{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/17381","repository_url":"https://api.github.com/repos/openshift/origin","labels_url":"https://api.github.com/repos/openshift/origin/issues/17381/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/17381/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/17381/events","html_url":"https://github.com/openshift/origin/issues/17381","id":275341074,"number":17381,"title":"oc who-can don't show the expected result","user":{"login":"jorgemoralespou","id":78350,"avatar_url":"https://avatars0.githubusercontent.com/u/78350?v=4","gravatar_id":"","url":"https://api.github.com/users/jorgemoralespou","html_url":"https://github.com/jorgemoralespou","followers_url":"https://api.github.com/users/jorgemoralespou/followers","following_url":"https://api.github.com/users/jorgemoralespou/following{/other_user}","gists_url":"https://api.github.com/users/jorgemoralespou/gists{/gist_id}","starred_url":"https://api.github.com/users/jorgemoralespou/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jorgemoralespou/subscriptions","organizations_url":"https://api.github.com/users/jorgemoralespou/orgs","repos_url":"https://api.github.com/users/jorgemoralespou/repos","events_url":"https://api.github.com/users/jorgemoralespou/events{/privacy}","received_events_url":"https://api.github.com/users/jorgemoralespou/received_events","type":"User","site_admin":false},"labels":[{"id":200493322,"url":"https://api.github.com/repos/openshift/origin/labels/component/cli","name":"component/cli","color":"0052cc","default":false},{"id":118251699,"url":"https://api.github.com/repos/openshift/origin/labels/kind/bug","name":"kind/bug","color":"fc2929","default":false},{"id":210151912,"url":"https://api.github.com/repos/openshift/origin/labels/priority/P2","name":"priority/P2","color":"fbca04","default":false}],"state":"open","locked":false,"assignee":{"login":"juanvallejo","id":3902875,"avatar_url":"https://avatars2.githubusercontent.com/u/3902875?v=4","gravatar_id":"","url":"https://api.github.com/users/juanvallejo","html_url":"https://github.com/juanvallejo","followers_url":"https://api.github.com/users/juanvallejo/followers","following_url":"https://api.github.com/users/juanvallejo/following{/other_user}","gists_url":"https://api.github.com/users/juanvallejo/gists{/gist_id}","starred_url":"https://api.github.com/users/juanvallejo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/juanvallejo/subscriptions","organizations_url":"https://api.github.com/users/juanvallejo/orgs","repos_url":"https://api.github.com/users/juanvallejo/repos","events_url":"https://api.github.com/users/juanvallejo/events{/privacy}","received_events_url":"https://api.github.com/users/juanvallejo/received_events","type":"User","site_admin":false},"assignees":[{"login":"juanvallejo","id":3902875,"avatar_url":"https://avatars2.githubusercontent.com/u/3902875?v=4","gravatar_id":"","url":"https://api.github.com/users/juanvallejo","html_url":"https://github.com/juanvallejo","followers_url":"https://api.github.com/users/juanvallejo/followers","following_url":"https://api.github.com/users/juanvallejo/following{/other_user}","gists_url":"https://api.github.com/users/juanvallejo/gists{/gist_id}","starred_url":"https://api.github.com/users/juanvallejo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/juanvallejo/subscriptions","organizations_url":"https://api.github.com/users/juanvallejo/orgs","repos_url":"https://api.github.com/users/juanvallejo/repos","events_url":"https://api.github.com/users/juanvallejo/events{/privacy}","received_events_url":"https://api.github.com/users/juanvallejo/received_events","type":"User","site_admin":false}],"milestone":null,"comments":0,"created_at":"2017-11-20T12:36:23Z","updated_at":"2017-11-23T01:57:03Z","closed_at":null,"author_association":"NONE","body":"I have 2 users user01 and user02. user01 has created a project my-project to which he is admin. user01 runs oc policy add-role-to-user view user02. user02 can now see my-project.\r\n\r\nNow, user01 wants to see a list of users that can look at the contents of his project. He expects to see a list that includes himself and user02. But what he gets is the below:\r\n\r\n```\r\n$ oc policy who-can view project/my-project\r\nNamespace: my-project\r\nVerb:      view\r\nResource:  project/my-project\r\n\r\nUsers:  admin\r\n        system:admin\r\n\r\nGroups: system:cluster-admins\r\n        system:masters\r\n```\r\n\r\nWhile if I list the rolebindings I see it:\r\n\r\n```\r\n$ oc get rolebinding\r\nNAME                    ROLE                    USERS            GROUPS                          SERVICE ACCOUNTS   SUBJECTS\r\nadmin                   /admin                  user01\r\nsystem:deployers        /system:deployer                                                         deployer\r\nsystem:image-builders   /system:image-builder                                                    builder\r\nsystem:image-pullers    /system:image-puller                     system:serviceaccounts:user01\r\nview                    /view                      user02\r\n```\r\n\r\nExpected result would be that with __who-can__ I would be able to see the expected result."},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/346517014","html_url":"https://github.com/openshift/origin/issues/17381#issuecomment-346517014","issue_url":"https://api.github.com/repos/openshift/origin/issues/17381","id":346517014,"user":{"login":"liggitt","id":980082,"avatar_url":"https://avatars0.githubusercontent.com/u/980082?v=4","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false},"created_at":"2017-11-23T01:57:03Z","updated_at":"2017-11-23T01:57:03Z","author_association":"MEMBER","body":"`view` is not an api verb. also, `who-can` takes the resource name as a separate arg.\r\n\r\n`oc policy who-can get project my-project` would show what you expect"}}
{"actor":{"display_login":"liggitt"}}