Skip to content

Display unauthorized groups in admin area groups list page

What does this MR do and why?

Users with custom admin roles having the read_admin_groups permission should be able to view all groups in the admin area.

This MR updates the admin area groups list Vue component to use adminGroups GraphQL field instead of groups. adminGroups returns all groups (GroupType by default), including those the current user isn't a member of (as GroupMinimalAccess type).

References

Allow read-only access to `Admin Area > Project... (#557844 - closed)

Screenshots or screen recordings

Before After
Screenshot_2025-08-08_at_8.27.08_AM Screenshot_2025-08-04_at_4.36.41_PM

How to set up and validate locally

  1. Enable custom_admin_roles, and read_admin_groups feature flags
  2. Login with an admin, enable admin mode (doc), enter admin mode, and go to http://localhost:9393/admin/application_settings/roles_and_permissions/
  3. Create a custom admin role with View Groups permissions
  4. Assign the custom admin role to a non-admin user (doc)
  5. Login with the user
  6. Go to Admin area groups page and verify that groups the user is not a member of are displayed in the list.

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Eugie Limpin

Merge request reports

Loading