[Security] Role without edit model access allows to edit model [Solved]

Support
1

Hello everyone! I’m running a fresh install of Cockpit 2.8.5. After creating a user with a role that does not have access to edit models, I can still edit the model with that user. Are there any additional steps required to restrict the user from editing a collection other than unchecking “edit model” for the collection under the user’s role?

Edit: Just to be clear, I’m referring to edit the model itself, not the items.

2

Nevermind, I just figure out that the “Manage Model” toggle takes precedence over the individual “Edit Model”

3

How you solved it can you please explain it in detail. :slightly_smiling_face: