.0-alpha5 [ 17995 ] | |
| Fix Version/s | New: 3.9.4 [ 17996 ] |