Rajendra kadam
8a8fb685a2
**Related issue:** Resolves #48077 Removes the admin/maintainer role gate from the "Show managed account" host action so observers see it too. The backend (`GetHostManagedAccountPassword`) authorizes any user who can read the host, so observers can already retrieve the managed local account password via the API — the UI gate only hid the action. `canShowManagedAccount` now matches the other "show secret" host actions (disk encryption key, Recovery Lock password), which are not role-gated; the premium / macOS / connected-to-Fleet-MDM / ADE-enrollment / managed-account-status conditions are unchanged. Before (global observer, ADE-enrolled macOS host with a verified managed account): <img src="https://raw.githubusercontent.com/raju249/fleet/screenshots-48077/before.png" width="900" alt="Before: observer's Actions menu without Show managed account" /> After (same host, same observer): <img src="https://raw.githubusercontent.com/raju249/fleet/screenshots-48077/after.png" width="900" alt="After: observer's Actions menu with Show managed account" /> # Checklist for submitter - [x] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`. See [Changes files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files) for more information. ## Testing - [x] Added/updated automated tests — two cases in the existing "Show managed account action" block asserting the action renders for a global observer and a team observer (they fail against the old gate). - [x] QA'd all new/changed functionality manually — ran a local server with a seeded ADE-enrolled macOS host carrying a verified managed local account row; logged in as a global observer: the action was absent before the change and present after (screenshots above), and opening the modal shows the managed account credentials, matching what the API already returns to observers. <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Bug Fixes** * Expanded access to the **Show managed account** action for users with observer-level host read permissions. * The managed account option now appears correctly for global observers and team observers when other eligibility checks are met. * Improved consistency between what the interface shows and what backend permissions allow. <!-- end of auto-generated comment: release notes by coderabbit.ai -->
179 B
179 B
- Fixed observers not seeing the "Show managed account" action on a macOS host's details page, even though the API already allows them to view the managed local account password.