Merge "Don't load user role assignment or groups tabs for non-admins" into stable/victoria

1 files changed, 8 insertions, 0 deletions

diff --git a/openstack_dashboard/dashboards/identity/users/tabs.py b/openstack_dashboard/dashboards/identity/users/tabs.py
index 30bcd0a3d..fe8fa3ba6 100644
--- a/openstack_dashboard/dashboards/identity/users/tabs.py
+++ b/openstack_dashboard/dashboards/identity/users/tabs.py
@@ -90,6 +90,10 @@ class RoleAssignmentsTab(tabs.TableTab):
     template_name = "horizon/common/_detail_table.html"
     preload = False
 
+    def allowed(self, request):
+        return policy.check((("identity", "identity:list_role_assignments"),),
+                            self.request)
+
     def get_roleassignmentstable_data(self):
         user = self.tab_group.kwargs['user']
 
@@ -136,6 +140,10 @@ class GroupsTab(tabs.TableTab):
     template_name = "horizon/common/_detail_table.html"
     preload = False
 
+    def allowed(self, request):
+        return policy.check((("identity", "identity:list_groups"),),
+                            self.request)
+
     def get_groupstable_data(self):
         user_groups = []
         user = self.tab_group.kwargs['user']