Image Module - Groups
Overview
The Image Module is responsible for managing container images used throughout the system.
An image represents a Docker container image that can be deployed and executed within Kubernetes or other container orchestration environments. The module serves as a centralized location for registering, maintaining, and managing container images that are used by various workloads within the platform.
The Groups page of the Image Module allows administrators to manage group permissions for the Image module.
By default, the page displays only groups that already have at least one permission assigned for the Image module. Groups are displayed in a paginated list.
When Edit Mode is enabled, all groups in the system are displayed, regardless of whether they currently have any permissions for the Image module. Administrators can then assign, update, or remove Image module permissions.
Prerequisites
Before managing Image module group permissions, ensure that:
- You have administrator privileges.
- Groups have already been created.
Viewing Groups
When the page is opened:
- Groups are displayed in a paginated table.
- Only groups with at least one permission in the Image module are shown.
- Each row displays the group's current Image module permissions.
Edit Mode
Administrators can enable Edit Mode to modify group permissions.
When Edit Mode is enabled:
- All groups in the system are displayed.
- Image module permissions become editable.
- Permission changes are stored locally until they are saved.
- No changes are applied immediately.
Permission Assignment
Permissions can be assigned or removed directly from the group's row.
Selecting or deselecting a permission immediately updates the local state.
Changes remain pending until the administrator clicks Save.
Access Requirements
To access this page, the user must have the ACL permission for the Images module.
The ACL permission allows users to manage authorization settings for the Images module. Users without this permission cannot access this page unless they have administrator privileges.
Users without the required permission cannot view this page and will receive the following authorization error:
Access Denied
You don't have access to this resource.
Available Permissions
The following permissions are available within the Image module.
| Permission | Description |
|---|---|
| GET | Allows the group to view the list of registered container images. Groups without this permission cannot access the Image module or view registered images. |
| CREATE | Allows members of the group to register new container images. |
| UPDATE | Allows members of the group to modify existing container images. |
| DELETE | Allows members of the group to delete registered container images. |
| ACL | (Access Control List) Allows the group to manage permissions for other groups within the Image module. Groups without this permission cannot modify group permissions in the Image module. |
Saving Changes
After permission changes have been made:
- Review the pending changes.
- Click Save.
- Only modified permissions are sent to the server.
- Once the request succeeds, the new permissions become effective.
Reset Changes
Clicking Reset discards all unsaved modifications.
The permission list is restored to its last saved state.
No requests are sent to the server when Reset is used.
Validation
The system validates all permission changes before saving.
Permission updates are persisted only after a successful save operation.
Permission Dependencies
Having the ACL permission in the Image module alone is not sufficient to manage group permissions.
To manage groups within the Image module, the administrator must also have at least the GET permission in the Groups Module.
Without the Groups Module GET permission:
- Groups cannot be retrieved.
- Image module group permissions cannot be managed.
- The operation results in an authorization error.
This dependency exists because Image module group management requires access to group information provided by the Groups module.
Notes
- Permission changes are stored locally until Save is clicked.
- Reset discards all unsaved changes.
- Only modified permissions are submitted to the server.
- The group list is displayed using pagination for better performance.