UI - Create/Delete bucket button and create bucket form always enabled

[vherrlein]

Within the Administrator section under Buckets, even if the policy deny admin:* action on all resources, the create bucket button and create bucket form are always enabled / visible.

Expected Behavior

• The create button should be disabled with a tooltip message.
• If user tries to force going to /buckets/add-bucket route, an error message should be displayed

Current Behavior

• The create button should be disabled with a tooltip message.
• If user tries to force going to /buckets/add-bucket route, an error message should be displayed

Possible Solution

Maybe reviewing the following piece of code to implement relevant validations:

console/web-app/src/screens/Console/kbar-actions.tsx

Line 55 in adfc960

const a: Action = {

Steps to Reproduce (for bugs)

1. Login to the console with a user having the consoleAdmin policy
2. Create a bucket MyTest
3. Create a user MyUser
4. Create a policy with the following infos:
   • Name: MyTestPolicy
   • Policy:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Deny",
            "Action": [
                "admin:*"
            ]
        },
        {
            "Effect": "Deny",
            "Action": [
                "s3:PutLifecycleConfiguration",
                "s3:ReplicateDelete",
                "s3:ReplicateObject",
                "s3:CreateBucket",
                "s3:DeleteBucket",
                "s3:PutBucketPolicy",
                "s3:PutEncryptionConfiguration",
                "s3:PutReplicationConfiguration",
                "s3:DeleteBucketPolicy",
                "s3:ForceDeleteBucket"
            ],
            "Resource": [
                "arn:aws:s3:::*"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:*"
            ],
            "Resource": [
                "arn:aws:s3:::MyTest/*"
            ]
        }
    ]
}

5. Assign the policy MyTestPolicy to the user MyTest
6. Login to the console with th user MyTest
7. Navigate to Adminnitrator > Buckets
8. Tries to create a new bucket

Context

Regression

Your Environment

• MinIO version used (minio --version): 2024-07-31T05:46:26Z
• Server setup and configuration: Kubernetes 1.21, tenant deploy with the operator
• Operating System and version (uname -a): N/A