[AIRAVATA-3487] BUG: An admin user created a SSH with READ access and. GRP with MANAGE SHARING for admin group

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Component/s: Django Portal
• Environment: https://testdrive.airavata.org/
• Assignee: Marcus Christie
• Reporter: Eroma
• Created: 13/Jul/21 17:35
• Updated: 17/Jul/21 07:55
• Resolved: 13/Jul/21 21:57

Description

1. An admin group user (eroma2016) created a key with ADMIN users having READ access
2. Then created a GRP, where admin users has MANAGE_SHARING
3. When another admin user logs in (tdaadmin) that user cannot change the key or add new compute resources but when refreshed can do both.
4. Shouldn't this be disabled?